Linux · Security advisory · October 6, 2026

ELSA-2026-500375: Security update for 8 packages

ELSA-2026-500375, released October 6, 2026, fixes 8 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0159
75th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 7 Routine 1

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.360.3.el7uek
kernel-uek-containerol 80:5.4.17-2136.360.3.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.360.3.el7uek
kernel-uek-debugol 80:5.4.17-2136.360.3.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.360.3.el7uek
kernel-uek-develol 80:5.4.17-2136.360.3.el7uek
kernel-uek-docol 80:5.4.17-2136.360.3.el7uek
kernel-uek-toolsol 80:5.4.17-2136.360.3.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-23455 kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... 9.1 0.0159 None reported
High CVE-2026-64312 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... 7.5 0.0050 None reported
High CVE-2026-23457 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length... 8.6 0.0045 None reported
High CVE-2026-31662 tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG 7.5 0.0039 None reported
High CVE-2026-64313 crypto: ecc - Fix carry overflow in vli multiplication 8.8 0.0036 None reported
High CVE-2026-31588 KVM: x86: Use scratch field in MMIO fragment to hold small write values 8.8 0.0019 None reported
High CVE-2026-64306 crypto: drbg - Fix returning success on failure in CTR_DRBG 7.0 0.0016 None reported
Routine CVE-2026-31664 xfrm: clear trailing padding in build_polexpire() 5.5 0.0012 None reported
Showing 1 to 8 of 8 1