Linux · Security advisory · June 29, 2026

ELSA-2026-21556: Security update for 29 packages

ELSA-2026-21556, released June 29, 2026, fixes 20 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
20
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0159
75th percentile

Priority of the 20 CVEs

Patch now 0 Urgent 1 High 19 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.17.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.17.1.el9_8
kernel-coreol 90:5.14.0-687.17.1.el9_8
kernel-cross-headersol 90:5.14.0-687.17.1.el9_8
kernel-debugol 90:5.14.0-687.17.1.el9_8
kernel-debug-coreol 90:5.14.0-687.17.1.el9_8
kernel-debug-develol 90:5.14.0-687.17.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.17.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.17.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.17.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.17.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.17.1.el9_8
kernel-develol 90:5.14.0-687.17.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.17.1.el9_8
kernel-docol 90:5.14.0-687.17.1.el9_8
kernel-headersol 90:5.14.0-687.17.1.el9_8
kernel-modulesol 90:5.14.0-687.17.1.el9_8
kernel-modules-coreol 90:5.14.0-687.17.1.el9_8
kernel-modules-extraol 90:5.14.0-687.17.1.el9_8
kernel-toolsol 90:5.14.0-687.17.1.el9_8
kernel-tools-libsol 90:5.14.0-687.17.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.17.1.el9_8
kernel-uki-virtol 90:5.14.0-687.17.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.17.1.el9_8
libperfol 90:5.14.0-687.17.1.el9_8
perfol 90:5.14.0-687.17.1.el9_8
python3-perfol 90:5.14.0-687.17.1.el9_8
rtlaol 90:5.14.0-687.17.1.el9_8
rvol 90:5.14.0-687.17.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-68366 linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... 8.8 0.0020 None reported
High CVE-2026-23455 kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... 9.1 0.0159 None reported
High CVE-2026-46195 smb: client: validate dacloffset before building DACL pointers 9.8 0.0068 None reported
High CVE-2026-31685 netfilter: ip6t_eui64: reject invalid MAC header for all packets 9.4 0.0049 None reported
High CVE-2026-43158 linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs... 8.8 0.0047 None reported
High CVE-2026-43190 kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... 8.2 0.0046 None reported
High CVE-2026-31709 smb: client: validate the whole DACL before rewriting it in cifsacl 8.8 0.0035 None reported
High CVE-2026-31408 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold 8.8 0.0032 None reported
High CVE-2026-43110 linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev... 8.8 0.0027 None reported
High CVE-2026-43051 linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intu... 8.1 0.0026 None reported
High CVE-2025-38653 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al 7.8 0.0018 None reported
High CVE-2026-43303 mm/page_alloc: clear page->private in free_pages_prepare() 7.8 0.0017 None reported
High CVE-2026-23392 netfilter: nf_tables: release flowtable after rcu grace period on error 8.8 0.0017 None reported
High CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set 7.8 0.0016 None reported
High CVE-2025-68183 linux: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or... 7.8 0.0015 None reported
High CVE-2025-68724 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... 8.1 0.0014 None reported
High CVE-2026-43027 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e... 7.8 0.0013 None reported
High CVE-2026-43020 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load... 7.8 0.0013 None reported
High CVE-2026-31684 net: sched: act_csum: validate nested VLAN headers 7.8 0.0012 None reported
High CVE-2026-43023 kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_c... 7.8 0.0010 None reported
Showing 1 to 20 of 20 1