Linux · Security advisory · September 17, 2026

ELSA-2026-500329: Security update for 19 packages

ELSA-2026-500329, released September 17, 2026, fixes 6 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-324.217.5.3.el9uek
bpftoolol 90:5.15.0-324.217.5.3.el9uek
kernel-uekol 80:5.15.0-324.217.5.3.el9uek
kernel-uekol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-containerol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-containerol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-container-debugol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-container-debugol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-coreol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-coreol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-debugol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-debugol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-coreol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-coreol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-develol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-develol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-modulesol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-modulesol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-develol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-develol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-docol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-docol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-modulesol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-modulesol 90:5.15.0-324.217.5.3.el9uek
kernel-uek-modules-extraol 80:5.15.0-324.217.5.3.el9uek
kernel-uek-modules-extraol 90:5.15.0-324.217.5.3.el9uek
kernel-uek64kol 80:5.15.0-324.217.5.3.el9uek
kernel-uek64kol 90:5.15.0-324.217.5.3.el9uek
kernel-uek64k-coreol 80:5.15.0-324.217.5.3.el9uek
kernel-uek64k-coreol 90:5.15.0-324.217.5.3.el9uek
kernel-uek64k-develol 80:5.15.0-324.217.5.3.el9uek
kernel-uek64k-develol 90:5.15.0-324.217.5.3.el9uek
kernel-uek64k-modulesol 80:5.15.0-324.217.5.3.el9uek
kernel-uek64k-modulesol 90:5.15.0-324.217.5.3.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-324.217.5.3.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-324.217.5.3.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-74268 tcp: clear sock_ops cb flags before force-closing a child socket 9.8 0.0071 None reported
High CVE-2026-80844 xfrm: ah6: validate routing header segments_left 8.3 0.0043 None reported
High CVE-2026-81000 linux: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user()... 8.3 0.0036 None reported
High CVE-2026-43198 tcp: fix potential race in tcp_v6_syn_recv_sock() 9.8 0.0030 None reported
High CVE-2026-74378 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wq... 7.8 0.0014 None reported
High CVE-2026-43088 net: af_key: zero aligned sockaddr tail in PF_KEY exports 7.1 0.0012 None reported
Showing 1 to 6 of 6 1