Linux · 
Red Hat · Security advisory · September 19, 2026
Red Hat · Security advisory · September 19, 2026RHSA-2026:68531: Security update for 23 packages
RHSA-2026:68531, released September 19, 2026, fixes 22 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
22
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0076
55th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 3
High 19
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-abi-stablelists | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-core | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-debug | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-debug-core | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-debug-devel | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-debug-modules | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-debug-modules-extra | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-devel | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-doc | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-modules | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-modules-extra | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-tools | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-tools-libs | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-tools-libs-devel | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-zfcpdump | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-zfcpdump-core | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-zfcpdump-devel | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-zfcpdump-modules | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| kernel-zfcpdump-modules-extra | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| perf | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
| python3-perf | RHEL 8 | 0:4.18.0-553.164.1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-46266 | linux: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop in... | 9.1 | 0.0047 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| Urgent | CVE-2026-68143 | net: slip: serialize receive against buffer reallocation | 9.8 | 0.0011 | None reported |
| High | CVE-2026-53176 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 | None reported |
| High | CVE-2026-63919 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 | None reported |
| High | CVE-2026-53228 | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | None reported |
| High | CVE-2026-53268 | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 | None reported |
| High | CVE-2026-68426 | xfrm: fix stale skb->prev after async crypto steals a GSO segment | 9.8 | 0.0050 | None reported |
| High | CVE-2026-43233 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.2 | 0.0046 | None reported |
| High | CVE-2026-46306 | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 | None reported |
| High | CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | None reported |
| High | CVE-2026-52920 | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | None reported |
| High | CVE-2026-53275 | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | None reported |
| High | CVE-2026-31663 | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | None reported |
| High | CVE-2026-63917 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0017 | None reported |
| High | CVE-2026-63921 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0016 | None reported |
| High | CVE-2026-43339 | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | None reported |
| High | CVE-2026-53223 | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 | None reported |
| High | CVE-2026-64002 | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... | 8.8 | 0.0013 | None reported |
| High | CVE-2026-23103 | kernel: In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the... | 8.8 | 0.0013 | None reported |
| High | CVE-2026-53239 | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 | None reported |
| High | CVE-2026-53192 | ALSA: timer: Fix UAF at snd_timer_user_params() | 8.8 | 0.0010 | None reported |
Showing 1 to 22 of 22
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.