Linux · Security advisory · May 10, 2026

ELSA-2026-50261: Security update for 19 packages

ELSA-2026-50261, released May 10, 2026, fixes 49 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
49
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 49 CVEs

Patch now 0 Urgent 1 High 24 Routine 24

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-320.202.8.2.el9uek
bpftoolol 90:5.15.0-320.202.8.2.el9uek
kernel-uekol 80:5.15.0-320.202.8.2.el9uek
kernel-uekol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-containerol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-containerol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-container-debugol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-container-debugol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-coreol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-coreol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debugol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debugol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-develol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-develol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-develol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-develol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-docol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-docol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-modulesol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-modulesol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64kol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64kol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-coreol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-coreol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-develol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-develol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-320.202.8.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-68741 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite... 9.8 0.0043 None reported
High CVE-2025-40135 ipv6: use RCU in ip6_xmit() 8.4 0.0071 None reported
High CVE-2025-40129 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-len... 7.5 0.0057 None reported
High CVE-2025-68775 net/handshake: duplicate handshake cancellations leak socket 9.8 0.0055 None reported
High CVE-2024-50043 linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When... 7.8 0.0050 None reported
High CVE-2025-68770 linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in b... 7.5 0.0039 None reported
High CVE-2025-54518 AMD: CVE-2025-54518 CPU OP Cache Corruption 7.8 0.0029 Exploitation Unlikely
High CVE-2025-21857 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0022 None reported
High CVE-2025-21867 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0021 None reported
High CVE-2025-21997 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.1 0.0021 None reported
High CVE-2025-38385 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect 7.8 0.0020 None reported
High CVE-2025-38109 net/mlx5: Fix ECVF vports unload on shutdown flow 7.8 0.0020 None reported
High CVE-2025-68371 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed af... 7.0 0.0020 None reported
High CVE-2025-38015 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.0 0.0020 None reported
High CVE-2025-38020 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.0 0.0020 None reported
High CVE-2025-38113 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used 7.0 0.0020 None reported
High CVE-2025-21724 linux: In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in... 7.8 0.0019 None reported
High CVE-2026-23243 RDMA/umad: Reject negative data_len in ib_umad_write 7.8 0.0018 None reported
High CVE-2025-38735 gve: prevent ethtool ops after shutdown 7.0 0.0018 None reported
High CVE-2025-40292 virtio-net: fix received length check in big packets 8.4 0.0017 None reported
High CVE-2025-40051 vhost: vringh: Modify the return value check 7.8 0.0017 None reported
High CVE-2025-68171 linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se... 7.8 0.0015 None reported
High CVE-2025-39721 crypto: qat - flush misc workqueue during device shutdown 7.0 0.0015 None reported
High CVE-2026-31411 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.1 0.0013 None reported
High CVE-2026-23296 scsi: core: Fix refcount leak for tagset_refcnt 7.1 0.0013 None reported
Showing 1 to 25 of 49 1Next