Linux · Oracle Linux · Security advisory · September 18, 2026

ELSA-2026-68570: Security update for 29 packages

ELSA-2026-68570, released September 18, 2026, fixes 31 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
31
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0097
62nd percentile

Priority of the 31 CVEs

Patch now 0 Urgent 0 High 31 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.49.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.49.1.el9_8
kernel-coreol 90:5.14.0-687.49.1.el9_8
kernel-cross-headersol 90:5.14.0-687.49.1.el9_8
kernel-debugol 90:5.14.0-687.49.1.el9_8
kernel-debug-coreol 90:5.14.0-687.49.1.el9_8
kernel-debug-develol 90:5.14.0-687.49.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.49.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.49.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.49.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.49.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.49.1.el9_8
kernel-develol 90:5.14.0-687.49.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.49.1.el9_8
kernel-docol 90:5.14.0-687.49.1.el9_8
kernel-headersol 90:5.14.0-687.49.1.el9_8
kernel-modulesol 90:5.14.0-687.49.1.el9_8
kernel-modules-coreol 90:5.14.0-687.49.1.el9_8
kernel-modules-extraol 90:5.14.0-687.49.1.el9_8
kernel-toolsol 90:5.14.0-687.49.1.el9_8
kernel-tools-libsol 90:5.14.0-687.49.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.49.1.el9_8
kernel-uki-virtol 90:5.14.0-687.49.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.49.1.el9_8
libperfol 90:5.14.0-687.49.1.el9_8
perfol 90:5.14.0-687.49.1.el9_8
python3-perfol 90:5.14.0-687.49.1.el9_8
rtlaol 90:5.14.0-687.49.1.el9_8
rvol 90:5.14.0-687.49.1.el9_8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-63913 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...8.8 0.0097 None reported
High CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 0.0076 None reported
High CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE9.8 0.0075 None reported
High CVE-2026-63919 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0065 None reported
High CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing8.8 0.0057 None reported
High CVE-2026-46043 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv9.1 0.0051 None reported
High CVE-2026-68426 xfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 0.0050 None reported
High CVE-2026-46114 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads8.8 0.0047 None reported
High CVE-2026-64175 kernel-debug-uki-virt: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0046 None reported
High CVE-2026-72003 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L...8.8 0.0035 None reported
High CVE-2026-53196 USB: serial: io_ti: fix heap overflow in get_manuf_info()8.8 0.0027 None reported
High CVE-2026-64176 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0027 None reported
High CVE-2026-63869 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0026 None reported
High CVE-2026-31663 xfrm: hold dev ref until after transport_finish NF_HOOK8.8 0.0022 None reported
High CVE-2026-23172 kernel: In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflo...8.8 0.0020 None reported
High CVE-2026-72298 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L...8.8 0.0019 None reported
High CVE-2026-68363 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request8.8 0.0018 None reported
High CVE-2026-63917 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0017 None reported
High CVE-2026-72102 linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...8.8 0.0017 None reported
High CVE-2026-64582 RDMA/rxe: Fix a use-after-free problem in rxe_mmap8.8 0.0017 None reported
High CVE-2026-72243 linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC...8.8 0.0017 None reported
High CVE-2026-63921 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0016 None reported
High CVE-2026-53193 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0014 None reported
High CVE-2026-68128 linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro...8.8 0.0014 None reported
High CVE-2026-68200 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback...8.8 0.0013 None reported
Showing 1 to 25 of 31 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.