Linux · Security advisory · February 7, 2026

ELSA-2026-50100: Security update for 8 packages

ELSA-2026-50100, released February 7, 2026, fixes 25 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
25
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0061
49th percentile

Priority of the 25 CVEs

Patch now 0 Urgent 1 High 10 Routine 14

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.352.5.el7uek
kernel-uek-containerol 80:5.4.17-2136.352.5.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.352.5.el7uek
kernel-uek-debugol 80:5.4.17-2136.352.5.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.352.5.el7uek
kernel-uek-develol 80:5.4.17-2136.352.5.el7uek
kernel-uek-docol 80:5.4.17-2136.352.5.el7uek
kernel-uek-toolsol 80:5.4.17-2136.352.5.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-68192 linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... 9.8 0.0061 None reported
High CVE-2025-68241 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... 7.5 0.0047 None reported
High CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE 7.8 0.0025 None reported
High CVE-2025-40309 Bluetooth: SCO: Fix UAF on sco_conn_free 8.0 0.0025 None reported
High CVE-2025-40281 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto 7.0 0.0023 None reported
High CVE-2025-40259 scsi: sg: Do not sleep in atomic context 7.0 0.0022 None reported
High CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness() 7.8 0.0021 None reported
High CVE-2025-40331 sctp: Prevent TOCTOU out-of-bounds write 7.8 0.0019 None reported
High CVE-2025-40283 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF 7.8 0.0015 None reported
High CVE-2025-40304 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds 7.8 0.0014 None reported
High CVE-2025-40322 fbdev: bitblit: bound-check glyph index in bit_putcs* 7.8 0.0014 None reported
Routine CVE-2025-40254 net: openvswitch: remove never-working support for setting nsh fields 5.5 0.0026 None reported
Routine CVE-2025-40264 be2net: pass wrb_params in case of OS2BMC 5.5 0.0023 None reported
Routine CVE-2025-40363 linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in... 5.5 0.0021 None reported
Routine CVE-2025-40275 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd 5.5 0.0021 None reported
Routine CVE-2025-68185 linux: In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for -... 5.5 0.0021 None reported
Routine CVE-2025-68194 linux: In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syz... 5.5 0.0021 None reported
Routine CVE-2025-40083 net/sched: sch_qfq: Fix null-deref in agg_dequeue 5.9 0.0021 None reported
Routine CVE-2025-40263 Input: cros_ec_keyb - fix an invalid memory access 5.5 0.0021 None reported
Routine CVE-2025-68229 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() 5.5 0.0020 None reported
Routine CVE-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode 6.5 0.0020 None reported
Routine CVE-2025-68245 linux: In the Linux kernel, the following vulnerability has been resolved: net: netpoll: fix incorrect refcount handling ca... 6.1 0.0020 None reported
Routine CVE-2025-68734 linux: In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb... 5.5 0.0020 None reported
Routine CVE-2025-40308 Bluetooth: bcsp: receive data only if registered 5.5 0.0020 None reported
Routine CVE-2025-68312 linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root ca... 4.7 0.0020 None reported
Showing 1 to 25 of 25 1