Linux · Oracle Linux · Security advisory · September 8, 2026

ELSA-2026-63129-0: Security update for 29 packages

ELSA-2026-63129-0, released September 8, 2026, fixes 26 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
26
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0080
56th percentile

Priority of the 26 CVEs

Patch now 0 Urgent 5 High 21 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.44.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.44.1.el9_8
kernel-coreol 90:5.14.0-687.44.1.el9_8
kernel-cross-headersol 90:5.14.0-687.44.1.el9_8
kernel-debugol 90:5.14.0-687.44.1.el9_8
kernel-debug-coreol 90:5.14.0-687.44.1.el9_8
kernel-debug-develol 90:5.14.0-687.44.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.44.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.44.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.44.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.44.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.44.1.el9_8
kernel-develol 90:5.14.0-687.44.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.44.1.el9_8
kernel-docol 90:5.14.0-687.44.1.el9_8
kernel-headersol 90:5.14.0-687.44.1.el9_8
kernel-modulesol 90:5.14.0-687.44.1.el9_8
kernel-modules-coreol 90:5.14.0-687.44.1.el9_8
kernel-modules-extraol 90:5.14.0-687.44.1.el9_8
kernel-toolsol 90:5.14.0-687.44.1.el9_8
kernel-tools-libsol 90:5.14.0-687.44.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.44.1.el9_8
kernel-uki-virtol 90:5.14.0-687.44.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.44.1.el9_8
libperfol 90:5.14.0-687.44.1.el9_8
perfol 90:5.14.0-687.44.1.el9_8
python3-perfol 90:5.14.0-687.44.1.el9_8
rtlaol 90:5.14.0-687.44.1.el9_8
rvol 90:5.14.0-687.44.1.el9_8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-72130 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n...9.8 0.0080 None reported
Urgent CVE-2026-72069 linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in...9.8 0.0073 None reported
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()9.8 0.0064 None reported
Urgent CVE-2026-68166 userfaultfd: prevent registration of special VMAs9.8 0.0021 None reported
Urgent CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2()9.8 0.0017 None reported
High CVE-2026-63887 kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp...9.8 0.0078 None reported
High CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length9.8 0.0071 None reported
High CVE-2026-63886 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...9.8 0.0071 None reported
High CVE-2026-53399 nfsd: release layout stid on setlease failure9.8 0.0066 None reported
High CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count8.8 0.0053 None reported
High CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure8.8 0.0053 None reported
High CVE-2026-63808 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system9.8 0.0053 None reported
High CVE-2026-46185 smb/client: fix out-of-bounds read in symlink_data()9.1 0.0053 None reported
High CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr8.8 0.0052 None reported
High CVE-2026-64387 smb: client: fix query directory replay double-free9.8 0.0046 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection8.8 0.0023 None reported
High CVE-2026-64490 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the...8.8 0.0019 None reported
High CVE-2026-64304 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...8.8 0.0017 None reported
High CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC8.8 0.0015 None reported
High CVE-2026-64018 kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-...9.3 0.0014 None reported
High CVE-2025-71147 kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd...8.8 0.0014 None reported
High CVE-2026-68145 iomap: fix out-of-bounds bitmap_set() with zero-length range8.8 0.0014 None reported
High CVE-2026-64438 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in ad...8.8 0.0014 None reported
High CVE-2026-64002 kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports...8.8 0.0013 None reported
High CVE-2026-45970 kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0013 None reported
Showing 1 to 25 of 26 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.