Linux · Security advisory · November 7, 2026

ELSA-2026-83207: Security update for 30 packages

ELSA-2026-83207, released November 7, 2026, fixes 20 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

7 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0071

53rd percentile

Priority of the 20 CVEs

Patch now 0
                                Urgent 7
                                High 13
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	ol 10	0:6.12.0-211.66.1.el10_2
kernel-abi-stablelists	ol 10	0:6.12.0-211.66.1.el10_2
kernel-core	ol 10	0:6.12.0-211.66.1.el10_2
kernel-cross-headers	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-core	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-devel	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-devel-matched	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-modules	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-modules-core	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-modules-extra	ol 10	0:6.12.0-211.66.1.el10_2
kernel-debug-uki-virt	ol 10	0:6.12.0-211.66.1.el10_2
kernel-devel	ol 10	0:6.12.0-211.66.1.el10_2
kernel-devel-matched	ol 10	0:6.12.0-211.66.1.el10_2
kernel-doc	ol 10	0:6.12.0-211.66.1.el10_2
kernel-headers	ol 10	0:6.12.0-211.66.1.el10_2
kernel-modules	ol 10	0:6.12.0-211.66.1.el10_2
kernel-modules-core	ol 10	0:6.12.0-211.66.1.el10_2
kernel-modules-extra	ol 10	0:6.12.0-211.66.1.el10_2
kernel-modules-extra-matched	ol 10	0:6.12.0-211.66.1.el10_2
kernel-tools	ol 10	0:6.12.0-211.66.1.el10_2
kernel-tools-libs	ol 10	0:6.12.0-211.66.1.el10_2
kernel-tools-libs-devel	ol 10	0:6.12.0-211.66.1.el10_2
kernel-uki-virt	ol 10	0:6.12.0-211.66.1.el10_2
kernel-uki-virt-addons	ol 10	0:6.12.0-211.66.1.el10_2
libperf	ol 10	0:6.12.0-211.66.1.el10_2
perf	ol 10	0:6.12.0-211.66.1.el10_2
python3-perf	ol 10	0:6.12.0-211.66.1.el10_2
rtla	ol 10	0:6.12.0-211.66.1.el10_2
rv	ol 10	0:6.12.0-211.66.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-89526	svcrdma: Validate Read chunk positions before reconstruction	9.8	0.0068	None reported
Urgent	CVE-2026-89689	linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in...	9.8	0.0061	None reported
Urgent	CVE-2026-90036	NFSD: Prevent client use-after-free during blocked-lock reaping	9.8	0.0048	None reported
Urgent	CVE-2026-93207	SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry	9.8	0.0047	None reported
Urgent	CVE-2026-63974	Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close	9.8	0.0035	None reported
Urgent	CVE-2026-68140	net/iucv: fix use-after-free of a severed iucv_path	9.8	0.0028	None reported
Urgent	CVE-2026-68377	net/sched: act_tunnel_key: Defer dst_release to RCU callback	9.8	0.0013	None reported
High	CVE-2026-45859	netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation	8.1	0.0071	None reported
High	CVE-2026-80985	linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in...	8.8	0.0053	None reported
High	CVE-2026-93228	svcrdma: Reject Write/Reply chunks with segcount 0	9.1	0.0050	None reported
High	CVE-2026-64162	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0044	None reported
High	CVE-2026-64030	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0024	None reported
High	CVE-2026-72262	linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in by...	8.8	0.0018	None reported
High	CVE-2026-63899	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0018	None reported
High	CVE-2026-89894	media: cx231xx: reject geometry changes while the VBI queue is busy	8.1	0.0017	None reported
High	CVE-2026-64032	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0013	None reported
High	CVE-2026-53011	net/sched: taprio: fix use-after-free in advance_sched() on schedule switch	8.8	0.0013	None reported
High	CVE-2026-74641	ALSA: usx2y: bound the hwdep mmap fault offset	8.8	0.0013	None reported
High	CVE-2026-74574	linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup...	8.1	0.0012	None reported
High	CVE-2026-46319	net/sched: act_ct: Only release RCU read lock after ct_ft	8.8	0.0011	None reported

Also fixes CVE-2026-89526

OPENSUSE-SU-2026:22091-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:24197-1
kernel-default on sles 16.0
SUSE-SU-2026:24235-1
kernel-64kb, kernel-azure, kernel-default-base and 6 more on sles 16.0
ELSA-2026-500374
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
ALSA-2026:83207
kernel, kernel-64k, kernel-64k-core and 72 more on almalinux 10
RLSA-2026:83207
kernel on rocky 10
RHSA-2026:83207
kernel on RHEL 10
ELSA-2026-83156
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9

Vendor advisory

https://linux.oracle.com/errata/ELSA-2026-83207.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo