ALSA-2026:21706

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:21706
Related
Published
2026-05-28T00:00:00Z
Modified
2026-05-28T14:29:19.605105218Z
Summary
Important: kernel security update
Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nfconntrackh323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in scorecvframe() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nfconntrackhelper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacomintuosbt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8
bpftool

Package

Name
bpftool
Purl
pkg:rpm/almalinux/bpftool

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel

Package

Name
kernel
Purl
pkg:rpm/almalinux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-abi-stablelists

Package

Name
kernel-abi-stablelists
Purl
pkg:rpm/almalinux/kernel-abi-stablelists

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-core

Package

Name
kernel-core
Purl
pkg:rpm/almalinux/kernel-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-cross-headers

Package

Name
kernel-cross-headers
Purl
pkg:rpm/almalinux/kernel-cross-headers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-debug

Package

Name
kernel-debug
Purl
pkg:rpm/almalinux/kernel-debug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-debug-core

Package

Name
kernel-debug-core
Purl
pkg:rpm/almalinux/kernel-debug-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-debug-devel

Package

Name
kernel-debug-devel
Purl
pkg:rpm/almalinux/kernel-debug-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-debug-modules

Package

Name
kernel-debug-modules
Purl
pkg:rpm/almalinux/kernel-debug-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-debug-modules-extra

Package

Name
kernel-debug-modules-extra
Purl
pkg:rpm/almalinux/kernel-debug-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-devel

Package

Name
kernel-devel
Purl
pkg:rpm/almalinux/kernel-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-doc

Package

Name
kernel-doc
Purl
pkg:rpm/almalinux/kernel-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-headers

Package

Name
kernel-headers
Purl
pkg:rpm/almalinux/kernel-headers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-modules

Package

Name
kernel-modules
Purl
pkg:rpm/almalinux/kernel-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-modules-extra

Package

Name
kernel-modules-extra
Purl
pkg:rpm/almalinux/kernel-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-tools

Package

Name
kernel-tools
Purl
pkg:rpm/almalinux/kernel-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-tools-libs

Package

Name
kernel-tools-libs
Purl
pkg:rpm/almalinux/kernel-tools-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-tools-libs-devel

Package

Name
kernel-tools-libs-devel
Purl
pkg:rpm/almalinux/kernel-tools-libs-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-zfcpdump

Package

Name
kernel-zfcpdump
Purl
pkg:rpm/almalinux/kernel-zfcpdump

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-zfcpdump-core

Package

Name
kernel-zfcpdump-core
Purl
pkg:rpm/almalinux/kernel-zfcpdump-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-zfcpdump-devel

Package

Name
kernel-zfcpdump-devel
Purl
pkg:rpm/almalinux/kernel-zfcpdump-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-zfcpdump-modules

Package

Name
kernel-zfcpdump-modules
Purl
pkg:rpm/almalinux/kernel-zfcpdump-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
kernel-zfcpdump-modules-extra

Package

Name
kernel-zfcpdump-modules-extra
Purl
pkg:rpm/almalinux/kernel-zfcpdump-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
perf

Package

Name
perf
Purl
pkg:rpm/almalinux/perf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"
python3-perf

Package

Name
python3-perf
Purl
pkg:rpm/almalinux/python3-perf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.126.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:21706.json"