Linux · Security advisory · October 2, 2026

ELSA-2026-70402: Security update for 20 packages

ELSA-2026-70402, released October 2, 2026, fixes 20 CVEs across 20 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
20
3 rated Critical
Exploited
1
CVE-2025-39964
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0161
76th percentile

Priority of the 20 CVEs

Patch now 1 Urgent 3 High 16 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:4.18.0-553.168.1.el8_10
kernelol 80:4.18.0-553.168.1.el8_10
kernel-abi-stablelistsol 80:4.18.0-553.168.1.el8_10
kernel-coreol 80:4.18.0-553.168.1.el8_10
kernel-cross-headersol 80:4.18.0-553.168.1.el8_10
kernel-debugol 80:4.18.0-553.168.1.el8_10
kernel-debug-coreol 80:4.18.0-553.168.1.el8_10
kernel-debug-develol 80:4.18.0-553.168.1.el8_10
kernel-debug-modulesol 80:4.18.0-553.168.1.el8_10
kernel-debug-modules-extraol 80:4.18.0-553.168.1.el8_10
kernel-develol 80:4.18.0-553.168.1.el8_10
kernel-docol 80:4.18.0-553.168.1.el8_10
kernel-headersol 80:4.18.0-553.168.1.el8_10
kernel-modulesol 80:4.18.0-553.168.1.el8_10
kernel-modules-extraol 80:4.18.0-553.168.1.el8_10
kernel-toolsol 80:4.18.0-553.168.1.el8_10
kernel-tools-libsol 80:4.18.0-553.168.1.el8_10
kernel-tools-libs-develol 80:4.18.0-553.168.1.el8_10
perfol 80:4.18.0-553.168.1.el8_10
python3-perfol 80:4.18.0-553.168.1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 8.8 0.0161 KEVExploited
Urgent CVE-2026-64534 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un... 9.8 0.0032 None reported
Urgent CVE-2026-53053 iommu/amd: Fix clone_alias() to use the original device's devid 9.8 0.0013 None reported
Urgent CVE-2026-53062 dm cache policy smq: fix missing locks in invalidating cache blocks 9.8 0.0010 None reported
High CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing 8.8 0.0057 None reported
High CVE-2026-46043 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv 9.1 0.0051 None reported
High CVE-2026-63947 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0035 None reported
High CVE-2023-54120 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_th... 8.8 0.0031 None reported
High CVE-2023-54214 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free... 8.8 0.0030 None reported
High CVE-2026-43334 kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... 8.8 0.0028 None reported
High CVE-2026-53254 Bluetooth: RFCOMM: validate skb length in MCC handlers 8.1 0.0028 None reported
High CVE-2026-63975 kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0027 None reported
High CVE-2026-53256 kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.1 0.0026 None reported
High CVE-2026-52918 Bluetooth: serialize accept_q access 8.8 0.0022 None reported
High CVE-2026-68188 Bluetooth: RFCOMM: Fix session UAF in set_termios 8.8 0.0022 None reported
High CVE-2026-64582 RDMA/rxe: Fix a use-after-free problem in rxe_mmap 8.8 0.0017 None reported
High CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths 8.8 0.0016 None reported
High CVE-2025-71082 Bluetooth: btusb: revert use of devm_kzalloc in btusb 7.8 0.0015 None reported
High CVE-2026-68293 net/mlx5: Fix MCIA register buffer overflow on 32 dword reads 8.8 0.0014 None reported
High CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry 8.8 0.0013 None reported
Showing 1 to 20 of 20 1