Linux · Security advisory · February 2, 2026

ELSA-2026-1690: Security update for 30 packages

ELSA-2026-1690, released February 2, 2026, fixes 19 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
19
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 19 CVEs

Patch now 0 Urgent 1 High 18 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-124.31.1.el10_1
kernel-abi-stablelistsol 100:6.12.0-124.31.1.el10_1
kernel-coreol 100:6.12.0-124.31.1.el10_1
kernel-cross-headersol 100:6.12.0-124.31.1.el10_1
kernel-debugol 100:6.12.0-124.31.1.el10_1
kernel-debug-coreol 100:6.12.0-124.31.1.el10_1
kernel-debug-develol 100:6.12.0-124.31.1.el10_1
kernel-debug-devel-matchedol 100:6.12.0-124.31.1.el10_1
kernel-debug-modulesol 100:6.12.0-124.31.1.el10_1
kernel-debug-modules-coreol 100:6.12.0-124.31.1.el10_1
kernel-debug-modules-extraol 100:6.12.0-124.31.1.el10_1
kernel-debug-uki-virtol 100:6.12.0-124.31.1.el10_1
kernel-develol 100:6.12.0-124.31.1.el10_1
kernel-devel-matchedol 100:6.12.0-124.31.1.el10_1
kernel-docol 100:6.12.0-124.31.1.el10_1
kernel-headersol 100:6.12.0-124.31.1.el10_1
kernel-modulesol 100:6.12.0-124.31.1.el10_1
kernel-modules-coreol 100:6.12.0-124.31.1.el10_1
kernel-modules-extraol 100:6.12.0-124.31.1.el10_1
kernel-modules-extra-matchedol 100:6.12.0-124.31.1.el10_1
kernel-toolsol 100:6.12.0-124.31.1.el10_1
kernel-tools-libsol 100:6.12.0-124.31.1.el10_1
kernel-tools-libs-develol 100:6.12.0-124.31.1.el10_1
kernel-uki-virtol 100:6.12.0-124.31.1.el10_1
kernel-uki-virt-addonsol 100:6.12.0-124.31.1.el10_1
libperfol 100:6.12.0-124.31.1.el10_1
perfol 100:6.12.0-124.31.1.el10_1
python3-perfol 100:6.12.0-124.31.1.el10_1
rtlaol 100:6.12.0-124.31.1.el10_1
rvol 100:6.12.0-124.31.1.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-40251 devlink: rate: Unset parent pointer in devl_rate_nodes_destroy 9.8 0.0017 None reported
High CVE-2025-40135 ipv6: use RCU in ip6_xmit() 8.4 0.0071 None reported
High CVE-2025-40158 ipv6: use RCU in ip6_output() 8.1 0.0056 None reported
High CVE-2025-40258 mptcp: fix race condition in mptcp_schedule_work() 9.8 0.0050 None reported
High CVE-2025-40271 linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... 7.8 0.0049 None reported
High CVE-2025-68301 net: atlantic: fix fragment overflow handling in RX path 9.8 0.0047 None reported
High CVE-2025-40301 Bluetooth: hci_event: validate skb length for unknown CC opcode 7.8 0.0027 None reported
High CVE-2025-40318 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... 8.8 0.0027 None reported
High CVE-2025-37819 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() 7.8 0.0023 None reported
High CVE-2025-40154 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.8 0.0021 None reported
High CVE-2025-40294 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() 7.8 0.0020 None reported
High CVE-2025-38022 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem 7.8 0.0020 None reported
High CVE-2025-40170 net: use dst_dev_rcu() in sk_setup_caps() 8.1 0.0019 None reported
High CVE-2025-38453 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0019 None reported
High CVE-2025-68305 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 7.8 0.0019 None reported
High CVE-2025-38349 eventpoll: don't decrement ep refcount while still holding the ep mutex 8.4 0.0018 None reported
High CVE-2025-38568 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing 7.8 0.0018 None reported
High CVE-2025-40248 vsock: Ignore signal/timeout on connect() if already established 7.8 0.0017 None reported
High CVE-2025-38731 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 7.8 0.0016 None reported
Showing 1 to 19 of 19 1