Linux · Security advisory · November 7, 2026

ELSA-2026-93412: Security update for 29 packages

ELSA-2026-93412, released November 7, 2026, fixes 18 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
18
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0087
59th percentile

Priority of the 18 CVEs

Patch now 0 Urgent 1 High 17 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 90:5.14.0-687.64.1.el9_8
kernel-abi-stablelistsol 90:5.14.0-687.64.1.el9_8
kernel-coreol 90:5.14.0-687.64.1.el9_8
kernel-cross-headersol 90:5.14.0-687.64.1.el9_8
kernel-debugol 90:5.14.0-687.64.1.el9_8
kernel-debug-coreol 90:5.14.0-687.64.1.el9_8
kernel-debug-develol 90:5.14.0-687.64.1.el9_8
kernel-debug-devel-matchedol 90:5.14.0-687.64.1.el9_8
kernel-debug-modulesol 90:5.14.0-687.64.1.el9_8
kernel-debug-modules-coreol 90:5.14.0-687.64.1.el9_8
kernel-debug-modules-extraol 90:5.14.0-687.64.1.el9_8
kernel-debug-uki-virtol 90:5.14.0-687.64.1.el9_8
kernel-develol 90:5.14.0-687.64.1.el9_8
kernel-devel-matchedol 90:5.14.0-687.64.1.el9_8
kernel-docol 90:5.14.0-687.64.1.el9_8
kernel-headersol 90:5.14.0-687.64.1.el9_8
kernel-modulesol 90:5.14.0-687.64.1.el9_8
kernel-modules-coreol 90:5.14.0-687.64.1.el9_8
kernel-modules-extraol 90:5.14.0-687.64.1.el9_8
kernel-toolsol 90:5.14.0-687.64.1.el9_8
kernel-tools-libsol 90:5.14.0-687.64.1.el9_8
kernel-tools-libs-develol 90:5.14.0-687.64.1.el9_8
kernel-uki-virtol 90:5.14.0-687.64.1.el9_8
kernel-uki-virt-addonsol 90:5.14.0-687.64.1.el9_8
libperfol 90:5.14.0-687.64.1.el9_8
perfol 90:5.14.0-687.64.1.el9_8
python3-perfol 90:5.14.0-687.64.1.el9_8
rtlaol 90:5.14.0-687.64.1.el9_8
rvol 90:5.14.0-687.64.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-98725 nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 9.8 0.0021 None reported
High CVE-2026-52929 sctp: stream: fully roll back denied add-stream state 9.8 0.0087 None reported
High CVE-2026-90011 scsi: target: iscsi: Reserve a terminator byte for the login payload 9.8 0.0084 None reported
High CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 0.0076 None reported
High CVE-2026-72083 kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 9.8 0.0072 None reported
High CVE-2026-64303 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path 9.8 0.0069 None reported
High CVE-2026-53228 ipv6: sit: reload inner IPv6 header after GSO offloads 9.8 0.0058 None reported
High CVE-2026-80586 mptcp: options: reset DSS fields in case of unexpected size 9.8 0.0040 None reported
High CVE-2026-93787 smb: client: bound dirent name against end of SMB response in cifs_filldir 9.8 0.0034 None reported
High CVE-2026-68169 mptcp: pm: userspace: fix use-after-free in get_local_id 9.8 0.0021 None reported
High CVE-2026-98466 KVM: arm64: Transfer the hyp stack pages out of the host stage-2 9.8 0.0017 None reported
High CVE-2026-74283 kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... 9.8 0.0017 None reported
High CVE-2026-53270 ipvs: clear the svc scheduler ptr early on edit 9.8 0.0016 None reported
High CVE-2026-93827 kernel: In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setu... 9.8 0.0014 None reported
High CVE-2026-74510 Bluetooth: mgmt: fix UAF in pair command cancellation 9.8 0.0014 None reported
High CVE-2026-98364 xfrm: hold net_device reference under RCU in bundle creation 9.8 0.0012 None reported
High CVE-2026-74582 packet: use consistent hard_header_len in non-ring send paths 9.8 0.0012 None reported
High CVE-2026-89603 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 9.8 n/a None reported
Showing 1 to 18 of 18 1