Linux · Security advisory · November 7, 2026

ELSA-2026-76739: Security update for 29 packages

ELSA-2026-76739, released November 7, 2026, fixes 38 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
38
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 38 CVEs

Patch now 0 Urgent 2 High 36 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.56.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.56.1.el9_8
kernel-coreol 90:5.14.0-687.56.1.el9_8
kernel-cross-headersol 90:5.14.0-687.56.1.el9_8
kernel-debugol 90:5.14.0-687.56.1.el9_8
kernel-debug-coreol 90:5.14.0-687.56.1.el9_8
kernel-debug-develol 90:5.14.0-687.56.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.56.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.56.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.56.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.56.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.56.1.el9_8
kernel-develol 90:5.14.0-687.56.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.56.1.el9_8
kernel-docol 90:5.14.0-687.56.1.el9_8
kernel-headersol 90:5.14.0-687.56.1.el9_8
kernel-modulesol 90:5.14.0-687.56.1.el9_8
kernel-modules-coreol 90:5.14.0-687.56.1.el9_8
kernel-modules-extraol 90:5.14.0-687.56.1.el9_8
kernel-toolsol 90:5.14.0-687.56.1.el9_8
kernel-tools-libsol 90:5.14.0-687.56.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.56.1.el9_8
kernel-uki-virtol 90:5.14.0-687.56.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.56.1.el9_8
libperfol 90:5.14.0-687.56.1.el9_8
perfol 90:5.14.0-687.56.1.el9_8
python3-perfol 90:5.14.0-687.56.1.el9_8
rtlaol 90:5.14.0-687.56.1.el9_8
rvol 90:5.14.0-687.56.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-89972 nvme: add missing SRCU grace period in error path 9.8 0.0071 None reported
Urgent CVE-2026-63984 kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... 9.8 0.0051 None reported
High CVE-2026-63922 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 9.8 0.0071 None reported
High CVE-2026-63924 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 9.8 0.0071 None reported
High CVE-2026-52986 netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 0.0063 None reported
High CVE-2026-72099 kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.8 0.0055 None reported
High CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last 9.8 0.0054 None reported
High CVE-2026-63993 kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... 9.8 0.0051 None reported
High CVE-2026-63994 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0051 None reported
High CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 0.0051 None reported
High CVE-2026-63992 kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.1 0.0051 None reported
High CVE-2026-97417 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() 8.8 0.0049 None reported
High CVE-2026-64385 smb: client: fix double-free in SMB2_ioctl() replay 9.8 0.0046 None reported
High CVE-2026-89481 nvme-tcp: fix host memory disclosure on R2T for a read command 8.8 0.0043 None reported
High CVE-2026-89480 linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few... 8.8 0.0043 None reported
High CVE-2026-53049 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 9.8 0.0039 None reported
High CVE-2026-74569 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() 9.8 0.0039 None reported
High CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 8.0 0.0033 None reported
High CVE-2026-64557 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_so... 8.8 0.0029 None reported
High CVE-2026-46275 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths 7.8 0.0023 None reported
High CVE-2026-80792 ipv6: fix use-after-free in ip6_finish_output2() 8.1 0.0020 None reported
High CVE-2026-45861 gfs2: Fix slab-use-after-free in qd_put 8.8 0.0019 None reported
High CVE-2026-72289 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 9.3 0.0019 None reported
High CVE-2026-72255 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 8.8 0.0018 None reported
High CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). 8.8 0.0017 None reported
Showing 1 to 25 of 38 1Next