RHSA-2026:97435: Security update for 72 packages

RHSA-2026:97435, released November 11, 2026, fixes 18 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0056

47th percentile

Priority of the 18 CVEs

Patch now 0
                                Urgent 1
                                High 17
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-devel-matched	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-64k-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-abi-stablelists	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-devel-matched	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-debug-uki-virt	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-devel-matched	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-doc	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-debug	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-debug-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-debug-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-debug-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-debug-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-debug-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-64k-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-debug	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-debug-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-debug-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-debug-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-rt-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-tools	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-tools-libs	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-tools-libs-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-uki-virt	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-uki-virt-addons	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-741.14.1.el9_9
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-741.14.1.el9_9
libperf	RHEL 9	0:5.14.0-741.14.1.el9_9
perf	RHEL 9	0:5.14.0-741.14.1.el9_9
python3-perf	RHEL 9	0:5.14.0-741.14.1.el9_9
rtla	RHEL 9	0:5.14.0-741.14.1.el9_9
rv	RHEL 9	0:5.14.0-741.14.1.el9_9

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-53075	ppp: require CAP_NET_ADMIN in target netns for unattached ioctls	9.8	0.0027	None reported
High	CVE-2026-23240	tls: Fix race condition in tls_sw_cancel_work_tx()	9.8	0.0056	None reported
High	CVE-2026-64355	bpf: Reject fragmented frames in devmap	9.8	0.0051	None reported
High	CVE-2026-64000	kernel-default: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).	9.8	0.0049	None reported
High	CVE-2026-52945	linux: In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI"...	7.5	0.0032	None reported
High	CVE-2026-46099	net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels	8.1	0.0029	None reported
High	CVE-2026-68398	ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF	9.8	0.0023	None reported
High	CVE-2026-68181	mei: bus: access mei_device under device_lock on cleanup	7.8	0.0021	None reported
High	CVE-2026-80864	RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp	9.8	0.0020	None reported
High	CVE-2026-80863	RDMA/rxe: Fix OOB in free_rd_atomic_resources()	7.8	0.0018	None reported
High	CVE-2026-68103	drm/amdgpu: reject mapping a reserved doorbell to a new queue	7.1	0.0015	None reported
High	CVE-2026-63914	bpftool: xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286]	7.3	0.0015	None reported
High	CVE-2026-23239	espintcp: Fix race condition in espintcp_close()	7.8	0.0013	None reported
High	CVE-2026-64279	i2c: core: fix adapter deregistration race	7.8	0.0013	None reported
High	CVE-2026-64109	kernel-default: af_unix: Peek the queue synchronized (bsc#1273748).	8.8	0.0013	None reported
High	CVE-2026-23066	kernel-64kb: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).	7.4	0.0012	None reported
High	CVE-2026-64375	proc: protect ptrace_may_access() with exec_update_lock (FD links)	7.8	0.0011	None reported
High	CVE-2026-64027	kernel: net: shaper: rework the VALID marking (again) (Jamie Bainbridge) [RHEL-231705]	8.8	0.0010	None reported

Also fixes CVE-2026-53075

SUSE-SU-2026:22835-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
OPENSUSE-SU-2026:21388-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:3166-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
SUSE-SU-2026:3130-1
kernel-livepatch-SLE15-SP7-RT_Update_18 on sles 15.7
kernel-uek-container 0:5.15.0-323.211.3.3.el9uek
kernel-uek-container on ol 9
kernel-uek-container-debug 0:5.15.0-323.211.3.3.el9uek
kernel-uek-container-debug on ol 9
kernel-uek-core 0:5.15.0-323.211.3.3.el9uek
kernel-uek-core on ol 8
kernel-uek-debug-core 0:5.15.0-323.211.3.3.el9uek
kernel-uek-debug-core on ol 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:97435

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rhsa-2026-97435">RHSA-2026:97435 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.