Linux · Security advisory · October 2, 2026

ELSA-2026-71233: Security update for 30 packages

ELSA-2026-71233, released October 2, 2026, fixes 13 CVEs across 30 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
13
2 rated Critical
Exploited
1
CVE-2026-53266
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0143
73rd percentile

Priority of the 13 CVEs

Patch now 1 Urgent 2 High 10 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.60.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.60.1.el10_2
kernel-coreol 100:6.12.0-211.60.1.el10_2
kernel-cross-headersol 100:6.12.0-211.60.1.el10_2
kernel-debugol 100:6.12.0-211.60.1.el10_2
kernel-debug-coreol 100:6.12.0-211.60.1.el10_2
kernel-debug-develol 100:6.12.0-211.60.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.60.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.60.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.60.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.60.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.60.1.el10_2
kernel-develol 100:6.12.0-211.60.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.60.1.el10_2
kernel-docol 100:6.12.0-211.60.1.el10_2
kernel-headersol 100:6.12.0-211.60.1.el10_2
kernel-modulesol 100:6.12.0-211.60.1.el10_2
kernel-modules-coreol 100:6.12.0-211.60.1.el10_2
kernel-modules-extraol 100:6.12.0-211.60.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.60.1.el10_2
kernel-toolsol 100:6.12.0-211.60.1.el10_2
kernel-tools-libsol 100:6.12.0-211.60.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.60.1.el10_2
kernel-uki-virtol 100:6.12.0-211.60.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.60.1.el10_2
libperfol 100:6.12.0-211.60.1.el10_2
perfol 100:6.12.0-211.60.1.el10_2
python3-perfol 100:6.12.0-211.60.1.el10_2
rtlaol 100:6.12.0-211.60.1.el10_2
rvol 100:6.12.0-211.60.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable 8.8 0.0093 KEVExploited
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 0.0143 None reported
Urgent CVE-2026-89846 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB s... 9.1 0.0071 None reported
High CVE-2026-64383 smb: client: fix double-free in SMB2_flush() replay 9.8 0.0046 None reported
High CVE-2026-80844 xfrm: ah6: validate routing header segments_left 8.3 0.0043 None reported
High CVE-2026-74569 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() 9.8 0.0039 None reported
High CVE-2026-81000 linux: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user()... 8.3 0.0036 None reported
High CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto 8.8 0.0031 None reported
High CVE-2026-23007 kernel: In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integrity buff... 8.3 0.0020 None reported
High CVE-2026-68201 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its... 8.3 0.0017 None reported
High CVE-2026-72243 linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC... 8.8 0.0017 None reported
High CVE-2026-64053 kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.3 0.0013 None reported
High CVE-2026-63802 blk-cgroup: fix UAF in __blkcg_rstat_flush() 8.3 0.0010 None reported
Showing 1 to 13 of 13 1