ELSA-2026-27789: Security update for 29 packages

ELSA-2026-27789, released June 23, 2026, fixes 17 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0064

50th percentile

Priority of the 17 CVEs

Patch now 0
                                Urgent 0
                                High 17
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	ol 9	0:5.14.0-687.17.1.el9_8
kernel-abi-stablelists	ol 9	0:5.14.0-687.17.1.el9_8
kernel-core	ol 9	0:5.14.0-687.17.1.el9_8
kernel-cross-headers	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-core	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-devel	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-devel-matched	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-modules	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-modules-core	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-modules-extra	ol 9	0:5.14.0-687.17.1.el9_8
kernel-debug-uki-virt	ol 9	0:5.14.0-687.17.1.el9_8
kernel-devel	ol 9	0:5.14.0-687.17.1.el9_8
kernel-devel-matched	ol 9	0:5.14.0-687.17.1.el9_8
kernel-doc	ol 9	0:5.14.0-687.17.1.el9_8
kernel-headers	ol 9	0:5.14.0-687.17.1.el9_8
kernel-modules	ol 9	0:5.14.0-687.17.1.el9_8
kernel-modules-core	ol 9	0:5.14.0-687.17.1.el9_8
kernel-modules-extra	ol 9	0:5.14.0-687.17.1.el9_8
kernel-tools	ol 9	0:5.14.0-687.17.1.el9_8
kernel-tools-libs	ol 9	0:5.14.0-687.17.1.el9_8
kernel-tools-libs-devel	ol 9	0:5.14.0-687.17.1.el9_8
kernel-uki-virt	ol 9	0:5.14.0-687.17.1.el9_8
kernel-uki-virt-addons	ol 9	0:5.14.0-687.17.1.el9_8
libperf	ol 9	0:5.14.0-687.17.1.el9_8
perf	ol 9	0:5.14.0-687.17.1.el9_8
python3-perf	ol 9	0:5.14.0-687.17.1.el9_8
rtla	ol 9	0:5.14.0-687.17.1.el9_8
rv	ol 9	0:5.14.0-687.17.1.el9_8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-46331	net/sched: fix pedit partial COW leading to page cache corruption	8.1	0.0064	None reported
High	CVE-2026-43414	scsi: qla2xxx: Completely fix fcport double free	9.8	0.0060	None reported
High	CVE-2026-31669	mptcp: fix slab-use-after-free in __inet_lookup_established	9.8	0.0047	None reported
High	CVE-2026-46135	nvmet-tcp: fix race between ICReq handling and queue teardown	9.8	0.0040	None reported
High	CVE-2026-46125	wifi: mac80211: remove station if connection prep fails	8.8	0.0030	None reported
High	CVE-2026-46056	Bluetooth: hci_event: fix potential UAF in SSP passkey handlers	8.8	0.0028	None reported
High	CVE-2026-46166	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar...	8.8	0.0020	None reported
High	CVE-2026-45984	kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...	7.8	0.0018	None reported
High	CVE-2026-31787	kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr...	7.8	0.0018	None reported
High	CVE-2026-46152	wifi: mac80211: drop stray 'static' from fast-RX rx_result	8.8	0.0017	None reported
High	CVE-2026-46145	kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko point...	7.8	0.0015	None reported
High	CVE-2026-31772	linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow i...	7.8	0.0014	None reported
High	CVE-2026-43260	linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need t...	7.8	0.0014	None reported
High	CVE-2026-46117	linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in...	7.8	0.0014	None reported
High	CVE-2026-46173	exit: prevent preemption of oopsing TASK_DEAD task	7.8	0.0013	None reported
High	CVE-2026-43279	kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes...	7.8	0.0012	None reported
High	CVE-2026-31474	can: isotp: fix tx.buf use-after-free in isotp_sendmsg()	7.8	0.0010	None reported

Also fixes CVE-2026-46331

SUSE-SU-2026:22835-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
OPENSUSE-SU-2026:21388-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:2799-1
kernel-livepatch-SLE15-SP7-RT_Update_17 on sles 15.7
SUSE-SU-2026:2800-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
SUSE-SU-2026:2238-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
ALAS2023-2026-1968
bpftool6.12, bpftool6.12-debuginfo, kernel-livepatch-6.12.94-123.174 and 15 more on amzn 2023
SUSE-SU-2026:3156-1
kernel-default, kernel-default-base, kernel-docs and 4 more on sles 15.6
ALAS2023-2026-1925
bpftool6.18, bpftool6.18-debuginfo, kernel-livepatch-6.18.36-69.134 and 16 more on amzn 2023

Vendor advisory

https://linux.oracle.com/errata/ELSA-2026-27789.html

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/elsa-2026-27789">ELSA-2026-27789 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.