Linux · Security advisory · October 8, 2026

ELSA-2026-76738: Security update for 30 packages

ELSA-2026-76738, released October 8, 2026, fixes 35 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
35
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0075
54th percentile

Priority of the 35 CVEs

Patch now 0 Urgent 4 High 31 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.63.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.63.1.el10_2
kernel-coreol 100:6.12.0-211.63.1.el10_2
kernel-cross-headersol 100:6.12.0-211.63.1.el10_2
kernel-debugol 100:6.12.0-211.63.1.el10_2
kernel-debug-coreol 100:6.12.0-211.63.1.el10_2
kernel-debug-develol 100:6.12.0-211.63.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.63.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.63.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.63.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.63.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.63.1.el10_2
kernel-develol 100:6.12.0-211.63.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.63.1.el10_2
kernel-docol 100:6.12.0-211.63.1.el10_2
kernel-headersol 100:6.12.0-211.63.1.el10_2
kernel-modulesol 100:6.12.0-211.63.1.el10_2
kernel-modules-coreol 100:6.12.0-211.63.1.el10_2
kernel-modules-extraol 100:6.12.0-211.63.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.63.1.el10_2
kernel-toolsol 100:6.12.0-211.63.1.el10_2
kernel-tools-libsol 100:6.12.0-211.63.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.63.1.el10_2
kernel-uki-virtol 100:6.12.0-211.63.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.63.1.el10_2
libperfol 100:6.12.0-211.63.1.el10_2
perfol 100:6.12.0-211.63.1.el10_2
python3-perfol 100:6.12.0-211.63.1.el10_2
rtlaol 100:6.12.0-211.63.1.el10_2
rvol 100:6.12.0-211.63.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-68476 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... 9.8 0.0071 None reported
Urgent CVE-2026-89972 nvme: add missing SRCU grace period in error path 9.8 0.0071 None reported
Urgent CVE-2026-63984 kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... 9.8 0.0051 None reported
Urgent CVE-2026-64078 netfilter: x_tables: add and use xtables_unregister_table_exit 9.8 0.0013 None reported
High CVE-2026-45860 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection... 7.5 0.0075 None reported
High CVE-2026-63922 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 9.8 0.0071 None reported
High CVE-2026-63924 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 9.8 0.0071 None reported
High CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups 9.1 0.0057 None reported
High CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last 9.8 0.0054 None reported
High CVE-2026-63994 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0051 None reported
High CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 0.0051 None reported
High CVE-2026-63992 kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.1 0.0051 None reported
High CVE-2026-64132 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0049 None reported
High CVE-2026-97417 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() 8.8 0.0049 None reported
High CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 8.0 0.0033 None reported
High CVE-2026-64024 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.4 0.0031 None reported
High CVE-2026-64557 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_so... 8.8 0.0029 None reported
High CVE-2026-46275 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths 7.8 0.0023 None reported
High CVE-2026-80792 ipv6: fix use-after-free in ip6_finish_output2() 8.1 0.0020 None reported
High CVE-2026-45856 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i... 8.8 0.0019 None reported
High CVE-2026-80775 linux: In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm->futex.phash.r... 7.0 0.0019 None reported
High CVE-2026-72255 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 8.8 0.0018 None reported
High CVE-2026-63920 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.1 0.0017 None reported
High CVE-2026-90227 nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() 8.8 0.0017 None reported
High CVE-2026-63918 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0016 None reported
Showing 1 to 25 of 35 1Next