Linux · Oracle Linux · Security advisory · November 7, 2026

ELSA-2026-500572: Security update for 35 packages

ELSA-2026-500572, released November 7, 2026, fixes 301 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
301
65 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile

Priority of the 301 CVEs

Patch now 0 Urgent 65 High 107 Routine 129

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-208.112.5.el9uek
kernel-uekol 90:6.12.0-208.112.5.el9uek
kernel-uek-coreol 100:6.12.0-208.112.5.el9uek
kernel-uek-coreol 90:6.12.0-208.112.5.el9uek
kernel-uek-debugol 100:6.12.0-208.112.5.el9uek
kernel-uek-debugol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-coreol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-coreol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-develol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-develol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modulesol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modulesol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-208.112.5.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-208.112.5.el9uek
kernel-uek-develol 100:6.12.0-208.112.5.el9uek
kernel-uek-develol 90:6.12.0-208.112.5.el9uek
kernel-uek-docol 100:6.12.0-208.112.5.el9uek
kernel-uek-docol 90:6.12.0-208.112.5.el9uek
kernel-uek-modulesol 100:6.12.0-208.112.5.el9uek
kernel-uek-modulesol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-coreol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-coreol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-desktopol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-desktopol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-extraol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-extraol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-usbol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-usbol 90:6.12.0-208.112.5.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-208.112.5.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-208.112.5.el9uek
kernel-uek-toolsol 100:6.12.0-208.112.5.el9uek
kernel-uek-toolsol 90:6.12.0-208.112.5.el9uek
kernel-uek64kol 100:6.12.0-208.112.5.el9uek
kernel-uek64kol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-coreol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-coreol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-develol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-develol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modulesol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modulesol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-208.112.5.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-208.112.5.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-89972 nvme: add missing SRCU grace period in error path9.8 0.0071 None reported
Urgent CVE-2026-98171 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs9.8 0.0054 None reported
Urgent CVE-2026-98365 RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access9.8 0.0038 None reported
Urgent CVE-2026-98174 smb: client: fix rlist race and missing initialization9.8 0.0033 None reported
Urgent CVE-2026-98339 wifi: cfg80211: don't filter by BSS type when removing stale entries9.8 0.0028 None reported
Urgent CVE-2026-98348 wifi: libipw: reject too-short association responses9.8 0.0025 None reported
Urgent CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs9.8 0.0022 None reported
Urgent CVE-2026-98170 smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()9.8 0.0022 None reported
Urgent CVE-2026-98214 selinux: recheck intermediate backing files on mprotect()9.8 0.0022 None reported
Urgent CVE-2026-98573 net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()9.4 0.0022 None reported
Urgent CVE-2026-98621 net: gue: reject invalid REMCSUM offsets9.1 0.0022 None reported
Urgent CVE-2026-98168 smb: client: fix reparse buffer bounds in cifs_query_reparse_point()9.8 0.0021 None reported
Urgent CVE-2026-98211 mmc: mmci: Fix use-after-free in busy-timeout work9.8 0.0021 None reported
Urgent CVE-2026-98215 selinux: preserve user SID across nested backing files9.8 0.0021 None reported
Urgent CVE-2026-98272 net: mvpp2: prevent buffer overflow in page_pool allocation9.8 0.0020 None reported
Urgent CVE-2026-98319 drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr9.8 0.0018 None reported
Urgent CVE-2026-98322 netfilter: nft_nat: fully initialise new_addr in netmap setup9.8 0.0018 None reported
Urgent CVE-2026-98301 net: bridge: mst: move switchdev call outside rcu9.8 0.0018 None reported
Urgent CVE-2026-98303 ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup9.8 0.0018 None reported
Urgent CVE-2026-98326 wifi: mac80211: mesh: release the channel if start fails9.8 0.0018 None reported
Urgent CVE-2026-98328 wifi: mac80211: add HE 6 GHz capability in the scan elems len9.8 0.0018 None reported
Urgent CVE-2026-98172 smb: client: fix smbd_connection leak on cifs_get_tcp_session() error9.8 0.0018 None reported
Urgent CVE-2026-98186 wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length9.8 0.0018 None reported
Urgent CVE-2026-98187 wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST9.8 0.0018 None reported
Urgent CVE-2026-98188 wifi: p54: validate curve data length in the calibration curve converters9.8 0.0018 None reported
Showing 1 to 25 of 301 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.