Linux · Security advisory · September 17, 2026

ELSA-2026-68507: Security update for 30 packages

ELSA-2026-68507, released September 17, 2026, fixes 19 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0076

55th percentile

Priority of the 19 CVEs

Patch now 0
                                Urgent 1
                                High 18
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	ol 10	0:6.12.0-211.56.1.el10_2
kernel-abi-stablelists	ol 10	0:6.12.0-211.56.1.el10_2
kernel-core	ol 10	0:6.12.0-211.56.1.el10_2
kernel-cross-headers	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-core	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-devel	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-devel-matched	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-modules	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-modules-core	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-modules-extra	ol 10	0:6.12.0-211.56.1.el10_2
kernel-debug-uki-virt	ol 10	0:6.12.0-211.56.1.el10_2
kernel-devel	ol 10	0:6.12.0-211.56.1.el10_2
kernel-devel-matched	ol 10	0:6.12.0-211.56.1.el10_2
kernel-doc	ol 10	0:6.12.0-211.56.1.el10_2
kernel-headers	ol 10	0:6.12.0-211.56.1.el10_2
kernel-modules	ol 10	0:6.12.0-211.56.1.el10_2
kernel-modules-core	ol 10	0:6.12.0-211.56.1.el10_2
kernel-modules-extra	ol 10	0:6.12.0-211.56.1.el10_2
kernel-modules-extra-matched	ol 10	0:6.12.0-211.56.1.el10_2
kernel-tools	ol 10	0:6.12.0-211.56.1.el10_2
kernel-tools-libs	ol 10	0:6.12.0-211.56.1.el10_2
kernel-tools-libs-devel	ol 10	0:6.12.0-211.56.1.el10_2
kernel-uki-virt	ol 10	0:6.12.0-211.56.1.el10_2
kernel-uki-virt-addons	ol 10	0:6.12.0-211.56.1.el10_2
libperf	ol 10	0:6.12.0-211.56.1.el10_2
perf	ol 10	0:6.12.0-211.56.1.el10_2
python3-perf	ol 10	0:6.12.0-211.56.1.el10_2
rtla	ol 10	0:6.12.0-211.56.1.el10_2
rv	ol 10	0:6.12.0-211.56.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-68143	net: slip: serialize receive against buffer reallocation	9.8	0.0011	None reported
High	CVE-2026-53176	IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN	9.8	0.0076	None reported
High	CVE-2026-64175	kernel-debug-uki-virt: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0046	None reported
High	CVE-2026-64414	linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo...	7.8	0.0044	None reported
High	CVE-2026-64176	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0027	None reported
High	CVE-2026-63869	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0026	None reported
High	CVE-2024-58007	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0025	None reported
High	CVE-2026-23172	kernel: In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflo...	8.8	0.0020	None reported
High	CVE-2026-68363	wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request	8.8	0.0018	None reported
High	CVE-2026-63923	kernel: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_h...	8.8	0.0017	None reported
High	CVE-2026-72102	linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...	8.8	0.0017	None reported
High	CVE-2026-68294	net: qrtr: restrict socket creation to the initial network namespace	8.8	0.0015	None reported
High	CVE-2026-64456	hwrng: virtio: clamp device-reported used.len at copy_data()	8.4	0.0015	None reported
High	CVE-2026-53193	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0014	None reported
High	CVE-2026-68128	linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro...	8.8	0.0014	None reported
High	CVE-2026-68200	linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback...	8.8	0.0013	None reported
High	CVE-2026-52971	kernel: In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Fix potential use-after-free in ge...	8.8	0.0010	None reported
High	CVE-2026-53192	ALSA: timer: Fix UAF at snd_timer_user_params()	8.8	0.0010	None reported
High	CVE-2026-64029	kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0010	None reported

Also fixes CVE-2026-68143

SUSE-SU-2026:4120-1
kernel-livepatch-SLE15-SP7-RT_Update_20 on sles 15.7
ELSA-2026-500248
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
ELSA-2026-500249
bpftool, kernel-uek, kernel-uek-container and 16 more on ol 8, ol 9
OPENSUSE-SU-2026:21910-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:23902-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
SUSE-SU-2026:4254-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
RHSA-2026:68532
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RLSA-2026:68532
kernel-rt on rocky 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2026-68507.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo