Linux · Security advisory · July 22, 2026
ELSA-2026-42919: Security update for 30 packages
ELSA-2026-42919, released July 22, 2026, fixes 11 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
11
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0043
37th percentile
Priority of the 11 CVEs
Patch now 0
Urgent 1
High 10
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-abi-stablelists | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-core | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-cross-headers | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-core | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-devel | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-devel-matched | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-modules | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-modules-core | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-modules-extra | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-debug-uki-virt | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-devel | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-devel-matched | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-doc | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-headers | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-modules | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-modules-core | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-modules-extra | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-modules-extra-matched | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-tools | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-tools-libs | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-tools-libs-devel | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-uki-virt | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| kernel-uki-virt-addons | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| libperf | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| perf | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| python3-perf | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| rtla | ol 10 | 0:6.12.0-211.37.1.el10_2 |
| rv | ol 10 | 0:6.12.0-211.37.1.el10_2 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-53009 | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | None reported | |
| High | CVE-2026-53071 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 | None reported | |
| High | CVE-2026-46215 | kernel: In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in... | 7.8 | 0.0023 | None reported | |
| High | CVE-2026-52976 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: K... | 7.8 | 0.0018 | None reported | |
| High | CVE-2026-52950 | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry doe... | 7.8 | 0.0018 | None reported | |
| High | CVE-2026-31530 | cxl/port: Fix use after free of parent_port in cxl_detach_ep() | 7.8 | 0.0016 | None reported | |
| High | CVE-2025-71113 | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated... | 7.8 | 0.0015 | None reported | |
| High | CVE-2025-71147 | kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd... | 8.8 | 0.0014 | None reported | |
| High | CVE-2026-23168 | kernel: In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq... | 7.8 | 0.0013 | None reported | |
| High | CVE-2026-46116 | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 | None reported | |
| High | CVE-2026-46150 | fanotify: fix false positive on permission events | 7.8 | 0.0013 | None reported |
Showing 1 to 11 of 11
1