Linux · Security advisory · November 7, 2026
ELSA-2026-500394: Security update for 35 packages
ELSA-2026-500394, released November 7, 2026, fixes 6 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0044
38th percentile
Priority of the 6 CVEs
Patch now 0
Urgent 1
High 4
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-core | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-core | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-core | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-core | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-devel | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-core | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-core | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-extra | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-usb | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-usb | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-devel | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-devel | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-doc | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-doc | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-core | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-core | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-deprecated | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-deprecated | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-desktop | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-desktop | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-extra | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-usb | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-usb | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-wireless | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-modules-wireless | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-tools | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek-tools | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-core | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-core | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-devel | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-devel | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-core | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-core | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-desktop | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-desktop | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-extra | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-usb | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-usb | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-wireless | ol 10 | 0:6.12.0-207.111.5.3.el9uek |
| kernel-uek64k-modules-wireless | ol 9 | 0:6.12.0-207.111.5.3.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-72463 | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resum... | 9.8 | 0.0044 | None reported | |
| High | CVE-2026-98260 | exec: Cleanup POSIX timers right after de_thread() | 8.8 | 0.0019 | None reported | |
| High | CVE-2026-98101 | ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() | 7.8 | 0.0017 | None reported | |
| High | CVE-2026-97594 | landlock: Fix use-after-free of the source's parent directory | 7.8 | 0.0016 | None reported | |
| High | CVE-2026-89754 | linux: In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk->action escaping wal... | 7.8 | 0.0014 | None reported | |
| Routine | CVE-2026-89766 | linux: In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace io... | 4.4 | 0.0019 | None reported |
Showing 1 to 6 of 6
1