Linux · Security advisory · November 7, 2026

ELSA-2026-91565: Security update for 30 packages

ELSA-2026-91565, released November 7, 2026, fixes 16 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
16
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0072
54th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 1 High 15 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.69.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.69.1.el10_2
kernel-coreol 100:6.12.0-211.69.1.el10_2
kernel-cross-headersol 100:6.12.0-211.69.1.el10_2
kernel-debugol 100:6.12.0-211.69.1.el10_2
kernel-debug-coreol 100:6.12.0-211.69.1.el10_2
kernel-debug-develol 100:6.12.0-211.69.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.69.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.69.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.69.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.69.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.69.1.el10_2
kernel-develol 100:6.12.0-211.69.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.69.1.el10_2
kernel-docol 100:6.12.0-211.69.1.el10_2
kernel-headersol 100:6.12.0-211.69.1.el10_2
kernel-modulesol 100:6.12.0-211.69.1.el10_2
kernel-modules-coreol 100:6.12.0-211.69.1.el10_2
kernel-modules-extraol 100:6.12.0-211.69.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.69.1.el10_2
kernel-toolsol 100:6.12.0-211.69.1.el10_2
kernel-tools-libsol 100:6.12.0-211.69.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.69.1.el10_2
kernel-uki-virtol 100:6.12.0-211.69.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.69.1.el10_2
libperfol 100:6.12.0-211.69.1.el10_2
perfol 100:6.12.0-211.69.1.el10_2
python3-perfol 100:6.12.0-211.69.1.el10_2
rtlaol 100:6.12.0-211.69.1.el10_2
rvol 100:6.12.0-211.69.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit 9.8 0.0064 None reported
High CVE-2026-72083 kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 9.8 0.0072 None reported
High CVE-2026-68136 net: gro: fix double aggregation of flush-marked skbs 9.8 0.0054 None reported
High CVE-2026-63978 net/handshake: Drain pending requests at net namespace exit 9.8 0.0049 None reported
High CVE-2026-64523 net/handshake: Take a long-lived file reference at submit 9.8 0.0045 None reported
High CVE-2026-80824 usb: usbfs: fix use-after-free of usb_device in usbdev_release() 8.8 0.0020 None reported
High CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions 8.8 0.0018 None reported
High CVE-2026-89777 vfio/pci: clear vdev->msi_perm after freeing it on init failure 8.8 0.0016 None reported
High CVE-2026-93262 md/raid5-ppl: fix use-after-free in ppl_do_flush() 8.8 0.0015 None reported
High CVE-2026-74631 net: smc: fix splice entry lifetime imbalance in smc_rx_splice 8.8 0.0014 None reported
High CVE-2026-68338 net/packet: avoid fanout hook re-registration after unregister 8.8 0.0014 None reported
High CVE-2026-53388 fuse: re-lock request before replacing page cache folio 8.8 0.0013 None reported
High CVE-2026-64109 linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_strea... 8.8 0.0013 None reported
High CVE-2026-74515 linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forward... 8.8 0.0013 None reported
High CVE-2026-53236 tcp: restrict SO_ATTACH_FILTER to priv users 8.8 0.0013 None reported
High CVE-2026-64027 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0010 None reported
Showing 1 to 16 of 16 1