Linux · Security advisory · October 7, 2026

ELSA-2026-500374: Security update for 35 packages

ELSA-2026-500374, released October 7, 2026, fixes 1,058 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1,058
58 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0084
58th percentile

Priority of the 1,058 CVEs

Patch now 0 Urgent 58 High 620 Routine 380

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-207.111.5.1.el9uek
kernel-uekol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-coreol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-coreol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debugol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debugol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-coreol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-coreol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-develol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-develol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modulesol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modulesol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-develol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-develol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-docol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-docol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modulesol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modulesol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-coreol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-coreol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-desktopol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-desktopol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-extraol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-extraol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-usbol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-usbol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-207.111.5.1.el9uek
kernel-uek-toolsol 100:6.12.0-207.111.5.1.el9uek
kernel-uek-toolsol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64kol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64kol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-coreol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-coreol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-develol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-develol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modulesol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modulesol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-207.111.5.1.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-207.111.5.1.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-89970 nvmet-auth: Synchronize timeout work during SQ teardown 9.8 0.0080 None reported
Urgent CVE-2026-90151 linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client alloc... 9.8 0.0075 None reported
Urgent CVE-2026-89688 linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on s... 9.8 0.0074 None reported
Urgent CVE-2026-80976 linux: In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation deca... 9.8 0.0071 None reported
Urgent CVE-2026-89485 linux: In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file loc... 9.8 0.0071 None reported
Urgent CVE-2026-89492 linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts whe... 9.8 0.0071 None reported
Urgent CVE-2026-89494 linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm_mig_lockres_handl... 9.8 0.0071 None reported
Urgent CVE-2026-89495 linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_hand... 9.8 0.0071 None reported
Urgent CVE-2026-89655 linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf en... 9.8 0.0071 None reported
Urgent CVE-2026-89712 linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropp... 9.8 0.0071 None reported
Urgent CVE-2026-89783 xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full 9.8 0.0071 None reported
Urgent CVE-2026-89969 nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU 9.8 0.0071 None reported
Urgent CVE-2026-89846 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB s... 9.1 0.0071 None reported
Urgent CVE-2026-72137 linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send e... 9.8 0.0071 None reported
Urgent CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block 9.8 0.0070 None reported
Urgent CVE-2026-89555 linux: In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_... 9.8 0.0069 None reported
Urgent CVE-2026-89847 scsi: qla2xxx: Avoid double completion in async IOCB timeout 9.8 0.0069 None reported
Urgent CVE-2026-89634 linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_dat... 9.8 0.0069 None reported
Urgent CVE-2026-89526 svcrdma: Validate Read chunk positions before reconstruction 9.8 0.0068 None reported
Urgent CVE-2026-68287 drop_monitor: fix size calculations for 64-bit attributes 9.8 0.0068 None reported
Urgent CVE-2026-89713 linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock... 9.1 0.0067 None reported
Urgent CVE-2026-89636 linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tgts() W... 9.8 0.0066 None reported
Urgent CVE-2026-89536 linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake... 9.8 0.0064 None reported
Urgent CVE-2026-89558 linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in... 9.8 0.0064 None reported
Urgent CVE-2026-89651 linux: In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode i... 9.8 0.0064 None reported
Showing 1 to 25 of 1,058 1Next