ELSA-2026-27288: Security update for 30 packages

ELSA-2026-27288, released August 5, 2026, fixes 15 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0064

50th percentile

Priority of the 15 CVEs

Patch now 0
                                Urgent 0
                                High 15
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	ol 10	0:6.12.0-211.34.1.el10_2
kernel-abi-stablelists	ol 10	0:6.12.0-211.34.1.el10_2
kernel-core	ol 10	0:6.12.0-211.34.1.el10_2
kernel-cross-headers	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-core	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-devel	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-devel-matched	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-modules	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-modules-core	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-modules-extra	ol 10	0:6.12.0-211.34.1.el10_2
kernel-debug-uki-virt	ol 10	0:6.12.0-211.34.1.el10_2
kernel-devel	ol 10	0:6.12.0-211.34.1.el10_2
kernel-devel-matched	ol 10	0:6.12.0-211.34.1.el10_2
kernel-doc	ol 10	0:6.12.0-211.34.1.el10_2
kernel-headers	ol 10	0:6.12.0-211.34.1.el10_2
kernel-modules	ol 10	0:6.12.0-211.34.1.el10_2
kernel-modules-core	ol 10	0:6.12.0-211.34.1.el10_2
kernel-modules-extra	ol 10	0:6.12.0-211.34.1.el10_2
kernel-modules-extra-matched	ol 10	0:6.12.0-211.34.1.el10_2
kernel-tools	ol 10	0:6.12.0-211.34.1.el10_2
kernel-tools-libs	ol 10	0:6.12.0-211.34.1.el10_2
kernel-tools-libs-devel	ol 10	0:6.12.0-211.34.1.el10_2
kernel-uki-virt	ol 10	0:6.12.0-211.34.1.el10_2
kernel-uki-virt-addons	ol 10	0:6.12.0-211.34.1.el10_2
libperf	ol 10	0:6.12.0-211.34.1.el10_2
perf	ol 10	0:6.12.0-211.34.1.el10_2
python3-perf	ol 10	0:6.12.0-211.34.1.el10_2
rtla	ol 10	0:6.12.0-211.34.1.el10_2
rv	ol 10	0:6.12.0-211.34.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-46331	net/sched: fix pedit partial COW leading to page cache corruption	8.1	0.0064	None reported
High	CVE-2026-31669	mptcp: fix slab-use-after-free in __inet_lookup_established	9.8	0.0047	None reported
High	CVE-2026-46125	wifi: mac80211: remove station if connection prep fails	8.8	0.0030	None reported
High	CVE-2026-46056	Bluetooth: hci_event: fix potential UAF in SSP passkey handlers	8.8	0.0028	None reported
High	CVE-2026-46166	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar...	8.8	0.0020	None reported
High	CVE-2026-31786	kernel: In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c T...	7.8	0.0020	None reported
High	CVE-2026-31787	kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr...	7.8	0.0018	None reported
High	CVE-2026-46152	wifi: mac80211: drop stray 'static' from fast-RX rx_result	8.8	0.0017	None reported
High	CVE-2026-31641	linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds r...	7.8	0.0014	None reported
High	CVE-2026-31772	linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow i...	7.8	0.0014	None reported
High	CVE-2026-43260	linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need t...	7.8	0.0014	None reported
High	CVE-2026-46173	exit: prevent preemption of oopsing TASK_DEAD task	7.8	0.0013	None reported
High	CVE-2026-43330	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	7.8	0.0013	None reported
High	CVE-2026-43056	kernel-default-base: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we...	8.8	0.0012	None reported
High	CVE-2026-31474	can: isotp: fix tx.buf use-after-free in isotp_sendmsg()	7.8	0.0010	None reported

Also fixes CVE-2026-46331

SUSE-SU-2026:22835-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
OPENSUSE-SU-2026:21388-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:2799-1
kernel-livepatch-SLE15-SP7-RT_Update_17 on sles 15.7
SUSE-SU-2026:2800-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
SUSE-SU-2026:2238-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
ALAS2023-2026-1968
bpftool6.12, bpftool6.12-debuginfo, kernel-livepatch-6.12.94-123.174 and 15 more on amzn 2023
SUSE-SU-2026:3156-1
kernel-default, kernel-default-base, kernel-docs and 4 more on sles 15.6
ALAS2023-2026-1925
bpftool6.18, bpftool6.18-debuginfo, kernel-livepatch-6.18.36-69.134 and 16 more on amzn 2023

Vendor advisory

https://linux.oracle.com/errata/ELSA-2026-27288.html

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/elsa-2026-27288">ELSA-2026-27288 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.