Linux · Security advisory · January 13, 2026

ELSA-2026-50006: Security update for 35 packages

ELSA-2026-50006, released January 13, 2026, fixes 102 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
102
5 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0065
51st percentile

Priority of the 102 CVEs

Patch now 0 Urgent 5 High 57 Routine 40

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-107.59.3.2.el9uek
kernel-uekol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-coreol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-coreol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debugol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debugol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-coreol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-coreol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-develol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-develol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modulesol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modulesol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-develol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-develol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-docol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-docol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modulesol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modulesol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-coreol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-coreol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-desktopol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-desktopol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-extraol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-extraol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-usbol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-usbol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-107.59.3.2.el9uek
kernel-uek-toolsol 100:6.12.0-107.59.3.2.el9uek
kernel-uek-toolsol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64kol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64kol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-coreol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-coreol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-develol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-develol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modulesol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modulesol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-107.59.3.2.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-107.59.3.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-68192 linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... 9.8 0.0061 None reported
Urgent CVE-2025-40350 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea... 9.8 0.0055 None reported
Urgent CVE-2025-40212 linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsd_set_fh_dentry()... 9.8 0.0043 None reported
Urgent CVE-2025-40320 linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... 9.8 0.0042 None reported
Urgent CVE-2025-40242 gfs2: Fix unlikely race in gdlm_put_lock 9.8 0.0016 None reported
High CVE-2025-40343 nvmet-fc: avoid scheduling association deletion twice 9.8 0.0065 None reported
High CVE-2025-40240 sctp: avoid NULL dereference when chunk data buffer is missing 8.6 0.0064 None reported
High CVE-2025-40337 net: stmmac: Correctly handle Rx checksum offload errors 8.2 0.0048 None reported
High CVE-2025-68241 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... 7.5 0.0047 None reported
High CVE-2025-40328 smb: client: fix potential UAF in smb2_close_cached_fid() 8.8 0.0046 None reported
High CVE-2025-40273 NFSD: free copynotify stateid in nfs4_free_ol_stateid() 8.8 0.0046 None reported
High CVE-2025-40324 NFSD: Fix crash in nfsd4_read_release() 7.5 0.0046 None reported
High CVE-2025-68321 linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allo... 7.5 0.0045 None reported
High CVE-2025-40342 nvme-fc: use lock accessing port_state and rport state 8.8 0.0037 None reported
High CVE-2025-40301 Bluetooth: hci_event: validate skb length for unknown CC opcode 7.8 0.0027 None reported
High CVE-2025-40318 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... 8.8 0.0027 None reported
High CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE 7.8 0.0025 None reported
High CVE-2025-40309 Bluetooth: SCO: Fix UAF on sco_conn_free 8.0 0.0025 None reported
High CVE-2025-40281 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto 7.0 0.0023 None reported
High CVE-2025-68188 tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() 7.8 0.0022 None reported
High CVE-2025-40329 drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb 7.0 0.0022 None reported
High CVE-2025-22121 ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() 7.1 0.0022 None reported
High CVE-2025-40237 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.1 0.0022 None reported
High CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness() 7.8 0.0021 None reported
High CVE-2025-68190 drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() 7.8 0.0021 None reported
Showing 1 to 25 of 102 1Next