Linux · Security advisory · October 7, 2026

ELSA-2026-500377: Security update for 19 packages

ELSA-2026-500377, released October 7, 2026, fixes 79 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
79
5 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0143
73rd percentile

Priority of the 79 CVEs

Patch now 0 Urgent 5 High 44 Routine 30

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-325.220.5.el9uek
bpftoolol 90:5.15.0-325.220.5.el9uek
kernel-uekol 80:5.15.0-325.220.5.el9uek
kernel-uekol 90:5.15.0-325.220.5.el9uek
kernel-uek-containerol 80:5.15.0-325.220.5.el9uek
kernel-uek-containerol 90:5.15.0-325.220.5.el9uek
kernel-uek-container-debugol 80:5.15.0-325.220.5.el9uek
kernel-uek-container-debugol 90:5.15.0-325.220.5.el9uek
kernel-uek-coreol 80:5.15.0-325.220.5.el9uek
kernel-uek-coreol 90:5.15.0-325.220.5.el9uek
kernel-uek-debugol 80:5.15.0-325.220.5.el9uek
kernel-uek-debugol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-coreol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-coreol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-develol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-develol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-modulesol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-modulesol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-325.220.5.el9uek
kernel-uek-develol 80:5.15.0-325.220.5.el9uek
kernel-uek-develol 90:5.15.0-325.220.5.el9uek
kernel-uek-docol 80:5.15.0-325.220.5.el9uek
kernel-uek-docol 90:5.15.0-325.220.5.el9uek
kernel-uek-modulesol 80:5.15.0-325.220.5.el9uek
kernel-uek-modulesol 90:5.15.0-325.220.5.el9uek
kernel-uek-modules-extraol 80:5.15.0-325.220.5.el9uek
kernel-uek-modules-extraol 90:5.15.0-325.220.5.el9uek
kernel-uek64kol 80:5.15.0-325.220.5.el9uek
kernel-uek64kol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-coreol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-coreol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-develol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-develol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-modulesol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-modulesol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-325.220.5.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 0.0143 None reported
Urgent CVE-2026-72323 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t... 9.8 0.0072 None reported
Urgent CVE-2026-68476 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... 9.8 0.0071 None reported
Urgent CVE-2026-80557 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m... 9.8 0.0053 None reported
Urgent CVE-2025-39925 can: j1939: implement NETDEV_UNREGISTER notification handler 9.8 0.0015 None reported
High CVE-2025-68794 iomap: adjust read range correctly for non-block-aligned positions 9.8 0.0069 None reported
High CVE-2026-80587 mptcp: avoid combining some incoming suboptions 9.8 0.0052 None reported
High CVE-2026-68388 smb/client: handle overlapping allocated ranges in fallocate 9.8 0.0051 None reported
High CVE-2026-74662 inet: frags: publish queues before arming timer 9.8 0.0051 None reported
High CVE-2026-74626 NTB: ntb_netdev: Preserve RX queue depth on allocation failure 7.5 0.0050 None reported
High CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers 9.8 0.0050 None reported
High CVE-2026-97509 thunderbolt: Keep XDomain reference during the lifetime of a service 8.8 0.0024 None reported
High CVE-2026-68278 drm/dp/mst: fix buffer overflows in sideband chunk accumulation 8.1 0.0024 None reported
High CVE-2026-80789 nvmet-tcp: bound SGL data length before allocating command buffers 7.5 0.0023 None reported
High CVE-2025-40102 KVM: arm64: Prevent access to vCPU events before init 7.1 0.0022 None reported
High CVE-2026-80840 ipv6: seg6: clear IPv4 control block on IPIP decapsulation 7.8 0.0021 None reported
High CVE-2026-80824 usb: usbfs: fix use-after-free of usb_device in usbdev_release() 8.8 0.0020 None reported
High CVE-2026-80792 ipv6: fix use-after-free in ip6_finish_output2() 8.1 0.0020 None reported
High CVE-2026-80790 nvmet-fc: fix invalid free in LS IOD error path 7.8 0.0020 None reported
High CVE-2026-80819 Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept 7.8 0.0020 None reported
High CVE-2026-80788 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations 7.5 0.0020 None reported
High CVE-2026-80767 HID: sensor: custom: Fix use-after-free in enable_sensor 7.0 0.0020 None reported
High CVE-2026-80808 ext4: stop retrying saturated xattr cache entries 7.0 0.0020 None reported
High CVE-2026-80863 RDMA/rxe: Fix OOB in free_rd_atomic_resources() 7.8 0.0018 None reported
High CVE-2026-80916 linux: In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on... 7.8 0.0018 None reported
Showing 1 to 25 of 79 1Next