Linux · Security advisory · August 3, 2026

ELSA-2026-500121: Security update for 8 packages

ELSA-2026-500121, released August 3, 2026, fixes 3 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0051
43rd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.358.2.el7uek
kernel-uek-containerol 80:5.4.17-2136.358.2.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.358.2.el7uek
kernel-uek-debugol 80:5.4.17-2136.358.2.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.358.2.el7uek
kernel-uek-develol 80:5.4.17-2136.358.2.el7uek
kernel-uek-docol 80:5.4.17-2136.358.2.el7uek
kernel-uek-toolsol 80:5.4.17-2136.358.2.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-46043 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv 9.1 0.0051 None reported
High CVE-2026-64600 xfs: resample the data fork mapping after cycling ILOCK 7.8 0.0047 None reported
High CVE-2026-43038 kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... 9.8 0.0026 None reported
Showing 1 to 3 of 3 1