Linux · Security advisory · October 8, 2026

ELSA-2026-77689: Security update for 29 packages

ELSA-2026-77689, released October 8, 2026, fixes 14 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0069
53rd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 1 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.56.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.56.1.el9_8
kernel-coreol 90:5.14.0-687.56.1.el9_8
kernel-cross-headersol 90:5.14.0-687.56.1.el9_8
kernel-debugol 90:5.14.0-687.56.1.el9_8
kernel-debug-coreol 90:5.14.0-687.56.1.el9_8
kernel-debug-develol 90:5.14.0-687.56.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.56.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.56.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.56.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.56.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.56.1.el9_8
kernel-develol 90:5.14.0-687.56.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.56.1.el9_8
kernel-docol 90:5.14.0-687.56.1.el9_8
kernel-headersol 90:5.14.0-687.56.1.el9_8
kernel-modulesol 90:5.14.0-687.56.1.el9_8
kernel-modules-coreol 90:5.14.0-687.56.1.el9_8
kernel-modules-extraol 90:5.14.0-687.56.1.el9_8
kernel-toolsol 90:5.14.0-687.56.1.el9_8
kernel-tools-libsol 90:5.14.0-687.56.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.56.1.el9_8
kernel-uki-virtol 90:5.14.0-687.56.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.56.1.el9_8
libperfol 90:5.14.0-687.56.1.el9_8
perfol 90:5.14.0-687.56.1.el9_8
python3-perfol 90:5.14.0-687.56.1.el9_8
rtlaol 90:5.14.0-687.56.1.el9_8
rvol 90:5.14.0-687.56.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-72317 linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec... 9.8 0.0064 None reported
High CVE-2026-89669 nfsd: initialize copy-notify stateid before publishing it 9.8 0.0069 None reported
High CVE-2026-53398 NFSD: Fix SECINFO_NO_NAME decode error cleanup 9.8 0.0054 None reported
High CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev 9.8 0.0051 None reported
High CVE-2026-89530 kernel: In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the... 9.8 0.0049 None reported
High CVE-2026-89663 linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before droppin... 9.8 0.0046 None reported
High CVE-2026-64035 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0044 None reported
High CVE-2026-64162 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0044 None reported
High CVE-2026-53360 kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... 8.8 0.0030 None reported
High CVE-2026-53365 linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... 8.8 0.0020 None reported
High CVE-2026-63970 linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... 8.8 0.0018 None reported
High CVE-2026-89690 linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_sta... 8.8 0.0016 None reported
High CVE-2026-64115 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0014 None reported
High CVE-2026-23103 kernel: In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the... 8.8 0.0013 None reported
Showing 1 to 14 of 14 1