GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
alsa-2026:66325
Vulnerability from osv_almalinux
Published
2026-09-10 00:00
Modified
2026-09-10 09:25
Summary
Important: kernel security, bug fix, and enhancement update
Details

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
  • kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
  • kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
  • kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
  • kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
  • kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
  • kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
  • kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
  • kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
  • kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
  • kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
  • kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)
  • kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
  • kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
  • kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)

Bug Fix(es) and Enhancement(s):

  • scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [almalinux 8.6.z] (JIRA:AlmaLinux-194117)
  • gfs2: harden gfs2_glock_hold [AlmaLinux-8] (JIRA:AlmaLinux-240340)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References
https://access.redhat.com/errata/RHSA-2026:66325 ADVISORY
https://access.redhat.com/security/cve/CVE-2025-68745 REPORT
https://access.redhat.com/security/cve/CVE-2026-46149 REPORT
https://access.redhat.com/security/cve/CVE-2026-52917 REPORT
https://access.redhat.com/security/cve/CVE-2026-52942 REPORT
https://access.redhat.com/security/cve/CVE-2026-52986 REPORT
https://access.redhat.com/security/cve/CVE-2026-53091 REPORT
https://access.redhat.com/security/cve/CVE-2026-53246 REPORT
https://access.redhat.com/security/cve/CVE-2026-63801 REPORT
https://access.redhat.com/security/cve/CVE-2026-63971 REPORT
https://access.redhat.com/security/cve/CVE-2026-64015 REPORT
https://access.redhat.com/security/cve/CVE-2026-64113 REPORT
https://access.redhat.com/security/cve/CVE-2026-68117 REPORT
https://access.redhat.com/security/cve/CVE-2026-68300 REPORT
https://access.redhat.com/security/cve/CVE-2026-68315 REPORT
https://access.redhat.com/security/cve/CVE-2026-68376 REPORT
https://bugzilla.redhat.com/2425039 REPORT
https://bugzilla.redhat.com/2482566 REPORT
https://bugzilla.redhat.com/2492091 REPORT
https://bugzilla.redhat.com/2492115 REPORT
https://bugzilla.redhat.com/2492270 REPORT
https://bugzilla.redhat.com/2492397 REPORT
https://bugzilla.redhat.com/2492771 REPORT
https://bugzilla.redhat.com/2502254 REPORT
https://bugzilla.redhat.com/2502331 REPORT
https://bugzilla.redhat.com/2502380 REPORT
https://bugzilla.redhat.com/2502541 REPORT
https://bugzilla.redhat.com/2513253 REPORT
https://bugzilla.redhat.com/2513397 REPORT
https://bugzilla.redhat.com/2513408 REPORT
https://bugzilla.redhat.com/2513474 REPORT
https://errata.almalinux.org/8/ALSA-2026-66325.html ADVISORY
To clipboard 

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "bpftool"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-abi-stablelists"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-cross-headers"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-debug"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-debug-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-debug-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-debug-modules"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-debug-modules-extra"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-doc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-headers"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-modules"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-modules-extra"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-tools"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-tools-libs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-tools-libs-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-zfcpdump"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-zfcpdump-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-zfcpdump-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-zfcpdump-modules"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "kernel-zfcpdump-modules-extra"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "perf"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "python3-perf"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.18.0-553.162.1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "The kernel packages contain the Linux kernel, the core of any Linux operating system.  \n\nSecurity Fix(es):  \n\n  * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)\n  * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)\n  * kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)\n  * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)\n  * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)\n  * kernel: netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul (CVE-2026-52986)\n  * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)\n  * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)\n  * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)\n  * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)\n  * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)\n  * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)\n  * kernel: tipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)\n  * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)\n  * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [almalinux 8.6.z] (JIRA:AlmaLinux-194117)\n  * gfs2: harden gfs2_glock_hold [AlmaLinux-8] (JIRA:AlmaLinux-240340)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:66325",
  "modified": "2026-09-10T09:25:56Z",
  "published": "2026-09-10T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:66325"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2025-68745"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-46149"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-52917"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-52942"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-52986"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-53091"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-53246"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-63801"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-63971"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-64015"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-64113"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-68117"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-68300"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-68315"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-68376"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2425039"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2482566"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2492091"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2492115"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2492270"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2492397"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2492771"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2502254"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2502331"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2502380"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2502541"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2513253"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2513397"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2513408"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2513474"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2026-66325.html"
    }
  ],
  "related": [
    "CVE-2025-68745",
    "CVE-2026-46149",
    "CVE-2026-52942",
    "CVE-2026-52917",
    "CVE-2026-53091",
    "CVE-2026-52986",
    "CVE-2026-53246",
    "CVE-2026-63801",
    "CVE-2026-63971",
    "CVE-2026-64015",
    "CVE-2026-64113",
    "CVE-2026-68376",
    "CVE-2026-68117",
    "CVE-2026-68300",
    "CVE-2026-68315"
  ],
  "summary": "Important: kernel security, bug fix, and enhancement update"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.