Linux · Security advisory · May 10, 2026

ELSA-2026-50262: Security update for 8 packages

ELSA-2026-50262, released May 10, 2026, fixes 7 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0053
44th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 6 Routine 1

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-containerol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-debugol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-develol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-docol 80:5.4.17-2136.355.3.1.el7uek
kernel-uek-toolsol 80:5.4.17-2136.355.3.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-71120 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 7.5 0.0053 None reported
High CVE-2025-54518 AMD: CVE-2025-54518 CPU OP Cache Corruption 7.8 0.0029 Exploitation Unlikely
High CVE-2026-23074 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... 7.8 0.0019 None reported
High CVE-2026-43033 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption 7.8 0.0014 None reported
High CVE-2026-43078 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix page reassignment overflow... 7.8 0.0013 None reported
High CVE-2026-43077 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... 8.1 0.0012 None reported
Routine CVE-2026-31628 x86/CPU: Fix FPDSS on Zen1 5.5 0.0013 None reported
Showing 1 to 7 of 7 1