Linux · Security advisory · November 7, 2026

ELSA-2026-500385: Security update for 19 packages

ELSA-2026-500385, released November 7, 2026, fixes 9 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0458
91st percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 8 Routine 1

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-325.221.6.2.el9uek
bpftoolol 90:5.15.0-325.221.6.2.el9uek
kernel-uekol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-containerol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-containerol 90:5.15.0-325.221.6.2.el9uek
kernel-uek-container-debugol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-container-debugol 90:5.15.0-325.221.6.2.el9uek
kernel-uek-coreol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-debugol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-debug-develol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-develol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-docol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-modulesol 80:5.15.0-325.221.6.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-325.221.6.2.el9uek
kernel-uek64kol 80:5.15.0-325.221.6.2.el9uek
kernel-uek64k-coreol 80:5.15.0-325.221.6.2.el9uek
kernel-uek64k-develol 80:5.15.0-325.221.6.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-325.221.6.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-325.221.6.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-46242 kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... 7.8 0.0458 None reported
High CVE-2026-98096 ipv6: sr: restore network header before routing and forwarding 7.8 0.0051 None reported
High CVE-2026-97998 netfilter: nfnetlink_log: cope with concurrent instance destruction 7.8 0.0022 None reported
High CVE-2026-97964 ppp_synctty: ensure a writeable skb header 7.8 0.0017 None reported
High CVE-2026-98078 ipvs: fix reversed sequence option serialization 7.8 0.0016 None reported
High CVE-2026-97438 fs/ntfs3: validate index entry key bounds 7.1 0.0013 None reported
High CVE-2026-89560 linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG fo... 8.4 0.0013 None reported
High CVE-2026-98023 vxlan: reject dynamic fdb entries that reference a nexthop id 7.8 0.0013 None reported
Routine CVE-2026-97419 hsr: broadcast netlink notifications in the device's net namespace 4.6 0.0017 None reported
Showing 1 to 9 of 9 1