Linux · Security advisory · September 19, 2026

RHSA-2026:67150: Security update for 72 packages

RHSA-2026:67150, released September 19, 2026, fixes 42 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

5 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0079

56th percentile

Priority of the 42 CVEs

Patch now 0
                                Urgent 5
                                High 37
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-devel-matched	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-64k-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-abi-stablelists	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-devel-matched	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-debug-uki-virt	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-devel-matched	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-doc	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-debug	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-debug-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-debug-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-debug-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-debug-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-debug-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-64k-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-debug	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-debug-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-debug-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-debug-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-rt-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-tools	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-tools-libs	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-tools-libs-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-uki-virt	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-uki-virt-addons	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-687.47.1.el9_8
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-687.47.1.el9_8
libperf	RHEL 9	0:5.14.0-687.47.1.el9_8
perf	RHEL 9	0:5.14.0-687.47.1.el9_8
python3-perf	RHEL 9	0:5.14.0-687.47.1.el9_8
rtla	RHEL 9	0:5.14.0-687.47.1.el9_8
rv	RHEL 9	0:5.14.0-687.47.1.el9_8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2025-68745	linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm...	9.8	0.0050	None reported
Urgent	CVE-2026-68402	wifi: cfg80211: bound element ID read when checking non-inheritance	9.8	0.0027	None reported
Urgent	CVE-2026-68406	wifi: cfg80211: validate PMSR FTM preamble range	9.8	0.0018	None reported
Urgent	CVE-2026-53053	iommu/amd: Fix clone_alias() to use the original device's devid	9.8	0.0013	None reported
Urgent	CVE-2026-52947	net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove	9.8	0.0011	None reported
High	CVE-2026-72098	dm-verity: fix buffer overflow in FEC calculation	9.8	0.0079	None reported
High	CVE-2026-68376	sctp: fix auth_hmacs array size in struct sctp_cookie	8.1	0.0061	None reported
High	CVE-2026-68300	sctp: auth: verify auth requirement when auth_chunk is NULL	9.8	0.0058	None reported
High	CVE-2026-64113	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0053	None reported
High	CVE-2026-68117	tipc: clear sock->sk on the failed-insert path in tipc_sk_create()	9.8	0.0053	None reported
High	CVE-2026-63801	tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done	8.8	0.0051	None reported
High	CVE-2026-68315	sctp: validate stream count in sctp_process_strreset_inreq()	8.8	0.0051	None reported
High	CVE-2026-53246	sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing	9.8	0.0044	None reported
High	CVE-2026-64037	kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0043	None reported
High	CVE-2026-63889	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0036	None reported
High	CVE-2026-63947	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0035	None reported
High	CVE-2026-63944	kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis...	8.8	0.0033	None reported
High	CVE-2026-43334	kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements...	8.8	0.0028	None reported
High	CVE-2026-53254	Bluetooth: RFCOMM: validate skb length in MCC handlers	8.1	0.0028	None reported
High	CVE-2026-63975	kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0027	None reported
High	CVE-2026-64255	wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers	8.8	0.0027	None reported
High	CVE-2026-64117	wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb	8.8	0.0027	None reported
High	CVE-2026-53256	kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.1	0.0026	None reported
High	CVE-2026-63946	kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0026	None reported
High	CVE-2026-64515	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith...	8.3	0.0024	None reported

Also fixes CVE-2025-68745

RLSA-2026:67150
kernel on rocky 9
ALSA-2026:67150
kernel, kernel-64k, kernel-64k-core and 71 more on almalinux 9
ELSA-2026-67150-0
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
OPENSUSE-SU-2026:20416-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:20931-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
RHSA-2026:88687
kernel on RHEL 10
RLSA-2026:67471
kernel on rocky 10
ALSA-2026:67471
kernel, kernel-64k, kernel-64k-core and 72 more on almalinux 10

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:67150

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo