ALSA-2026:70402

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2026-70402.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:70402
Related
CVE (20)
Published
2026-09-22T00:00:00Z
Modified
2026-09-23T15:11:39Z
Summary
Important: kernel security, bug fix, and enhancement update
Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
  • kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120)
  • kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214)
  • kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082)
  • kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)
  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)
  • kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)
  • kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)
  • kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)
  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)
  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)
  • kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256)
  • kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254)
  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)
  • kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975)
  • kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947)
  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)
  • kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)
  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)
  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

Bug Fix(es) and Enhancement(s):

  • Intel IOMMU: possible circular locking dependency (JIRA:AlmaLinux-243217)
  • xfs: repeated xfs_trans_cancel called from xfs_iomap_write_direct (JIRA:AlmaLinux-251578)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8
bpftool

Package

Name
bpftool
Purl
pkg:rpm/almalinux/bpftool

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel

Package

Name
kernel
Purl
pkg:rpm/almalinux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-abi-stablelists

Package

Name
kernel-abi-stablelists
Purl
pkg:rpm/almalinux/kernel-abi-stablelists

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-core

Package

Name
kernel-core
Purl
pkg:rpm/almalinux/kernel-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-cross-headers

Package

Name
kernel-cross-headers
Purl
pkg:rpm/almalinux/kernel-cross-headers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-debug

Package

Name
kernel-debug
Purl
pkg:rpm/almalinux/kernel-debug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-debug-core

Package

Name
kernel-debug-core
Purl
pkg:rpm/almalinux/kernel-debug-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-debug-devel

Package

Name
kernel-debug-devel
Purl
pkg:rpm/almalinux/kernel-debug-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-debug-modules

Package

Name
kernel-debug-modules
Purl
pkg:rpm/almalinux/kernel-debug-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-debug-modules-extra

Package

Name
kernel-debug-modules-extra
Purl
pkg:rpm/almalinux/kernel-debug-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-devel

Package

Name
kernel-devel
Purl
pkg:rpm/almalinux/kernel-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-doc

Package

Name
kernel-doc
Purl
pkg:rpm/almalinux/kernel-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-headers

Package

Name
kernel-headers
Purl
pkg:rpm/almalinux/kernel-headers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-modules

Package

Name
kernel-modules
Purl
pkg:rpm/almalinux/kernel-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-modules-extra

Package

Name
kernel-modules-extra
Purl
pkg:rpm/almalinux/kernel-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-tools

Package

Name
kernel-tools
Purl
pkg:rpm/almalinux/kernel-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-tools-libs

Package

Name
kernel-tools-libs
Purl
pkg:rpm/almalinux/kernel-tools-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-tools-libs-devel

Package

Name
kernel-tools-libs-devel
Purl
pkg:rpm/almalinux/kernel-tools-libs-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-zfcpdump

Package

Name
kernel-zfcpdump
Purl
pkg:rpm/almalinux/kernel-zfcpdump

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-zfcpdump-core

Package

Name
kernel-zfcpdump-core
Purl
pkg:rpm/almalinux/kernel-zfcpdump-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-zfcpdump-devel

Package

Name
kernel-zfcpdump-devel
Purl
pkg:rpm/almalinux/kernel-zfcpdump-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-zfcpdump-modules

Package

Name
kernel-zfcpdump-modules
Purl
pkg:rpm/almalinux/kernel-zfcpdump-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
kernel-zfcpdump-modules-extra

Package

Name
kernel-zfcpdump-modules-extra
Purl
pkg:rpm/almalinux/kernel-zfcpdump-modules-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
perf

Package

Name
perf
Purl
pkg:rpm/almalinux/perf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"
python3-perf

Package

Name
python3-perf
Purl
pkg:rpm/almalinux/python3-perf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.18.0-553.166.1.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:70402.json"