Linux · Security advisory · September 24, 2026

RHSA-2026:70459: Security update for 72 packages

RHSA-2026:70459, released September 24, 2026, fixes 13 CVEs across 72 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
13
2 rated Critical
Exploited
1
CVE-2025-39964
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0161
76th percentile

Priority of the 13 CVEs

Patch now 1 Urgent 2 High 10 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 90:5.14.0-687.50.1.el9_8
kernel-64kRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debugRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debug-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debug-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debug-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debug-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-debug-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-devel-matchedRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-64k-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-abi-stablelistsRHEL 90:5.14.0-687.50.1.el9_8
kernel-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-debugRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-devel-matchedRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-debug-uki-virtRHEL 90:5.14.0-687.50.1.el9_8
kernel-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-devel-matchedRHEL 90:5.14.0-687.50.1.el9_8
kernel-docRHEL 90:5.14.0-687.50.1.el9_8
kernel-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-rtRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64kRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-debugRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-debug-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-debug-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-debug-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-debug-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-debug-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-64k-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-debugRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-debug-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-debug-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-debug-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-debug-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-debug-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-rt-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
kernel-toolsRHEL 90:5.14.0-687.50.1.el9_8
kernel-tools-libsRHEL 90:5.14.0-687.50.1.el9_8
kernel-tools-libs-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-uki-virtRHEL 90:5.14.0-687.50.1.el9_8
kernel-uki-virt-addonsRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdumpRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdump-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdump-develRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdump-modulesRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-687.50.1.el9_8
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-687.50.1.el9_8
libperfRHEL 90:5.14.0-687.50.1.el9_8
perfRHEL 90:5.14.0-687.50.1.el9_8
python3-perfRHEL 90:5.14.0-687.50.1.el9_8
rtlaRHEL 90:5.14.0-687.50.1.el9_8
rvRHEL 90:5.14.0-687.50.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 8.8 0.0161 KEVExploited
Urgent CVE-2026-68391 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds 9.8 0.0013 None reported
Urgent CVE-2026-53062 dm cache policy smq: fix missing locks in invalidating cache blocks 9.8 0.0010 None reported
High CVE-2026-68155 libceph: Reject monmaps advertising zero monitors 8.8 0.0070 None reported
High CVE-2026-68157 libceph: guard missing CRUSH type name lookup 7.8 0.0070 None reported
High CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update 9.8 0.0069 None reported
High CVE-2026-68188 Bluetooth: RFCOMM: Fix session UAF in set_termios 8.8 0.0022 None reported
High CVE-2026-72072 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat... 7.8 0.0017 None reported
High CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths 8.8 0.0016 None reported
High CVE-2026-68293 net/mlx5: Fix MCIA register buffer overflow on 32 dword reads 8.8 0.0014 None reported
High CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry 8.8 0.0013 None reported
High CVE-2026-45959 kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanu... 8.8 0.0013 None reported
High CVE-2026-74518 mm/hugetlb: fix list corruption in allocate_file_region_entries() 8.8 0.0013 None reported
Showing 1 to 13 of 13 1