Linux · Oracle Linux · Security advisory · October 7, 2026

ELSA-2026-500377: Security update for 19 packages

ELSA-2026-500377, released October 7, 2026, fixes 79 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
79
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0143
73rd percentile

Priority of the 79 CVEs

Patch now 0 Urgent 5 High 44 Routine 30

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-325.220.5.el9uek
bpftoolol 90:5.15.0-325.220.5.el9uek
kernel-uekol 80:5.15.0-325.220.5.el9uek
kernel-uekol 90:5.15.0-325.220.5.el9uek
kernel-uek-containerol 80:5.15.0-325.220.5.el9uek
kernel-uek-containerol 90:5.15.0-325.220.5.el9uek
kernel-uek-container-debugol 80:5.15.0-325.220.5.el9uek
kernel-uek-container-debugol 90:5.15.0-325.220.5.el9uek
kernel-uek-coreol 80:5.15.0-325.220.5.el9uek
kernel-uek-coreol 90:5.15.0-325.220.5.el9uek
kernel-uek-debugol 80:5.15.0-325.220.5.el9uek
kernel-uek-debugol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-coreol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-coreol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-develol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-develol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-modulesol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-modulesol 90:5.15.0-325.220.5.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-325.220.5.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-325.220.5.el9uek
kernel-uek-develol 80:5.15.0-325.220.5.el9uek
kernel-uek-develol 90:5.15.0-325.220.5.el9uek
kernel-uek-docol 80:5.15.0-325.220.5.el9uek
kernel-uek-docol 90:5.15.0-325.220.5.el9uek
kernel-uek-modulesol 80:5.15.0-325.220.5.el9uek
kernel-uek-modulesol 90:5.15.0-325.220.5.el9uek
kernel-uek-modules-extraol 80:5.15.0-325.220.5.el9uek
kernel-uek-modules-extraol 90:5.15.0-325.220.5.el9uek
kernel-uek64kol 80:5.15.0-325.220.5.el9uek
kernel-uek64kol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-coreol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-coreol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-develol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-develol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-modulesol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-modulesol 90:5.15.0-325.220.5.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-325.220.5.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-325.220.5.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing9.8 0.0143 None reported
Urgent CVE-2026-72323 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...9.8 0.0072 None reported
Urgent CVE-2026-68476 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation...9.8 0.0071 None reported
Urgent CVE-2026-80557 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m...9.8 0.0053 None reported
Urgent CVE-2025-39925 can: j1939: implement NETDEV_UNREGISTER notification handler9.8 0.0015 None reported
High CVE-2025-68794 iomap: adjust read range correctly for non-block-aligned positions9.8 0.0069 None reported
High CVE-2026-80587 mptcp: avoid combining some incoming suboptions9.8 0.0052 None reported
High CVE-2026-68388 smb/client: handle overlapping allocated ranges in fallocate9.8 0.0051 None reported
High CVE-2026-74662 inet: frags: publish queues before arming timer9.8 0.0051 None reported
High CVE-2026-74626 NTB: ntb_netdev: Preserve RX queue depth on allocation failure7.5 0.0050 None reported
High CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers9.8 0.0050 None reported
High CVE-2026-97509 thunderbolt: Keep XDomain reference during the lifetime of a service8.8 0.0024 None reported
High CVE-2026-68278 drm/dp/mst: fix buffer overflows in sideband chunk accumulation8.1 0.0024 None reported
High CVE-2026-80789 nvmet-tcp: bound SGL data length before allocating command buffers7.5 0.0023 None reported
High CVE-2025-40102 KVM: arm64: Prevent access to vCPU events before init7.1 0.0022 None reported
High CVE-2026-80840 ipv6: seg6: clear IPv4 control block on IPIP decapsulation7.8 0.0021 None reported
High CVE-2026-80824 usb: usbfs: fix use-after-free of usb_device in usbdev_release()8.8 0.0020 None reported
High CVE-2026-80792 ipv6: fix use-after-free in ip6_finish_output2()8.1 0.0020 None reported
High CVE-2026-80790 nvmet-fc: fix invalid free in LS IOD error path7.8 0.0020 None reported
High CVE-2026-80819 Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept7.8 0.0020 None reported
High CVE-2026-80788 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations7.5 0.0020 None reported
High CVE-2026-80767 HID: sensor: custom: Fix use-after-free in enable_sensor7.0 0.0020 None reported
High CVE-2026-80808 ext4: stop retrying saturated xattr cache entries7.0 0.0020 None reported
High CVE-2026-80863 RDMA/rxe: Fix OOB in free_rd_atomic_resources()7.8 0.0018 None reported
High CVE-2026-80916 linux: In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on...7.8 0.0018 None reported
Showing 1 to 25 of 79 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.