ALSA-2026:68531

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2026-68531.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:68531
Related
Published
2026-09-17T00:00:00Z
Modified
2026-09-18T09:41:32Z
Summary
Important: kernel security update
Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
  • kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
  • kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
  • kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
  • kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)
  • kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)
  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)
  • kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
  • kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
  • kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)
  • kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
  • kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
  • kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
  • kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
  • kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
  • kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
  • kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
  • kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)
  • kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8
bpftool

Package

Name
bpftool
Purl
pkg:rpm/almalinux/bpftool

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel

Package

Name
kernel
Purl
pkg:rpm/almalinux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-abi-stablelists

Package

Name
kernel-abi-stablelists
Purl
pkg:rpm/almalinux/kernel-abi-stablelists

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-core

Package

Name
kernel-core
Purl
pkg:rpm/almalinux/kernel-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-cross-headers

Package

Name
kernel-cross-headers
Purl
pkg:rpm/almalinux/kernel-cross-headers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-debug

Package

Name
kernel-debug
Purl
pkg:rpm/almalinux/kernel-debug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-debug-core

Package

Name
kernel-debug-core
Purl
pkg:rpm/almalinux/kernel-debug-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-debug-devel

Package

Name
kernel-debug-devel
Purl
pkg:rpm/almalinux/kernel-debug-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-debug-modules

Package

Name
kernel-debug-modules
Purl
pkg:rpm/almalinux/kernel-debug-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-debug-modules-extra

Package

Name
kernel-debug-modules-extra
Purl
pkg:rpm/almalinux/kernel-debug-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-devel

Package

Name
kernel-devel
Purl
pkg:rpm/almalinux/kernel-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-doc

Package

Name
kernel-doc
Purl
pkg:rpm/almalinux/kernel-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-headers

Package

Name
kernel-headers
Purl
pkg:rpm/almalinux/kernel-headers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-modules

Package

Name
kernel-modules
Purl
pkg:rpm/almalinux/kernel-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-modules-extra

Package

Name
kernel-modules-extra
Purl
pkg:rpm/almalinux/kernel-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-tools

Package

Name
kernel-tools
Purl
pkg:rpm/almalinux/kernel-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-tools-libs

Package

Name
kernel-tools-libs
Purl
pkg:rpm/almalinux/kernel-tools-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-tools-libs-devel

Package

Name
kernel-tools-libs-devel
Purl
pkg:rpm/almalinux/kernel-tools-libs-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-zfcpdump

Package

Name
kernel-zfcpdump
Purl
pkg:rpm/almalinux/kernel-zfcpdump

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-zfcpdump-core

Package

Name
kernel-zfcpdump-core
Purl
pkg:rpm/almalinux/kernel-zfcpdump-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-zfcpdump-devel

Package

Name
kernel-zfcpdump-devel
Purl
pkg:rpm/almalinux/kernel-zfcpdump-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-zfcpdump-modules

Package

Name
kernel-zfcpdump-modules
Purl
pkg:rpm/almalinux/kernel-zfcpdump-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
kernel-zfcpdump-modules-extra

Package

Name
kernel-zfcpdump-modules-extra
Purl
pkg:rpm/almalinux/kernel-zfcpdump-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
perf

Package

Name
perf
Purl
pkg:rpm/almalinux/perf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"
python3-perf

Package

Name
python3-perf
Purl
pkg:rpm/almalinux/python3-perf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.164.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:68531.json"