Linux · Security advisory · September 4, 2026

ELSA-2026-500249: Security update for 19 packages

ELSA-2026-500249, released September 4, 2026, fixes 588 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
588
57 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0147
73rd percentile

Priority of the 588 CVEs

Patch now 0 Urgent 57 High 364 Routine 167

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-324.217.5.2.el9uek
bpftoolol 90:5.15.0-324.217.5.2.el9uek
kernel-uekol 80:5.15.0-324.217.5.2.el9uek
kernel-uekol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-containerol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-containerol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-coreol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-coreol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debugol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debugol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-develol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-develol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-docol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-docol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64kol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64kol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-coreol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-coreol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-develol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-develol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-324.217.5.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() 9.8 0.0077 None reported
Urgent CVE-2026-74279 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong... 10.0 0.0076 None reported
Urgent CVE-2026-72226 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow... 9.8 0.0076 None reported
Urgent CVE-2026-80630 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_... 9.8 0.0076 None reported
Urgent CVE-2026-72084 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t... 9.8 0.0075 None reported
Urgent CVE-2026-72299 linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra... 9.8 0.0075 None reported
Urgent CVE-2026-72319 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in... 9.8 0.0075 None reported
Urgent CVE-2026-72339 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b... 9.8 0.0075 None reported
Urgent CVE-2026-72351 linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE... 9.8 0.0075 None reported
Urgent CVE-2026-72466 linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek... 9.8 0.0074 None reported
Urgent CVE-2026-80609 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[... 9.8 0.0074 None reported
Urgent CVE-2026-74287 linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length... 9.1 0.0074 None reported
Urgent CVE-2026-72234 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a... 9.8 0.0073 None reported
Urgent CVE-2026-72065 linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b... 9.8 0.0073 None reported
Urgent CVE-2026-72322 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo... 9.8 0.0072 None reported
Urgent CVE-2026-72491 linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in tra... 9.8 0.0072 None reported
Urgent CVE-2026-72014 linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p... 9.8 0.0072 None reported
Urgent CVE-2026-68477 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport... 9.8 0.0071 None reported
Urgent CVE-2026-72020 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn... 9.8 0.0071 None reported
Urgent CVE-2026-72129 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of... 9.8 0.0071 None reported
Urgent CVE-2026-72251 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat... 9.8 0.0071 None reported
Urgent CVE-2026-74267 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red... 9.8 0.0071 None reported
Urgent CVE-2026-72348 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens... 9.1 0.0063 None reported
Urgent CVE-2026-80603 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off... 9.1 0.0060 None reported
Urgent CVE-2026-72421 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/mai... 10.0 0.0057 None reported
Showing 1 to 25 of 588 1Next