Skip to content
OpenAdvisories
High ALSA-2026:33685 4 CVEs

Important: kernel security, bug fix, and enhancement update

Published Jun 30, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
* kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
* kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
* kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)

Bug Fix(es) and Enhancement(s):

* CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887)
* tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 75

ReleasePackageFixed in
AlmaLinux · 10 kernel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel-matched 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-devel-matched 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-64k-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-cross-headers 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-devel-matched 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-debug-uki-virt 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-devel-matched 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-doc 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-headers 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-modules-extra-matched 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-debug 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-debug-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-debug-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-rt-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-tools 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-tools-libs 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-tools-libs-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-uki-virt 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-uki-virt-addons 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel-matched 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-core 6.12.0-211.29.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-extra 6.12.0-211.29.1.el10_2
AlmaLinux · 10 libperf 6.12.0-211.29.1.el10_2
AlmaLinux · 10 perf 6.12.0-211.29.1.el10_2
AlmaLinux · 10 python3-perf 6.12.0-211.29.1.el10_2
AlmaLinux · 10 rtla 6.12.0-211.29.1.el10_2
AlmaLinux · 10 rv 6.12.0-211.29.1.el10_2

Vulnerabilities 4

  • High 7.8
    CVE-2026-43279

    ALSA: usb-audio: Add sanity check for OOB writes at silencing

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packets in the implicit fb mode before the actual playback, we blindly assume that the received pac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-46090

    ALSA: aloop: Fix peer runtime UAF during format-change stop

    In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a running capture strea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-46176

    RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

    In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() mlx5_ib_dev_res_srq_init() allocates two SRQs, s0 and s1. When ib_create_srq() fails for s1, the error branch destroys s0 …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2026-46189

    RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

    In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc_ucontext(), so calling it before trigg…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-43279
  • report
    https://access.redhat.com/security/cve/CVE-2026-46090
  • report
    https://access.redhat.com/security/cve/CVE-2026-46176
  • report
    https://access.redhat.com/security/cve/CVE-2026-46189
  • report
    https://bugzilla.redhat.com/2467215
  • report
    https://bugzilla.redhat.com/2481980
  • report
    https://bugzilla.redhat.com/2482588
  • report
    https://bugzilla.redhat.com/2482594
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-33685.html