Linux · Security advisory · November 7, 2026
ELSA-2026-500574: Security update for 19 packages
ELSA-2026-500574, released November 7, 2026, fixes 277 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
277
31 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0780
94th percentile
Priority of the 277 CVEs
Patch now 0
Urgent 31
High 114
Routine 132
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 8 | 0:5.15.0-326.222.4.el9uek |
| bpftool | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-container | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-container | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-container-debug | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-container-debug | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-core | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-core | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-core | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-core | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-devel | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-modules | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-modules-extra | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-devel | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-devel | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-doc | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-doc | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-modules | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-modules | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-modules-extra | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-core | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-core | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-devel | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-devel | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-modules | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-modules | ol 9 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-modules-extra | ol 8 | 0:5.15.0-326.222.4.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:5.15.0-326.222.4.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-98339 | wifi: cfg80211: don't filter by BSS type when removing stale entries | 9.8 | 0.0028 | None reported | |
| Urgent | CVE-2026-98348 | wifi: libipw: reject too-short association responses | 9.8 | 0.0025 | None reported | |
| Urgent | CVE-2026-98573 | net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() | 9.4 | 0.0022 | None reported | |
| Urgent | CVE-2026-98621 | net: gue: reject invalid REMCSUM offsets | 9.1 | 0.0022 | None reported | |
| Urgent | CVE-2026-98272 | net: mvpp2: prevent buffer overflow in page_pool allocation | 9.8 | 0.0020 | None reported | |
| Urgent | CVE-2026-98319 | drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98322 | netfilter: nft_nat: fully initialise new_addr in netmap setup | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98186 | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98187 | wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98188 | wifi: p54: validate curve data length in the calibration curve converters | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98191 | wifi: wlcore: release runtime PM ref on regdomain config failure | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98203 | Input: soc_button_array - check btns_desc->package.count | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98207 | mmc: spi: reset bytes_xfered before retrying CRC failures | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98217 | IB/mlx4: Fix use-after-free on pkey sysfs registration failure | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98233 | net/packet: clear RX owner on VNET header error | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98255 | tcp: exclude old ACKs from tcp fast path | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98308 | ALSA: hda: trace PCM open only after assigning a stream | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98340 | wifi: cfg80211: only group hidden BSSes with beacon entries | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98345 | wifi: cfg80211: check IP header size in cfg80211_classify8021d() | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2026-98181 | drm/gud: fix out-of-bounds write in gud_plane_atomic_check() | 9.8 | 0.0017 | None reported | |
| Urgent | CVE-2026-98199 | hwmon: (pmbus/core) increase number of phases and add new mask | 9.8 | 0.0017 | None reported | |
| Urgent | CVE-2026-98221 | KEYS: trusted: Fix tpm2_load_cmd() boundary check | 9.8 | 0.0017 | None reported | |
| Urgent | CVE-2026-98287 | pppoatm: ensure a writable skb header and linear data | 9.8 | 0.0017 | None reported | |
| Urgent | CVE-2026-98363 | firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS | 9.8 | 0.0017 | None reported | |
| Urgent | CVE-2026-98362 | clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate | 9.8 | 0.0017 | None reported |
Showing 1 to 25 of 277
1Next