Linux · Security advisory · February 20, 2026
ELSA-2026-50112: Security update for 35 packages
ELSA-2026-50112, released February 20, 2026, fixes 169 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
169
12 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0191
79th percentile
Priority of the 169 CVEs
Patch now 0
Urgent 12
High 75
Routine 82
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-core | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-core | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-core | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-core | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-devel | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-core | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-core | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-extra | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-usb | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-usb | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-devel | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-devel | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-doc | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-doc | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-core | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-core | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-deprecated | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-deprecated | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-desktop | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-desktop | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-extra | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-usb | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-usb | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-wireless | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-modules-wireless | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-tools | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek-tools | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-core | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-core | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-devel | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-devel | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-core | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-core | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-desktop | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-desktop | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-extra | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-usb | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-usb | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-wireless | ol 10 | 0:6.12.0-108.64.6.3.el9uek |
| kernel-uek64k-modules-wireless | ol 9 | 0:6.12.0-108.64.6.3.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-68206 | netfilter: nft_ct: add seqadj extension for natted connections | 9.1 | 0.0071 | None reported | |
| Urgent | CVE-2025-68811 | linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset... | 9.8 | 0.0053 | None reported | |
| Urgent | CVE-2025-68341 | linux: In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP no_direct return section to fix... | 9.8 | 0.0044 | None reported | |
| Urgent | CVE-2025-68741 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite... | 9.8 | 0.0043 | None reported | |
| Urgent | CVE-2025-71072 | shmem: fix recovery on rename failures | 9.8 | 0.0036 | None reported | |
| Urgent | CVE-2025-68814 | io_uring: fix filename leak in __io_openat_prep() | 9.8 | 0.0022 | None reported | |
| Urgent | CVE-2025-68366 | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... | 8.8 | 0.0020 | None reported | |
| Urgent | CVE-2025-68822 | Input: alps - fix use-after-free bugs caused by dev3_register_work | 9.8 | 0.0018 | None reported | |
| Urgent | CVE-2025-40251 | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 | None reported | |
| Urgent | CVE-2025-68819 | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 | None reported | |
| Urgent | CVE-2025-71098 | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 | None reported | |
| Urgent | CVE-2025-68789 | hwmon: (ibmpex) fix use-after-free in high/low store | 9.8 | n/a | None reported | |
| High | CVE-2025-68349 | linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 | None reported | |
| High | CVE-2025-68782 | scsi: target: Reset t_task_cdb pointer in error case | 8.6 | 0.0069 | None reported | |
| High | CVE-2025-68794 | iomap: adjust read range correctly for non-block-aligned positions | 9.8 | 0.0069 | None reported | |
| High | CVE-2025-40252 | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | 9.8 | 0.0065 | None reported | |
| High | CVE-2025-40261 | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | 9.8 | 0.0060 | None reported | |
| High | CVE-2025-68284 | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 | None reported | |
| High | CVE-2025-68285 | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 | None reported | |
| High | CVE-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 | None reported | |
| High | CVE-2025-68337 | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 | None reported | |
| High | CVE-2025-68775 | net/handshake: duplicate handshake cancellations leak socket | 9.8 | 0.0055 | None reported | |
| High | CVE-2025-71120 | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 | None reported | |
| High | CVE-2025-68218 | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partitio... | 7.5 | 0.0053 | None reported | |
| High | CVE-2025-68283 | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 | None reported |
Showing 1 to 25 of 169
1Next