# RHSA-2026:76739: Security update for 72 packages RHSA-2026:76739, released October 9, 2026, fixes 38 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/rhsa-2026-76739 - Platform: Linux - Released: Oct 9, 2026 - Priority: Urgent (Closes CVE-2026-89972, rated Critical) - CVEs: 38, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2026:76739 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k](https://patchblox.com/security/data/product/linux/kernel-rt-64k.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-debug](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | | [rv](https://patchblox.com/security/data/product/linux/rv.md) | RHEL 9 | 0:5.14.0-687.55.1.el9_8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-89972](https://patchblox.com/security/data/cve/CVE-2026-89972.md) | Urgent | nvme: add missing SRCU grace period in error path | 9.8 | 0.0071 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-72099](https://patchblox.com/security/data/cve/CVE-2026-72099.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0055 | | | [CVE-2026-74746](https://patchblox.com/security/data/cve/CVE-2026-74746.md) | High | netfilter: flowtable: publish GC-visible tuple last | 9.8 | 0.0054 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | | | [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 | | | [CVE-2026-97417](https://patchblox.com/security/data/cve/CVE-2026-97417.md) | High | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | 8.8 | 0.0049 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-89481](https://patchblox.com/security/data/cve/CVE-2026-89481.md) | High | nvme-tcp: fix host memory disclosure on R2T for a read command | 8.8 | 0.0043 | | | [CVE-2026-89480](https://patchblox.com/security/data/cve/CVE-2026-89480.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few... | 8.8 | 0.0043 | | | [CVE-2026-53049](https://patchblox.com/security/data/cve/CVE-2026-53049.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0039 | | | [CVE-2026-74569](https://patchblox.com/security/data/cve/CVE-2026-74569.md) | High | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 9.8 | 0.0039 | | | [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 | | | [CVE-2026-64557](https://patchblox.com/security/data/cve/CVE-2026-64557.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_so... | 8.8 | 0.0029 | | | [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 | | | [CVE-2026-80792](https://patchblox.com/security/data/cve/CVE-2026-80792.md) | High | ipv6: fix use-after-free in ip6_finish_output2() | 8.1 | 0.0020 | | | [CVE-2026-45861](https://patchblox.com/security/data/cve/CVE-2026-45861.md) | High | gfs2: Fix slab-use-after-free in qd_put | 8.8 | 0.0019 | | | [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.3 | 0.0019 | | | [CVE-2026-72255](https://patchblox.com/security/data/cve/CVE-2026-72255.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0018 | | | [CVE-2025-40149](https://patchblox.com/security/data/cve/CVE-2025-40149.md) | High | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). | 8.8 | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0017 | | | [CVE-2026-90227](https://patchblox.com/security/data/cve/CVE-2026-90227.md) | High | nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() | 8.8 | 0.0017 | | | [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0016 | | | [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | | | [CVE-2026-63829](https://patchblox.com/security/data/cve/CVE-2026-63829.md) | High | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-68432](https://patchblox.com/security/data/cve/CVE-2026-68432.md) | High | vxlan: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 | | | [CVE-2026-74516](https://patchblox.com/security/data/cve/CVE-2026-74516.md) | High | KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active | 8.8 | 0.0014 | | | [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 | | | [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 | | | [CVE-2026-93288](https://patchblox.com/security/data/cve/CVE-2026-93288.md) | High | netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state | 8.8 | 0.0013 | | | [CVE-2026-46317](https://patchblox.com/security/data/cve/CVE-2026-46317.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0013 | | | [CVE-2026-80921](https://patchblox.com/security/data/cve/CVE-2026-80921.md) | High | KVM: s390: vsie: zero stale crypto bits | 8.8 | 0.0013 | | --- Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.