Linux · Security advisory · February 15, 2026
ELSA-2026-50113: Security update for 19 packages
ELSA-2026-50113, released February 15, 2026, fixes 66 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
66
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0191
79th percentile
Priority of the 66 CVEs
Patch now 0
Urgent 1
High 33
Routine 32
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| bpftool | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-container | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-container | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-container-debug | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-container-debug | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-core | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-core | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-core | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-core | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-devel | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-modules | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-modules-extra | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-devel | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-devel | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-doc | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-doc | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-modules | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-modules | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-modules-extra | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-core | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-core | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-devel | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-devel | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-modules | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-modules | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-modules-extra | ol 8 | 0:5.15.0-317.197.5.1.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:5.15.0-317.197.5.1.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-68192 | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 | None reported | |
| High | CVE-2025-40343 | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0065 | None reported | |
| High | CVE-2025-40252 | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | 9.8 | 0.0065 | None reported | |
| High | CVE-2025-40261 | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | 9.8 | 0.0060 | None reported | |
| High | CVE-2025-68284 | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 | None reported | |
| High | CVE-2025-68285 | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 | None reported | |
| High | CVE-2025-40257 | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 | None reported | |
| High | CVE-2025-68301 | net: atlantic: fix fragment overflow handling in RX path | 9.8 | 0.0047 | None reported | |
| High | CVE-2025-68241 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 | None reported | |
| High | CVE-2025-40273 | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 | None reported | |
| High | CVE-2025-40324 | NFSD: Fix crash in nfsd4_read_release() | 7.5 | 0.0046 | None reported | |
| High | CVE-2025-68321 | linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allo... | 7.5 | 0.0045 | None reported | |
| High | CVE-2025-40342 | nvme-fc: use lock accessing port_state and rport state | 8.8 | 0.0037 | None reported | |
| High | CVE-2025-40277 | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 | None reported | |
| High | CVE-2025-40309 | Bluetooth: SCO: Fix UAF on sco_conn_free | 8.0 | 0.0025 | None reported | |
| High | CVE-2025-40281 | sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto | 7.0 | 0.0023 | None reported | |
| High | CVE-2025-68287 | usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths | 7.8 | 0.0023 | None reported | |
| High | CVE-2025-68227 | mptcp: Fix proto fallback detection with BPF | 7.8 | 0.0022 | None reported | |
| High | CVE-2025-40259 | scsi: sg: Do not sleep in atomic context | 7.0 | 0.0022 | None reported | |
| High | CVE-2025-40211 | ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | 7.8 | 0.0021 | None reported | |
| High | CVE-2025-68325 | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reductio... | n/a | 0.0020 | None reported | |
| High | CVE-2025-40345 | usb: storage: sddr55: Reject out-of-bound new_pba | 7.3 | 0.0020 | None reported | |
| High | CVE-2025-68327 | linux: In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Fix synchronous external abo... | n/a | 0.0019 | None reported | |
| High | CVE-2025-68330 | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regressio... | n/a | 0.0019 | None reported | |
| High | CVE-2025-40269 | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 | None reported |
Showing 1 to 25 of 66
1Next