Linux · Security advisory · March 12, 2026

RHSA-2026:63129: Security update for 72 packages

RHSA-2026:63129, released March 12, 2026, fixes 27 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
27
5 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0080
56th percentile

Priority of the 27 CVEs

Patch now 0 Urgent 5 High 22 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 90:5.14.0-687.44.1.el9_8
kernel-64kRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debugRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debug-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debug-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debug-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debug-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-debug-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-devel-matchedRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-64k-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-abi-stablelistsRHEL 90:5.14.0-687.44.1.el9_8
kernel-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-debugRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-devel-matchedRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-debug-uki-virtRHEL 90:5.14.0-687.44.1.el9_8
kernel-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-devel-matchedRHEL 90:5.14.0-687.44.1.el9_8
kernel-docRHEL 90:5.14.0-687.44.1.el9_8
kernel-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-rtRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64kRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-debugRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-debug-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-debug-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-debug-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-debug-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-debug-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-64k-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-debugRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-debug-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-debug-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-debug-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-debug-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-debug-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-rt-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
kernel-toolsRHEL 90:5.14.0-687.44.1.el9_8
kernel-tools-libsRHEL 90:5.14.0-687.44.1.el9_8
kernel-tools-libs-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-uki-virtRHEL 90:5.14.0-687.44.1.el9_8
kernel-uki-virt-addonsRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdumpRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdump-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdump-develRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdump-modulesRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-687.44.1.el9_8
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-687.44.1.el9_8
libperfRHEL 90:5.14.0-687.44.1.el9_8
perfRHEL 90:5.14.0-687.44.1.el9_8
python3-perfRHEL 90:5.14.0-687.44.1.el9_8
rtlaRHEL 90:5.14.0-687.44.1.el9_8
rvRHEL 90:5.14.0-687.44.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-72130 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n... 9.8 0.0080 None reported
Urgent CVE-2026-72069 linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in... 9.8 0.0073 None reported
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout() 9.8 0.0064 None reported
Urgent CVE-2026-68166 userfaultfd: prevent registration of special VMAs 9.8 0.0021 None reported
Urgent CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2() 9.8 0.0017 None reported
High CVE-2026-63887 kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... 9.8 0.0078 None reported
High CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length 9.8 0.0071 None reported
High CVE-2026-63886 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 9.8 0.0071 None reported
High CVE-2026-53399 nfsd: release layout stid on setlease failure 9.8 0.0066 None reported
High CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count 8.8 0.0053 None reported
High CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure 8.8 0.0053 None reported
High CVE-2026-63808 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0053 None reported
High CVE-2026-46185 smb/client: fix out-of-bounds read in symlink_data() 9.1 0.0053 None reported
High CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr 8.8 0.0052 None reported
High CVE-2026-64387 smb: client: fix query directory replay double-free 9.8 0.0046 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection 8.8 0.0023 None reported
High CVE-2026-64490 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the... 8.8 0.0019 None reported
High CVE-2026-64304 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... 8.8 0.0017 None reported
High CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev(). 8.8 0.0015 None reported
High CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC 8.8 0.0015 None reported
High CVE-2026-64018 kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-... 9.3 0.0014 None reported
High CVE-2025-71147 kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd... 8.8 0.0014 None reported
High CVE-2026-68145 iomap: fix out-of-bounds bitmap_set() with zero-length range 8.8 0.0014 None reported
High CVE-2026-64438 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in ad... 8.8 0.0014 None reported
High CVE-2026-64002 kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... 8.8 0.0013 None reported
Showing 1 to 25 of 27 1Next