Linux · Oracle Linux · Package update · August 11, 2026

bpftool 0:5.15.0-323.211.3.3.el9uek: bpftool 0:5.15.0-323.211.3.3.el9uek for ol 8

bpftool 0:5.15.0-323.211.3.3.el9uek, released August 11, 2026, fixes 432 CVEs in bpftool. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
432
19 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0087
59th percentile

Priority of the 432 CVEs

Patch now 0 Urgent 19 High 273 Routine 140

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-323.211.3.3.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()9.8 0.0064 None reported
Urgent CVE-2026-52914 kernel-64kb: Security update for the Linux Kernel9.8 0.0063 None reported
Urgent CVE-2026-64089 kernel-64kb: Security update for the Linux Kernel9.8 0.0055 None reported
Urgent CVE-2026-64125 kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).9.8 0.0055 None reported
Urgent CVE-2026-52982 kernel-64kb: Security update for the Linux Kernel9.8 0.0054 None reported
Urgent CVE-2026-53043 ocfs2/dlm: validate qr_numregions in dlm_match_regions()9.8 0.0051 None reported
Urgent CVE-2026-64046 kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).9.8 0.0051 None reported
Urgent CVE-2026-64047 kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).9.8 0.0051 None reported
Urgent CVE-2026-52931 batman-adv: tp_meter: avoid use of uninit sender vars9.8 0.0050 None reported
Urgent CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison9.8 0.0040 None reported
Urgent CVE-2026-52955 kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).9.8 0.0038 None reported
Urgent CVE-2026-53002 netfilter: conntrack: remove sprintf usage9.8 0.0037 None reported
Urgent CVE-2026-53075 ppp: require CAP_NET_ADMIN in target netns for unattached ioctls9.8 0.0027 None reported
Urgent CVE-2026-52934 batman-adv: tvlv: reject oversized TVLV packets9.8 0.0024 None reported
Urgent CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2()9.8 0.0017 None reported
Urgent CVE-2026-53403 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var9.8 0.0013 None reported
Urgent CVE-2026-52919 batman-adv: fix tp_meter counter underflow during shutdown9.8 0.0012 None reported
Urgent CVE-2026-52947 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove9.8 0.0011 None reported
Urgent CVE-2026-53062 dm cache policy smq: fix missing locks in invalidating cache blocks9.8 0.0010 None reported
High CVE-2026-52929 sctp: stream: fully roll back denied add-stream state9.8 0.0087 None reported
High CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 0.0076 None reported
High CVE-2026-52958 libceph: Fix potential out-of-bounds access in osdmap_decode()9.1 0.0074 None reported
High CVE-2026-43501 ipv6: rpl: reserve mac_len headroom when recompressed SRH grows9.8 0.0073 None reported
High CVE-2026-53003 pppoe: drop PFC frames7.5 0.0072 None reported
High CVE-2026-63912 kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836).9.8 0.0071 None reported
Showing 1 to 25 of 432 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.