Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053) * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-9.8.z] (JIRA:AlmaLinux-216251) * netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:AlmaLinux-236634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and othe
- Products
- kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-debug, kernel-debug-core, kernel-debug-modules, kernel-debug-modules-core
- Affected versions
- Not specified
- Fixed versions
- 5.14.0-687.51.1.el9_8
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 04:10 UTC · Revision 1
Source evidence
Important: kernel security, bug fix, and enhancement update
core-osv · Original sourcePublished 24 Sept 2026, 00:00 UTC
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053) * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-9.8.z] (JIRA:AlmaLinux-216251) * netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:AlmaLinux-236634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and othe
osv:ALSA-2026:71232
kernel
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-core
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-debug
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-debug-core
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-debug-modules
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-debug-modules-core
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-debug-modules-extra
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-modules
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-modules-core
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-64k-modules-extra
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-abi-stablelists
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-core
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-debug
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-debug-core
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-debug-modules
Fixed versions: 5.14.0-687.51.1.el9_8
kernel-debug-modules-core
Fixed versions: 5.14.0-687.51.1.el9_8
Complete source record
{
"id": "68fc02158cd8c998f0b968b1edf19710e35758785b03272f2c16391581228e02",
"url": "https://osv.dev/vulnerability/ALSA-2026%3A71232",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Important: kernel security, bug fix, and enhancement update",
"summary": "The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053) * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-9.8.z] (JIRA:AlmaLinux-216251) * netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:AlmaLinux-236634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and othe",
"evidence": "osv:ALSA-2026:71232",
"products": [
{
"name": {
"value": "kernel",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-core",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-debug",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-debug-core",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-debug-modules",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-debug-modules-core",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-debug-modules-extra",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-modules",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-modules-core",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-64k-modules-extra",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-abi-stablelists",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-core",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-core",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules-core",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.14.0-687.51.1.el9_8",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "ALSA-2026:71232",
"aliases": [
"ALSA-2026:71232"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/almalinux/kernel",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k",
"purl": "pkg:rpm/almalinux/kernel-64k",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-core",
"purl": "pkg:rpm/almalinux/kernel-64k-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-debug",
"purl": "pkg:rpm/almalinux/kernel-64k-debug",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-debug-core",
"purl": "pkg:rpm/almalinux/kernel-64k-debug-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-debug-modules",
"purl": "pkg:rpm/almalinux/kernel-64k-debug-modules",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-debug-modules-core",
"purl": "pkg:rpm/almalinux/kernel-64k-debug-modules-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-debug-modules-extra",
"purl": "pkg:rpm/almalinux/kernel-64k-debug-modules-extra",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-modules",
"purl": "pkg:rpm/almalinux/kernel-64k-modules",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-modules-core",
"purl": "pkg:rpm/almalinux/kernel-64k-modules-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-64k-modules-extra",
"purl": "pkg:rpm/almalinux/kernel-64k-modules-extra",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-abi-stablelists",
"purl": "pkg:rpm/almalinux/kernel-abi-stablelists",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-core",
"purl": "pkg:rpm/almalinux/kernel-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/almalinux/kernel-debug",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-debug-core",
"purl": "pkg:rpm/almalinux/kernel-debug-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-debug-modules",
"purl": "pkg:rpm/almalinux/kernel-debug-modules",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-687.51.1.el9_8"
}
]
}
],
"package": {
"name": "kernel-debug-modules-core",
"purl": "pkg:rpm/almalinux/kernel-debug-modules-core",
"ecosystem": "AlmaLinux:9"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:71232.json"
}
}
],
"modified": "2026-10-07T13:45:03.253657765Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2026:71232",
"https://access.redhat.com/security/cve/CVE-2026-23007",
"https://access.redhat.com/security/cve/CVE-2026-53005",
"https://access.redhat.com/security/cve/CVE-2026-63802",
"https://access.redhat.com/security/cve/CVE-2026-63831",
"https://access.redhat.com/security/cve/CVE-2026-64053",
"https://access.redhat.com/security/cve/CVE-2026-64383",
"https://access.redhat.com/security/cve/CVE-2026-64534",
"https://access.redhat.com/security/cve/CVE-2026-64564",
"https://access.redhat.com/security/cve/CVE-2026-68201",
"https://access.redhat.com/security/cve/CVE-2026-72261",
"https://access.redhat.com/security/cve/CVE-2026-80844",
"https://access.redhat.com/security/cve/CVE-2026-81000",
"https://access.redhat.com/security/cve/CVE-2026-89846",
"https://bugzilla.redhat.com/2432674",
"https://bugzilla.redhat.com/2492381",
"https://bugzilla.redhat.com/2502243",
"https://bugzilla.redhat.com/2502251",
"https://bugzilla.redhat.com/2502498",
"https://bugzilla.redhat.com/2507134",
"https://bugzilla.redhat.com/2507399",
"https://bugzilla.redhat.com/2510890",
"https://bugzilla.redhat.com/2513481",
"https://bugzilla.redhat.com/2516527",
"https://bugzilla.redhat.com/2528676",
"https://bugzilla.redhat.com/2532176",
"https://bugzilla.redhat.com/2535391",
"https://errata.almalinux.org/9/ALSA-2026-71232.html",
"https://www.redhat.com/security/data/cve/CVE-2026-74469.html"
]
},
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 95071,
"published_at": "2026-09-24T00:00:00+00:00"
}