Linux · Oracle Linux · Security advisory · September 4, 2026

ELSA-2026-500248: Security update for 35 packages

ELSA-2026-500248, released September 4, 2026, fixes 1,162 CVEs across 35 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1,162
96 rated Critical
Exploited
1
CVE-2026-53266
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0147
73rd percentile

Priority of the 1,162 CVEs

Patch now 1 Urgent 96 High 715 Routine 350

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-206.104.3.3.el9uek
kernel-uekol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-coreol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-coreol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debugol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debugol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-coreol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-coreol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-develol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-develol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modulesol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modulesol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-develol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-develol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-docol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-docol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modulesol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modulesol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-coreol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-coreol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-desktopol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-desktopol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-extraol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-extraol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-usbol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-usbol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-206.104.3.3.el9uek
kernel-uek-toolsol 100:6.12.0-206.104.3.3.el9uek
kernel-uek-toolsol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64kol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64kol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-coreol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-coreol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-develol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-develol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modulesol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modulesol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-206.104.3.3.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-206.104.3.3.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable8.8 0.0093 KEVExploited
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing9.8 0.0143 None reported
Urgent CVE-2026-72130 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n...9.8 0.0080 None reported
Urgent CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 0.0077 None reported
Urgent CVE-2026-74279 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong...10.0 0.0076 None reported
Urgent CVE-2026-72226 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow...9.8 0.0076 None reported
Urgent CVE-2026-74427 linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocat...9.8 0.0076 None reported
Urgent CVE-2026-72084 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...9.8 0.0075 None reported
Urgent CVE-2026-72299 linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...9.8 0.0075 None reported
Urgent CVE-2026-72319 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...9.8 0.0075 None reported
Urgent CVE-2026-72339 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b...9.8 0.0075 None reported
Urgent CVE-2026-72351 linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...9.8 0.0075 None reported
Urgent CVE-2026-72466 linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...9.8 0.0074 None reported
Urgent CVE-2026-72234 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a...9.8 0.0073 None reported
Urgent CVE-2026-72065 linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b...9.8 0.0073 None reported
Urgent CVE-2026-72322 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...9.8 0.0072 None reported
Urgent CVE-2026-72323 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...9.8 0.0072 None reported
Urgent CVE-2026-72491 linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in tra...9.8 0.0072 None reported
Urgent CVE-2026-72014 linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...9.8 0.0072 None reported
Urgent CVE-2026-72473 linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple...9.8 0.0072 None reported
Urgent CVE-2026-68476 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation...9.8 0.0071 None reported
Urgent CVE-2026-68477 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...9.8 0.0071 None reported
Urgent CVE-2026-72020 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...9.8 0.0071 None reported
Urgent CVE-2026-72129 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of...9.8 0.0071 None reported
Urgent CVE-2026-72251 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...9.8 0.0071 None reported
Showing 1 to 25 of 1,162 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.