Linux · Oracle Linux · Package update · August 11, 2026

kernel-uek-debug 0:5.15.0-323.211.3.3.el9uek: kernel-uek-debug 0:5.15.0-323.211.3.3.el9uek for ol 9

kernel-uek-debug 0:5.15.0-323.211.3.3.el9uek, released August 11, 2026, fixes 352 CVEs in kernel-uek-debug. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
352
20 rated Critical
Exploited
1
CVE-2026-53266
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0097
62nd percentile

Priority of the 352 CVEs

Patch now 1 Urgent 20 High 234 Routine 97

Fixed package versions

ProductReleaseFixed in
kernel-uek-debugol 90:5.15.0-323.211.3.3.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable8.8 0.0093 KEVExploited
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()9.8 0.0064 None reported
Urgent CVE-2026-52914 kernel-64kb: Security update for the Linux Kernel9.8 0.0063 None reported
Urgent CVE-2026-64089 kernel-64kb: Security update for the Linux Kernel9.8 0.0055 None reported
Urgent CVE-2026-64125 kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).9.8 0.0055 None reported
Urgent CVE-2026-52982 kernel-64kb: Security update for the Linux Kernel9.8 0.0054 None reported
Urgent CVE-2026-53043 ocfs2/dlm: validate qr_numregions in dlm_match_regions()9.8 0.0051 None reported
Urgent CVE-2026-64046 kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).9.8 0.0051 None reported
Urgent CVE-2026-64047 kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).9.8 0.0051 None reported
Urgent CVE-2026-52931 batman-adv: tp_meter: avoid use of uninit sender vars9.8 0.0050 None reported
Urgent CVE-2026-52993 tipc: fix double-free in tipc_buf_append()9.8 0.0040 None reported
Urgent CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison9.8 0.0040 None reported
Urgent CVE-2026-52955 kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).9.8 0.0038 None reported
Urgent CVE-2026-53002 netfilter: conntrack: remove sprintf usage9.8 0.0037 None reported
Urgent CVE-2026-53075 ppp: require CAP_NET_ADMIN in target netns for unattached ioctls9.8 0.0027 None reported
Urgent CVE-2026-52934 batman-adv: tvlv: reject oversized TVLV packets9.8 0.0024 None reported
Urgent CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2()9.8 0.0017 None reported
Urgent CVE-2026-53403 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var9.8 0.0013 None reported
Urgent CVE-2026-52919 batman-adv: fix tp_meter counter underflow during shutdown9.8 0.0012 None reported
Urgent CVE-2026-52947 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove9.8 0.0011 None reported
Urgent CVE-2026-53062 dm cache policy smq: fix missing locks in invalidating cache blocks9.8 0.0010 None reported
High CVE-2026-63913 kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.8 0.0097 None reported
High CVE-2026-52929 sctp: stream: fully roll back denied add-stream state9.8 0.0087 None reported
High CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 0.0076 None reported
High CVE-2026-52958 libceph: Fix potential out-of-bounds access in osdmap_decode()9.1 0.0074 None reported
Showing 1 to 25 of 352 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.