Linux · Security advisory · February 9, 2026
ELSA-2026-2282: Security update for 30 packages
ELSA-2026-2282, released February 9, 2026, fixes 8 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0053
44th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 1
High 7
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-abi-stablelists | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-core | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-cross-headers | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-core | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-devel | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-devel-matched | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-modules | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-modules-core | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-modules-extra | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-debug-uki-virt | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-devel | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-devel-matched | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-doc | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-headers | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-modules | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-modules-core | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-modules-extra | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-modules-extra-matched | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-tools | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-tools-libs | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-tools-libs-devel | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-uki-virt | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| kernel-uki-virt-addons | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| libperf | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| perf | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| python3-perf | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| rtla | ol 10 | 0:6.12.0-124.35.1.el10_1 |
| rv | ol 10 | 0:6.12.0-124.35.1.el10_1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-68811 | linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset... | 9.8 | 0.0053 | None reported | |
| High | CVE-2025-40133 | linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in m... | 8.1 | 0.0051 | None reported | |
| High | CVE-2025-39933 | smb: client: let recv_done verify data_offset, data_length and remaining_data_length | 7.8 | 0.0035 | None reported | |
| High | CVE-2025-38415 | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38403 | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-38730 | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 | None reported | |
| High | CVE-2025-40304 | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0014 | None reported | |
| High | CVE-2025-40322 | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0014 | None reported |
Showing 1 to 8 of 8
1