Linux · Security advisory · November 7, 2026

ELSA-2026-90365: Security update for 29 packages

ELSA-2026-90365, released November 7, 2026, fixes 15 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
15
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 15 CVEs

Patch now 0 Urgent 4 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.61.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.61.1.el9_8
kernel-coreol 90:5.14.0-687.61.1.el9_8
kernel-cross-headersol 90:5.14.0-687.61.1.el9_8
kernel-debugol 90:5.14.0-687.61.1.el9_8
kernel-debug-coreol 90:5.14.0-687.61.1.el9_8
kernel-debug-develol 90:5.14.0-687.61.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.61.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.61.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.61.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.61.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.61.1.el9_8
kernel-develol 90:5.14.0-687.61.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.61.1.el9_8
kernel-docol 90:5.14.0-687.61.1.el9_8
kernel-headersol 90:5.14.0-687.61.1.el9_8
kernel-modulesol 90:5.14.0-687.61.1.el9_8
kernel-modules-coreol 90:5.14.0-687.61.1.el9_8
kernel-modules-extraol 90:5.14.0-687.61.1.el9_8
kernel-toolsol 90:5.14.0-687.61.1.el9_8
kernel-tools-libsol 90:5.14.0-687.61.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.61.1.el9_8
kernel-uki-virtol 90:5.14.0-687.61.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.61.1.el9_8
libperfol 90:5.14.0-687.61.1.el9_8
perfol 90:5.14.0-687.61.1.el9_8
python3-perfol 90:5.14.0-687.61.1.el9_8
rtlaol 90:5.14.0-687.61.1.el9_8
rvol 90:5.14.0-687.61.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-68476 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... 9.8 0.0071 None reported
Urgent CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit 9.8 0.0064 None reported
Urgent CVE-2026-98222 KEYS: encrypted: fix integer overflow of datablob_len 9.8 0.0017 None reported
Urgent CVE-2026-98320 netfilter: flowtable: hold reference on ct until flow is released 9.8 0.0014 None reported
High CVE-2026-72242 linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_... 8.8 0.0070 None reported
High CVE-2026-63978 net/handshake: Drain pending requests at net namespace exit 9.8 0.0049 None reported
High CVE-2026-64523 net/handshake: Take a long-lived file reference at submit 9.8 0.0045 None reported
High CVE-2026-80824 usb: usbfs: fix use-after-free of usb_device in usbdev_release() 8.8 0.0020 None reported
High CVE-2024-57974 udp: Deal with race between UDP socket address change and rehash 7.8 0.0018 None reported
High CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions 8.8 0.0018 None reported
High CVE-2026-89777 vfio/pci: clear vdev->msi_perm after freeing it on init failure 8.8 0.0016 None reported
High CVE-2026-93262 md/raid5-ppl: fix use-after-free in ppl_do_flush() 8.8 0.0015 None reported
High CVE-2026-53388 fuse: re-lock request before replacing page cache folio 8.8 0.0013 None reported
High CVE-2026-74515 linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forward... 8.8 0.0013 None reported
High CVE-2026-64266 fuse: re-lock request before returning from fuse_ref_folio() 7.8 0.0013 None reported
Showing 1 to 15 of 15 1