Linux · Oracle Linux · Security advisory · November 7, 2026

ELSA-2026-500574: Security update for 19 packages

ELSA-2026-500574, released November 7, 2026, fixes 277 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
277
31 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0780
94th percentile

Priority of the 277 CVEs

Patch now 0 Urgent 31 High 114 Routine 132

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-326.222.4.el9uek
bpftoolol 90:5.15.0-326.222.4.el9uek
kernel-uekol 80:5.15.0-326.222.4.el9uek
kernel-uekol 90:5.15.0-326.222.4.el9uek
kernel-uek-containerol 80:5.15.0-326.222.4.el9uek
kernel-uek-containerol 90:5.15.0-326.222.4.el9uek
kernel-uek-container-debugol 80:5.15.0-326.222.4.el9uek
kernel-uek-container-debugol 90:5.15.0-326.222.4.el9uek
kernel-uek-coreol 80:5.15.0-326.222.4.el9uek
kernel-uek-coreol 90:5.15.0-326.222.4.el9uek
kernel-uek-debugol 80:5.15.0-326.222.4.el9uek
kernel-uek-debugol 90:5.15.0-326.222.4.el9uek
kernel-uek-debug-coreol 80:5.15.0-326.222.4.el9uek
kernel-uek-debug-coreol 90:5.15.0-326.222.4.el9uek
kernel-uek-debug-develol 80:5.15.0-326.222.4.el9uek
kernel-uek-debug-develol 90:5.15.0-326.222.4.el9uek
kernel-uek-debug-modulesol 80:5.15.0-326.222.4.el9uek
kernel-uek-debug-modulesol 90:5.15.0-326.222.4.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-326.222.4.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-326.222.4.el9uek
kernel-uek-develol 80:5.15.0-326.222.4.el9uek
kernel-uek-develol 90:5.15.0-326.222.4.el9uek
kernel-uek-docol 80:5.15.0-326.222.4.el9uek
kernel-uek-docol 90:5.15.0-326.222.4.el9uek
kernel-uek-modulesol 80:5.15.0-326.222.4.el9uek
kernel-uek-modulesol 90:5.15.0-326.222.4.el9uek
kernel-uek-modules-extraol 80:5.15.0-326.222.4.el9uek
kernel-uek-modules-extraol 90:5.15.0-326.222.4.el9uek
kernel-uek64kol 80:5.15.0-326.222.4.el9uek
kernel-uek64kol 90:5.15.0-326.222.4.el9uek
kernel-uek64k-coreol 80:5.15.0-326.222.4.el9uek
kernel-uek64k-coreol 90:5.15.0-326.222.4.el9uek
kernel-uek64k-develol 80:5.15.0-326.222.4.el9uek
kernel-uek64k-develol 90:5.15.0-326.222.4.el9uek
kernel-uek64k-modulesol 80:5.15.0-326.222.4.el9uek
kernel-uek64k-modulesol 90:5.15.0-326.222.4.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-326.222.4.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-326.222.4.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-98339 wifi: cfg80211: don't filter by BSS type when removing stale entries9.8 0.0028 None reported
Urgent CVE-2026-98348 wifi: libipw: reject too-short association responses9.8 0.0025 None reported
Urgent CVE-2026-98573 net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()9.4 0.0022 None reported
Urgent CVE-2026-98621 net: gue: reject invalid REMCSUM offsets9.1 0.0022 None reported
Urgent CVE-2026-98272 net: mvpp2: prevent buffer overflow in page_pool allocation9.8 0.0020 None reported
Urgent CVE-2026-98319 drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr9.8 0.0018 None reported
Urgent CVE-2026-98322 netfilter: nft_nat: fully initialise new_addr in netmap setup9.8 0.0018 None reported
Urgent CVE-2026-98186 wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length9.8 0.0018 None reported
Urgent CVE-2026-98187 wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST9.8 0.0018 None reported
Urgent CVE-2026-98188 wifi: p54: validate curve data length in the calibration curve converters9.8 0.0018 None reported
Urgent CVE-2026-98191 wifi: wlcore: release runtime PM ref on regdomain config failure9.8 0.0018 None reported
Urgent CVE-2026-98203 Input: soc_button_array - check btns_desc->package.count9.8 0.0018 None reported
Urgent CVE-2026-98207 mmc: spi: reset bytes_xfered before retrying CRC failures9.8 0.0018 None reported
Urgent CVE-2026-98217 IB/mlx4: Fix use-after-free on pkey sysfs registration failure9.8 0.0018 None reported
Urgent CVE-2026-98233 net/packet: clear RX owner on VNET header error9.8 0.0018 None reported
Urgent CVE-2026-98255 tcp: exclude old ACKs from tcp fast path9.8 0.0018 None reported
Urgent CVE-2026-98308 ALSA: hda: trace PCM open only after assigning a stream9.8 0.0018 None reported
Urgent CVE-2026-98340 wifi: cfg80211: only group hidden BSSes with beacon entries9.8 0.0018 None reported
Urgent CVE-2026-98345 wifi: cfg80211: check IP header size in cfg80211_classify8021d()9.8 0.0018 None reported
Urgent CVE-2026-98181 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()9.8 0.0017 None reported
Urgent CVE-2026-98199 hwmon: (pmbus/core) increase number of phases and add new mask9.8 0.0017 None reported
Urgent CVE-2026-98221 KEYS: trusted: Fix tpm2_load_cmd() boundary check9.8 0.0017 None reported
Urgent CVE-2026-98287 pppoatm: ensure a writable skb header and linear data9.8 0.0017 None reported
Urgent CVE-2026-98363 firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS9.8 0.0017 None reported
Urgent CVE-2026-98362 clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate9.8 0.0017 None reported
Showing 1 to 25 of 277 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.