Linux · Oracle Linux · Security advisory · February 15, 2026

ELSA-2026-50113: Security update for 19 packages

ELSA-2026-50113, released February 15, 2026, fixes 66 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
66
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0191
79th percentile

Priority of the 66 CVEs

Patch now 0 Urgent 1 High 33 Routine 32

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-317.197.5.1.el9uek
bpftoolol 90:5.15.0-317.197.5.1.el9uek
kernel-uekol 80:5.15.0-317.197.5.1.el9uek
kernel-uekol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-containerol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-containerol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-container-debugol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-container-debugol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-coreol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-coreol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-debugol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-debugol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-coreol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-coreol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-develol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-develol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-modulesol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-modulesol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-develol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-develol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-docol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-docol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-modulesol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-modulesol 90:5.15.0-317.197.5.1.el9uek
kernel-uek-modules-extraol 80:5.15.0-317.197.5.1.el9uek
kernel-uek-modules-extraol 90:5.15.0-317.197.5.1.el9uek
kernel-uek64kol 80:5.15.0-317.197.5.1.el9uek
kernel-uek64kol 90:5.15.0-317.197.5.1.el9uek
kernel-uek64k-coreol 80:5.15.0-317.197.5.1.el9uek
kernel-uek64k-coreol 90:5.15.0-317.197.5.1.el9uek
kernel-uek64k-develol 80:5.15.0-317.197.5.1.el9uek
kernel-uek64k-develol 90:5.15.0-317.197.5.1.el9uek
kernel-uek64k-modulesol 80:5.15.0-317.197.5.1.el9uek
kernel-uek64k-modulesol 90:5.15.0-317.197.5.1.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-317.197.5.1.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-317.197.5.1.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-68192 linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset...9.8 0.0061 None reported
High CVE-2025-40343 nvmet-fc: avoid scheduling association deletion twice9.8 0.0070 None reported
High CVE-2025-40252 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()9.8 0.0065 None reported
High CVE-2025-40261 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()9.8 0.0060 None reported
High CVE-2025-68284 libceph: prevent potential out-of-bounds writes in handle_auth_session_key()9.8 0.0059 None reported
High CVE-2025-68285 libceph: fix potential use-after-free in have_mon_and_osd_map()9.8 0.0059 None reported
High CVE-2025-40257 mptcp: fix a race in mptcp_pm_del_add_timer()9.8 0.0050 None reported
High CVE-2025-40324 NFSD: Fix crash in nfsd4_read_release()7.5 0.0049 None reported
High CVE-2025-68301 net: atlantic: fix fragment overflow handling in RX path9.8 0.0047 None reported
High CVE-2025-68241 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re...7.5 0.0047 None reported
High CVE-2025-40273 NFSD: free copynotify stateid in nfs4_free_ol_stateid()8.8 0.0046 None reported
High CVE-2025-68321 linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allo...7.5 0.0045 None reported
High CVE-2025-40342 nvme-fc: use lock accessing port_state and rport state8.8 0.0039 None reported
High CVE-2025-40309 Bluetooth: SCO: Fix UAF on sco_conn_free8.0 0.0026 None reported
High CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE7.8 0.0025 None reported
High CVE-2025-40281 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto7.0 0.0023 None reported
High CVE-2025-68287 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths7.8 0.0023 None reported
High CVE-2025-68227 mptcp: Fix proto fallback detection with BPF7.8 0.0022 None reported
High CVE-2025-40259 scsi: sg: Do not sleep in atomic context7.0 0.0022 None reported
High CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()7.8 0.0021 None reported
High CVE-2025-40331 sctp: Prevent TOCTOU out-of-bounds write7.8 0.0020 None reported
High CVE-2025-68325 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reductio...n/a 0.0020 None reported
High CVE-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba7.3 0.0020 None reported
High CVE-2025-68327 linux: In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Fix synchronous external abo...n/a 0.0019 None reported
High CVE-2025-68330 linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regressio...n/a 0.0019 None reported
Showing 1 to 25 of 66 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.