Linux · Security advisory · November 7, 2026

ELSA-2026-88477: Security update for 30 packages

ELSA-2026-88477, released November 7, 2026, fixes 18 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
18
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0058
47th percentile

Priority of the 18 CVEs

Patch now 0 Urgent 1 High 17 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.68.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.68.1.el10_2
kernel-coreol 100:6.12.0-211.68.1.el10_2
kernel-cross-headersol 100:6.12.0-211.68.1.el10_2
kernel-debugol 100:6.12.0-211.68.1.el10_2
kernel-debug-coreol 100:6.12.0-211.68.1.el10_2
kernel-debug-develol 100:6.12.0-211.68.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.68.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.68.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.68.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.68.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.68.1.el10_2
kernel-develol 100:6.12.0-211.68.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.68.1.el10_2
kernel-docol 100:6.12.0-211.68.1.el10_2
kernel-headersol 100:6.12.0-211.68.1.el10_2
kernel-modulesol 100:6.12.0-211.68.1.el10_2
kernel-modules-coreol 100:6.12.0-211.68.1.el10_2
kernel-modules-extraol 100:6.12.0-211.68.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.68.1.el10_2
kernel-toolsol 100:6.12.0-211.68.1.el10_2
kernel-tools-libsol 100:6.12.0-211.68.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.68.1.el10_2
kernel-uki-virtol 100:6.12.0-211.68.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.68.1.el10_2
libperfol 100:6.12.0-211.68.1.el10_2
perfol 100:6.12.0-211.68.1.el10_2
python3-perfol 100:6.12.0-211.68.1.el10_2
rtlaol 100:6.12.0-211.68.1.el10_2
rvol 100:6.12.0-211.68.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-68236 drm/amd/display: set new_stream to NULL after release 9.8 0.0013 None reported
High CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly 8.8 0.0058 None reported
High CVE-2026-64048 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.8 0.0050 None reported
High CVE-2026-68278 drm/dp/mst: fix buffer overflows in sideband chunk accumulation 8.1 0.0024 None reported
High CVE-2025-38147 calipso: Don't call calipso functions for AF_INET sk. 7.8 0.0023 None reported
High CVE-2026-64572 ipv4: fib: free fib_alias with kfree_rcu() on insert error path 8.8 0.0020 None reported
High CVE-2026-89791 linux: In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() reviva... 7.8 0.0018 None reported
High CVE-2026-68202 ALSA: seq: close a re-opened queue timer in the destructor 7.8 0.0018 None reported
High CVE-2026-64481 ALSA: hda/cs35l41: Fix firmware load work teardown 7.8 0.0018 None reported
High CVE-2026-89811 drm/amdkfd: Add TLB flush after MES queue eviction/suspension 8.8 0.0018 None reported
High CVE-2026-97493 drm/amdgpu: Bound GPIO I2C table entry count from VBIOS 7.8 0.0017 None reported
High CVE-2026-80887 drm/vmwgfx: use check_add_overflow for shader size+offset bound 8.1 0.0017 None reported
High CVE-2026-68448 ovl: check access to copy_file_range source with src mounter creds 7.8 0.0016 None reported
High CVE-2026-80536 xfs: bounds-check buffer log item's dirty bitmap 8.4 0.0014 None reported
High CVE-2026-64114 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0014 None reported
High CVE-2026-68245 drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() 7.8 0.0013 None reported
High CVE-2026-93817 perf: Fix addr_filter_ranges lifetime 8.8 0.0013 None reported
High CVE-2026-64266 fuse: re-lock request before returning from fuse_ref_folio() 7.8 0.0013 None reported
Showing 1 to 18 of 18 1