Linux · Security advisory · March 10, 2026
ELSA-2026-50145: Security update for 19 packages
ELSA-2026-50145, released March 10, 2026, fixes 145 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
145
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0078
56th percentile
Priority of the 145 CVEs
Patch now 0
Urgent 3
High 62
Routine 80
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| bpftool | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-container | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-container | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-container-debug | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-container-debug | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-core | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-core | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-core | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-core | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-devel | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-modules | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-modules-extra | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-devel | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-devel | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-doc | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-doc | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-modules | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-modules | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-modules-extra | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-core | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-core | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-devel | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-devel | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-modules | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-modules | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-modules-extra | ol 8 | 0:5.15.0-318.199.3.2.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:5.15.0-318.199.3.2.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-68366 | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... | 8.8 | 0.0020 | None reported | |
| Urgent | CVE-2025-68819 | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 | None reported | |
| Urgent | CVE-2025-71098 | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 | None reported | |
| High | CVE-2026-22998 | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.5 | 0.0078 | None reported | |
| High | CVE-2025-68349 | linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 | None reported | |
| High | CVE-2025-68782 | scsi: target: Reset t_task_cdb pointer in error case | 8.6 | 0.0069 | None reported | |
| High | CVE-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 | None reported | |
| High | CVE-2025-68337 | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 | None reported | |
| High | CVE-2026-23003 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 8.8 | 0.0055 | None reported | |
| High | CVE-2025-71120 | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 | None reported | |
| High | CVE-2026-23111 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0052 | None reported | |
| High | CVE-2025-71116 | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 | None reported | |
| High | CVE-2025-68803 | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 | None reported | |
| High | CVE-2026-22984 | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in... | 8.8 | 0.0041 | None reported | |
| High | CVE-2026-22990 | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app... | 8.8 | 0.0040 | None reported | |
| High | CVE-2026-23139 | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only whe... | 7.6 | 0.0038 | None reported | |
| High | CVE-2025-71068 | svcrdma: bound check rq_pages index in inline path | 7.8 | 0.0038 | None reported | |
| High | CVE-2025-68255 | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | 8.8 | 0.0037 | None reported | |
| High | CVE-2025-68818 | scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" | 8.8 | 0.0033 | None reported | |
| High | CVE-2025-71085 | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0031 | None reported | |
| High | CVE-2025-71093 | e1000: fix OOB in e1000_tbi_should_accept() | 7.1 | 0.0029 | None reported | |
| High | CVE-2025-68254 | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | 7.1 | 0.0028 | None reported | |
| High | CVE-2025-71197 | linux: In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in ala... | n/a | 0.0026 | None reported | |
| High | CVE-2024-46830 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu when handling KVM_SE... | 7.8 | 0.0025 | None reported | |
| High | CVE-2025-71127 | wifi: mac80211: Discard Beacon frames to non-broadcast address | 7.9 | 0.0023 | None reported |
Showing 1 to 25 of 145
1Next