Linux · Oracle Linux · Security advisory · September 4, 2026

ELSA-2026-500249: Security update for 19 packages

ELSA-2026-500249, released September 4, 2026, fixes 588 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
588
57 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0147
73rd percentile

Priority of the 588 CVEs

Patch now 0 Urgent 57 High 364 Routine 167

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-324.217.5.2.el9uek
bpftoolol 90:5.15.0-324.217.5.2.el9uek
kernel-uekol 80:5.15.0-324.217.5.2.el9uek
kernel-uekol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-containerol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-containerol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-coreol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-coreol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debugol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debugol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-develol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-develol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-docol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-docol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-324.217.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-324.217.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64kol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64kol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-coreol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-coreol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-develol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-develol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-324.217.5.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-324.217.5.2.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 0.0077 None reported
Urgent CVE-2026-74279 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong...10.0 0.0076 None reported
Urgent CVE-2026-72226 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow...9.8 0.0076 None reported
Urgent CVE-2026-80630 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_...9.8 0.0076 None reported
Urgent CVE-2026-72084 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...9.8 0.0075 None reported
Urgent CVE-2026-72299 linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...9.8 0.0075 None reported
Urgent CVE-2026-72319 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...9.8 0.0075 None reported
Urgent CVE-2026-72339 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b...9.8 0.0075 None reported
Urgent CVE-2026-72351 linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...9.8 0.0075 None reported
Urgent CVE-2026-72466 linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...9.8 0.0074 None reported
Urgent CVE-2026-80609 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[...9.8 0.0074 None reported
Urgent CVE-2026-72234 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a...9.8 0.0073 None reported
Urgent CVE-2026-72065 linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b...9.8 0.0073 None reported
Urgent CVE-2026-72322 linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...9.8 0.0072 None reported
Urgent CVE-2026-72491 linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in tra...9.8 0.0072 None reported
Urgent CVE-2026-72014 linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...9.8 0.0072 None reported
Urgent CVE-2026-68477 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...9.8 0.0071 None reported
Urgent CVE-2026-72020 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...9.8 0.0071 None reported
Urgent CVE-2026-72129 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of...9.8 0.0071 None reported
Urgent CVE-2026-72251 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...9.8 0.0071 None reported
Urgent CVE-2026-74267 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...9.8 0.0071 None reported
Urgent CVE-2026-72348 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...9.1 0.0063 None reported
Urgent CVE-2026-80603 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...9.1 0.0060 None reported
Urgent CVE-2026-72421 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/mai...10.0 0.0057 None reported
Urgent CVE-2026-64535 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch...9.8 0.0055 None reported
Showing 1 to 25 of 588 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.