Linux · Security advisory · September 10, 2026

RHSA-2026:65334: kernel security update

RHSA-2026:65334, released September 10, 2026, fixes 27 CVEs in kernel (version 6.12.0-211.53.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

2 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0071

53rd percentile

Priority of the 27 CVEs

Patch now 0
                                Urgent 2
                                High 25
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 10	6.12.0-211.53.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-72129	linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of...	9.8	0.0071	None reported
Urgent	CVE-2026-52947	net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove	9.8	0.0011	None reported
High	CVE-2026-64037	kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0043	None reported
High	CVE-2026-63947	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0035	None reported
High	CVE-2026-63944	kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis...	8.8	0.0033	None reported
High	CVE-2026-68409	wifi: mac80211: defer link RX stats percpu free to RCU	8.8	0.0031	None reported
High	CVE-2026-43334	kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements...	8.8	0.0028	None reported
High	CVE-2026-53254	Bluetooth: RFCOMM: validate skb length in MCC handlers	8.1	0.0028	None reported
High	CVE-2026-63975	kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0027	None reported
High	CVE-2026-64255	wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers	8.8	0.0027	None reported
High	CVE-2026-64117	wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb	8.8	0.0027	None reported
High	CVE-2026-53256	kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.1	0.0026	None reported
High	CVE-2026-63946	kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0026	None reported
High	CVE-2026-64515	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith...	8.3	0.0024	None reported
High	CVE-2026-52918	Bluetooth: serialize accept_q access	8.8	0.0022	None reported
High	CVE-2026-68193	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio...	8.1	0.0021	None reported
High	CVE-2026-53072	Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER	8.8	0.0020	None reported
High	CVE-2026-68307	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link repl...	8.1	0.0017	None reported
High	CVE-2026-64015	kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.1	0.0016	None reported
High	CVE-2026-46123	linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: clamp rx length before skb...	8.1	0.0014	None reported
High	CVE-2026-64042	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0014	None reported
High	CVE-2026-53091	net: pull headers in qdisc_pkt_len_segs_init()	8.4	0.0014	None reported
High	CVE-2026-43133	kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu...	8.1	0.0013	None reported
High	CVE-2026-53322	kernel: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling funct...	8.8	0.0013	None reported
High	CVE-2026-53182	wifi: nl80211: reject oversized EMA RNR lists	8.1	0.0013	None reported

Also fixes CVE-2026-72129

ELSA-2026-500248
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
SUSE-SU-2026:4660-1
kernel-default, kernel-default-base, kernel-docs and 4 more on sles 15.6
ELSA-2026-500249
bpftool, kernel-uek, kernel-uek-container and 16 more on ol 8, ol 9
SUSE-SU-2026:4640-1
kernel-livepatch-SLE15-SP7-RT_Update_21 on sles 15.7
SUSE-SU-2026:4706-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
OPENSUSE-SU-2026:22091-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:24197-1
kernel-default on sles 16.0
SUSE-SU-2026:24235-1
kernel-64kb, kernel-azure, kernel-default-base and 6 more on sles 16.0

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:65334

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo