Linux · Security advisory · July 4, 2026

ELSA-2026-50374: Security update for 8 packages

ELSA-2026-50374, released July 4, 2026, fixes 6 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
71st percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 5 Routine 1

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-containerol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-debugol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-develol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-docol 80:5.4.17-2136.357.3.1.el7uek
kernel-uek-toolsol 80:5.4.17-2136.357.3.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-53359 kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... 8.8 0.0137 None reported
High CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() 9.8 0.0069 None reported
High CVE-2026-46331 net/sched: fix pedit partial COW leading to page cache corruption 8.1 0.0064 None reported
High CVE-2026-31657 batman-adv: hold claim backbone gateways by reference 9.8 0.0040 None reported
High CVE-2026-31504 net: fix fanout UAF in packet_release() via NETDEV_UP race 7.8 0.0011 None reported
Routine CVE-2022-50073 net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null 6.5 0.0021 None reported
Showing 1 to 6 of 6 1