Linux · Security advisory · November 7, 2026

ELSA-2026-93413: Security update for 30 packages

ELSA-2026-93413, released November 7, 2026, fixes 15 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
15
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0084
58th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 2 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.72.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.72.1.el10_2
kernel-coreol 100:6.12.0-211.72.1.el10_2
kernel-cross-headersol 100:6.12.0-211.72.1.el10_2
kernel-debugol 100:6.12.0-211.72.1.el10_2
kernel-debug-coreol 100:6.12.0-211.72.1.el10_2
kernel-debug-develol 100:6.12.0-211.72.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.72.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.72.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.72.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.72.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.72.1.el10_2
kernel-develol 100:6.12.0-211.72.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.72.1.el10_2
kernel-docol 100:6.12.0-211.72.1.el10_2
kernel-headersol 100:6.12.0-211.72.1.el10_2
kernel-modulesol 100:6.12.0-211.72.1.el10_2
kernel-modules-coreol 100:6.12.0-211.72.1.el10_2
kernel-modules-extraol 100:6.12.0-211.72.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.72.1.el10_2
kernel-toolsol 100:6.12.0-211.72.1.el10_2
kernel-tools-libsol 100:6.12.0-211.72.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.72.1.el10_2
kernel-uki-virtol 100:6.12.0-211.72.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.72.1.el10_2
libperfol 100:6.12.0-211.72.1.el10_2
perfol 100:6.12.0-211.72.1.el10_2
python3-perfol 100:6.12.0-211.72.1.el10_2
rtlaol 100:6.12.0-211.72.1.el10_2
rvol 100:6.12.0-211.72.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-98725 nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 9.8 0.0021 None reported
Urgent CVE-2026-98222 KEYS: encrypted: fix integer overflow of datablob_len 9.8 0.0017 None reported
High CVE-2026-90011 scsi: target: iscsi: Reserve a terminator byte for the login payload 9.8 0.0084 None reported
High CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 0.0076 None reported
High CVE-2026-80586 mptcp: options: reset DSS fields in case of unexpected size 9.8 0.0040 None reported
High CVE-2026-93787 smb: client: bound dirent name against end of SMB response in cifs_filldir 9.8 0.0034 None reported
High CVE-2026-68398 ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF 9.8 0.0023 None reported
High CVE-2026-68169 mptcp: pm: userspace: fix use-after-free in get_local_id 9.8 0.0021 None reported
High CVE-2026-22977 linux: In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_r... 9.8 0.0019 None reported
High CVE-2026-74283 kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... 9.8 0.0017 None reported
High CVE-2026-89932 KVM: nVMX: Always flush vpid02 on first use 9.8 0.0017 None reported
High CVE-2026-46174 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache 9.8 0.0015 None reported
High CVE-2026-93827 kernel: In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setu... 9.8 0.0014 None reported
High CVE-2026-98364 xfrm: hold net_device reference under RCU in bundle creation 9.8 0.0012 None reported
High CVE-2026-89603 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 9.8 n/a None reported
Showing 1 to 15 of 15 1