Linux · Security advisory · July 16, 2026

ELSA-2026-25191: Security update for 30 packages

ELSA-2026-25191, released July 16, 2026, fixes 6 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0073
54th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.34.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.34.1.el10_2
kernel-coreol 100:6.12.0-211.34.1.el10_2
kernel-cross-headersol 100:6.12.0-211.34.1.el10_2
kernel-debugol 100:6.12.0-211.34.1.el10_2
kernel-debug-coreol 100:6.12.0-211.34.1.el10_2
kernel-debug-develol 100:6.12.0-211.34.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.34.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.34.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.34.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.34.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.34.1.el10_2
kernel-develol 100:6.12.0-211.34.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.34.1.el10_2
kernel-docol 100:6.12.0-211.34.1.el10_2
kernel-headersol 100:6.12.0-211.34.1.el10_2
kernel-modulesol 100:6.12.0-211.34.1.el10_2
kernel-modules-coreol 100:6.12.0-211.34.1.el10_2
kernel-modules-extraol 100:6.12.0-211.34.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.34.1.el10_2
kernel-toolsol 100:6.12.0-211.34.1.el10_2
kernel-tools-libsol 100:6.12.0-211.34.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.34.1.el10_2
kernel-uki-virtol 100:6.12.0-211.34.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.34.1.el10_2
libperfol 100:6.12.0-211.34.1.el10_2
perfol 100:6.12.0-211.34.1.el10_2
python3-perfol 100:6.12.0-211.34.1.el10_2
rtlaol 100:6.12.0-211.34.1.el10_2
rvol 100:6.12.0-211.34.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-43501 ipv6: rpl: reserve mac_len headroom when recompressed SRH grows 9.8 0.0073 None reported
High CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() 9.8 0.0069 None reported
High CVE-2026-31467 erofs: add GFP_NOIO in the bio completion if needed 8.8 0.0038 None reported
High CVE-2026-31532 can: raw: fix ro->uniq use-after-free in raw_rcv() 8.8 0.0017 None reported
High CVE-2026-31581 ALSA: 6fire: fix use-after-free on disconnect 8.8 0.0013 None reported
High CVE-2026-46054 selinux: fix overlayfs mmap() and mprotect() access checks 8.8 0.0012 None reported
Showing 1 to 6 of 6 1