{
  "fix": "ELSA-2026-50100",
  "url": "https://patchblox.com/security/fix/linux/elsa-2026-50100",
  "summary": "ELSA-2026-50100, released February 7, 2026, fixes 25 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 8 packages",
  "released": "2026-02-07T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-68192, rated Critical",
  "supported": true,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00611,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-50100.html",
  "appliesTo": [
    {
      "product": "kernel-uek",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-doc",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.352.5.el7uek",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-68192",
      "url": "https://patchblox.com/security/cve/CVE-2025-68192",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: qmi_wwan: initialize MAC header offset...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00611,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68241",
      "url": "https://patchblox.com/security/cve/CVE-2025-68241",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00466,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40277",
      "url": "https://patchblox.com/security/cve/CVE-2025-40277",
      "title": "drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40309",
      "url": "https://patchblox.com/security/cve/CVE-2025-40309",
      "title": "Bluetooth: SCO: Fix UAF on sco_conn_free",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40281",
      "url": "https://patchblox.com/security/cve/CVE-2025-40281",
      "title": "sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40259",
      "url": "https://patchblox.com/security/cve/CVE-2025-40259",
      "title": "scsi: sg: Do not sleep in atomic context",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40211",
      "url": "https://patchblox.com/security/cve/CVE-2025-40211",
      "title": "ACPI: video: Fix use-after-free in acpi_video_switch_brightness()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40331",
      "url": "https://patchblox.com/security/cve/CVE-2025-40331",
      "title": "sctp: Prevent TOCTOU out-of-bounds write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40283",
      "url": "https://patchblox.com/security/cve/CVE-2025-40283",
      "title": "Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40304",
      "url": "https://patchblox.com/security/cve/CVE-2025-40304",
      "title": "fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40322",
      "url": "https://patchblox.com/security/cve/CVE-2025-40322",
      "title": "fbdev: bitblit: bound-check glyph index in bit_putcs*",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40254",
      "url": "https://patchblox.com/security/cve/CVE-2025-40254",
      "title": "net: openvswitch: remove never-working support for setting nsh fields",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40264",
      "url": "https://patchblox.com/security/cve/CVE-2025-40264",
      "title": "be2net: pass wrb_params in case of OS2BMC",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40363",
      "url": "https://patchblox.com/security/cve/CVE-2025-40363",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipv6: fix field-spanning memcpy warning in...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40275",
      "url": "https://patchblox.com/security/cve/CVE-2025-40275",
      "title": "ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68185",
      "url": "https://patchblox.com/security/cve/CVE-2025-68185",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfs4_setup_readdir(): insufficient locking for -...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68194",
      "url": "https://patchblox.com/security/cve/CVE-2025-68194",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  media: imon: make send_packet() more robust  syz...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40083",
      "url": "https://patchblox.com/security/cve/CVE-2025-40083",
      "title": "net/sched: sch_qfq: Fix null-deref in agg_dequeue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40263",
      "url": "https://patchblox.com/security/cve/CVE-2025-40263",
      "title": "Input: cros_ec_keyb - fix an invalid memory access",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68229",
      "url": "https://patchblox.com/security/cve/CVE-2025-68229",
      "title": "scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40321",
      "url": "https://patchblox.com/security/cve/CVE-2025-40321",
      "title": "wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68245",
      "url": "https://patchblox.com/security/cve/CVE-2025-68245",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: netpoll: fix incorrect refcount handling ca...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68734",
      "url": "https://patchblox.com/security/cve/CVE-2025-68734",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  isdn: mISDN: hfcsusb: fix memory leak in hfcsusb...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40308",
      "url": "https://patchblox.com/security/cve/CVE-2025-40308",
      "title": "Bluetooth: bcsp: receive data only if registered",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68312",
      "url": "https://patchblox.com/security/cve/CVE-2025-68312",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usbnet: Prevents free active kevent  The root ca...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}