Linux · Security advisory · September 4, 2026
ELSA-2026-500248: Security update for 35 packages
ELSA-2026-500248, released September 4, 2026, fixes 1,162 CVEs across 35 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
1,162
96 rated Critical
Exploited
1
CVE-2026-53266
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0147
73rd percentile
Priority of the 1,162 CVEs
Patch now 1
Urgent 96
High 715
Routine 350
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-core | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-core | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-core | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-core | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-devel | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-core | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-core | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-extra | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-usb | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-usb | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-devel | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-devel | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-doc | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-doc | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-core | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-core | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-deprecated | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-deprecated | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-desktop | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-desktop | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-extra | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-usb | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-usb | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-wireless | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-modules-wireless | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-tools | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek-tools | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-core | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-core | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-devel | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-devel | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-core | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-core | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-desktop | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-desktop | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-extra | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-usb | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-usb | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-wireless | ol 10 | 0:6.12.0-206.104.3.3.el9uek |
| kernel-uek64k-modules-wireless | ol 9 | 0:6.12.0-206.104.3.3.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | KEVExploited | |
| Urgent | CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | None reported | |
| Urgent | CVE-2026-72130 | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n... | 9.8 | 0.0080 | None reported | |
| Urgent | CVE-2026-68160 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | 9.8 | 0.0077 | None reported | |
| Urgent | CVE-2026-74279 | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong... | 10.0 | 0.0076 | None reported | |
| Urgent | CVE-2026-72226 | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow... | 9.8 | 0.0076 | None reported | |
| Urgent | CVE-2026-74427 | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocat... | 9.8 | 0.0076 | None reported | |
| Urgent | CVE-2026-72084 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t... | 9.8 | 0.0075 | None reported | |
| Urgent | CVE-2026-72299 | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra... | 9.8 | 0.0075 | None reported | |
| Urgent | CVE-2026-72319 | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in... | 9.8 | 0.0075 | None reported | |
| Urgent | CVE-2026-72339 | linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b... | 9.8 | 0.0075 | None reported | |
| Urgent | CVE-2026-72351 | linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE... | 9.8 | 0.0075 | None reported | |
| Urgent | CVE-2026-72466 | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek... | 9.8 | 0.0074 | None reported | |
| Urgent | CVE-2026-74287 | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length... | 9.1 | 0.0074 | None reported | |
| Urgent | CVE-2026-72234 | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a... | 9.8 | 0.0073 | None reported | |
| Urgent | CVE-2026-72065 | linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b... | 9.8 | 0.0073 | None reported | |
| Urgent | CVE-2026-72322 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo... | 9.8 | 0.0072 | None reported | |
| Urgent | CVE-2026-72323 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t... | 9.8 | 0.0072 | None reported | |
| Urgent | CVE-2026-72491 | linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in tra... | 9.8 | 0.0072 | None reported | |
| Urgent | CVE-2026-72014 | linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p... | 9.8 | 0.0072 | None reported | |
| Urgent | CVE-2026-72473 | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple... | 9.8 | 0.0072 | None reported | |
| Urgent | CVE-2026-68476 | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... | 9.8 | 0.0071 | None reported | |
| Urgent | CVE-2026-68477 | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport... | 9.8 | 0.0071 | None reported | |
| Urgent | CVE-2026-72020 | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn... | 9.8 | 0.0071 | None reported | |
| Urgent | CVE-2026-72129 | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of... | 9.8 | 0.0071 | None reported |
Showing 1 to 25 of 1,162
1Next