Linux · Security advisory · February 6, 2026

ELSA-2026-50095: Security update for 19 packages

ELSA-2026-50095, released February 6, 2026, fixes 5 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-316.196.4.2.el9uek
bpftoolol 90:5.15.0-316.196.4.2.el9uek
kernel-uekol 80:5.15.0-316.196.4.2.el9uek
kernel-uekol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-containerol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-containerol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-container-debugol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-container-debugol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-coreol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-coreol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-debugol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-debugol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-develol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-develol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-develol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-develol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-docol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-docol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-modulesol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-modulesol 90:5.15.0-316.196.4.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-316.196.4.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-316.196.4.2.el9uek
kernel-uek64kol 80:5.15.0-316.196.4.2.el9uek
kernel-uek64kol 90:5.15.0-316.196.4.2.el9uek
kernel-uek64k-coreol 80:5.15.0-316.196.4.2.el9uek
kernel-uek64k-coreol 90:5.15.0-316.196.4.2.el9uek
kernel-uek64k-develol 80:5.15.0-316.196.4.2.el9uek
kernel-uek64k-develol 90:5.15.0-316.196.4.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-316.196.4.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-316.196.4.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-316.196.4.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-316.196.4.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38566 sunrpc: fix handling of server side tls alerts 8.1 0.0063 None reported
High CVE-2025-40258 mptcp: fix race condition in mptcp_schedule_work() 9.8 0.0050 None reported
High CVE-2025-38571 sunrpc: fix client side handling of tls alerts 8.1 0.0035 None reported
High CVE-2025-68209 mlx5: Fix default values in create CQ 7.5 0.0022 None reported
High CVE-2025-40215 xfrm: delete x->tunnel as we delete x 7.8 0.0015 None reported
Showing 1 to 5 of 5 1