Linux · Security advisory · October 5, 2026

RHSA-2026:75747: Security update for 23 packages

RHSA-2026:75747, released October 5, 2026, fixes 29 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

3 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0071

53rd percentile

Priority of the 29 CVEs

Patch now 0
                                Urgent 3
                                High 26
                                Routine 0

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-abi-stablelists	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-core	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-debug	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-debug-core	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-debug-devel	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-debug-modules	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-debug-modules-extra	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-devel	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-doc	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-modules	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-modules-extra	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-tools	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-tools-libs	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-tools-libs-devel	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-zfcpdump	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-zfcpdump-core	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-zfcpdump-devel	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-zfcpdump-modules	RHEL 8	0:4.18.0-553.171.1.el8_10
kernel-zfcpdump-modules-extra	RHEL 8	0:4.18.0-553.171.1.el8_10
perf	RHEL 8	0:4.18.0-553.171.1.el8_10
python3-perf	RHEL 8	0:4.18.0-553.171.1.el8_10

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-89972	nvme: add missing SRCU grace period in error path	9.8	0.0071	None reported
Urgent	CVE-2025-39994	media: tuner: xc5000: Fix use-after-free in xc5000_release	9.8	0.0016	None reported
Urgent	CVE-2025-40242	gfs2: Fix unlikely race in gdlm_put_lock	9.8	0.0016	None reported
High	CVE-2026-74746	netfilter: flowtable: publish GC-visible tuple last	9.8	0.0054	None reported
High	CVE-2026-63994	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0051	None reported
High	CVE-2026-74669	ipvs: clear IPv4 options after rebasing tunnel ICMP errors	9.8	0.0051	None reported
High	CVE-2026-63992	kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.1	0.0051	None reported
High	CVE-2026-74744	ipvlan: inherit needed_headroom and needed_tailroom from phy_dev	9.8	0.0051	None reported
High	CVE-2026-97417	netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()	8.8	0.0049	None reported
High	CVE-2026-89481	nvme-tcp: fix host memory disclosure on R2T for a read command	8.8	0.0043	None reported
High	CVE-2026-53049	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	9.8	0.0039	None reported
High	CVE-2026-74569	netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()	9.8	0.0039	None reported
High	CVE-2022-50756	linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the ma...	8.8	0.0020	None reported
High	CVE-2023-54048	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	8.8	0.0020	None reported
High	CVE-2026-45856	linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i...	8.8	0.0019	None reported
High	CVE-2026-45861	gfs2: Fix slab-use-after-free in qd_put	8.8	0.0019	None reported
High	CVE-2026-72255	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	8.8	0.0018	None reported
High	CVE-2026-90227	nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()	8.8	0.0017	None reported
High	CVE-2026-53270	ipvs: clear the svc scheduler ptr early on edit	9.8	0.0016	None reported
High	CVE-2026-72052	linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...	8.8	0.0015	None reported
High	CVE-2026-63829	net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink	8.8	0.0015	None reported
High	CVE-2026-68432	vxlan: require CAP_NET_ADMIN in the device netns for changelink	8.8	0.0015	None reported
High	CVE-2026-23105	linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine wh...	8.8	0.0015	None reported
High	CVE-2026-52972	crypto: af_alg - Cap AEAD AD length to 0x80000000	8.8	0.0014	None reported
High	CVE-2026-63794	KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path	8.8	0.0014	None reported

Also fixes CVE-2026-89972

ELSA-2026-76738
kernel, kernel-abi-stablelists, kernel-core and 27 more on ol 10
ALSA-2026:76738
kernel, kernel-64k, kernel-64k-core and 72 more on almalinux 10
RHSA-2026:76738
kernel on RHEL 10
ELSA-2026-500572
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
ELSA-2026-76739
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
RHSA-2026:76739
kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9
RLSA-2026:75746
kernel-rt on rocky 8
RLSA-2026:75747
kernel on rocky 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:75747

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo