alsa-2026:68532
Vulnerability from osv_almalinux
Published
2026-09-17 00:00
Modified
2026-09-17 09:41
Summary
Important: kernel-rt security update
Details
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
- kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
- kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
- kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
- kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
- kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
- kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)
- kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)
- kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)
- kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
- kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
- kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)
- kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
- kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
- kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
- kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
- kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
- kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
- kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
- kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
- kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)
- kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
- kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-debug"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-debug-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-debug-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-debug-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-debug-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-rt-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-553.164.1.rt7.505.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. \n\nSecurity Fix(es): \n\n * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)\n * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)\n * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)\n * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)\n * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)\n * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)\n * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)\n * kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)\n * kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)\n * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)\n * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)\n * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)\n * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)\n * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)\n * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)\n * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)\n * kernel: ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)\n * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)\n * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)\n * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)\n * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)\n * kernel: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment (CVE-2026-68426)\n * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:68532",
"modified": "2026-09-17T09:41:11Z",
"published": "2026-09-17T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:68532"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-23103"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-31663"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-43233"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-43339"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-46266"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-46306"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-52920"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53075"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53131"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53176"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53192"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53223"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53228"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53239"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53268"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53275"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-63917"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-63919"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-63921"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64002"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-68143"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-68426"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-72298"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2436771"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2461462"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2467135"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2468102"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2484456"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2486463"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492112"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492295"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492733"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492741"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492747"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492770"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492779"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492792"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492811"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492841"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502363"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502368"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502412"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502434"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2513218"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2513477"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2516599"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2026-68532.html"
}
],
"related": [
"CVE-2026-23103",
"CVE-2026-31663",
"CVE-2026-43233",
"CVE-2026-43339",
"CVE-2026-46266",
"CVE-2026-46306",
"CVE-2026-52920",
"CVE-2026-53075",
"CVE-2026-53228",
"CVE-2026-53176",
"CVE-2026-53131",
"CVE-2026-53268",
"CVE-2026-53239",
"CVE-2026-53192",
"CVE-2026-53223",
"CVE-2026-53275",
"CVE-2026-64002",
"CVE-2026-63921",
"CVE-2026-63919",
"CVE-2026-63917",
"CVE-2026-68143",
"CVE-2026-68426",
"CVE-2026-72298"
],
"summary": "Important: kernel-rt security update"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…