Linux · Oracle Linux · Security advisory · March 10, 2026

ELSA-2026-50145: Security update for 19 packages

ELSA-2026-50145, released March 10, 2026, fixes 145 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
145
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0113
66th percentile

Priority of the 145 CVEs

Patch now 0 Urgent 3 High 62 Routine 80

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-318.199.3.2.el9uek
bpftoolol 90:5.15.0-318.199.3.2.el9uek
kernel-uekol 80:5.15.0-318.199.3.2.el9uek
kernel-uekol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-containerol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-containerol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-container-debugol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-container-debugol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-coreol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-coreol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-debugol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-debugol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-develol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-develol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-develol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-develol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-docol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-docol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-modulesol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-modulesol 90:5.15.0-318.199.3.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-318.199.3.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-318.199.3.2.el9uek
kernel-uek64kol 80:5.15.0-318.199.3.2.el9uek
kernel-uek64kol 90:5.15.0-318.199.3.2.el9uek
kernel-uek64k-coreol 80:5.15.0-318.199.3.2.el9uek
kernel-uek64k-coreol 90:5.15.0-318.199.3.2.el9uek
kernel-uek64k-develol 80:5.15.0-318.199.3.2.el9uek
kernel-uek64k-develol 90:5.15.0-318.199.3.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-318.199.3.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-318.199.3.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-318.199.3.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-318.199.3.2.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-68366 linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th...8.8 0.0020 None reported
Urgent CVE-2025-68819 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()9.8 0.0016 None reported
Urgent CVE-2025-71098 ip6_gre: make ip6gre_header() robust9.8 0.0014 None reported
High CVE-2026-23111 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0113 None reported
High CVE-2026-22998 kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v...7.5 0.0078 None reported
High CVE-2025-68349 linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m...7.5 0.0071 None reported
High CVE-2025-68782 scsi: target: Reset t_task_cdb pointer in error case8.6 0.0069 None reported
High CVE-2025-68261 ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()7.5 0.0055 None reported
High CVE-2025-68337 linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac...7.5 0.0055 None reported
High CVE-2026-23003 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k...8.8 0.0055 None reported
High CVE-2025-71120 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf7.5 0.0053 None reported
High CVE-2025-71116 libceph: make decode_pool() more resilient against corrupted osdmaps8.1 0.0046 None reported
High CVE-2025-68803 NFSD: NFSv4 file creation neglects setting ACL8.0 0.0045 None reported
High CVE-2026-22984 kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in...8.8 0.0041 None reported
High CVE-2026-22990 kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app...8.8 0.0040 None reported
High CVE-2026-23139 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only whe...7.6 0.0038 None reported
High CVE-2025-71068 svcrdma: bound check rq_pages index in inline path7.8 0.0038 None reported
High CVE-2025-68255 staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing8.8 0.0037 None reported
High CVE-2025-68818 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"8.8 0.0033 None reported
High CVE-2025-71085 kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...7.8 0.0031 None reported
High CVE-2025-71093 e1000: fix OOB in e1000_tbi_should_accept()7.1 0.0029 None reported
High CVE-2025-68254 staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing7.1 0.0028 None reported
High CVE-2025-71197 linux: In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in ala...n/a 0.0026 None reported
High CVE-2024-46830 linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu when handling KVM_SE...7.8 0.0025 None reported
High CVE-2025-71127 wifi: mac80211: Discard Beacon frames to non-broadcast address7.9 0.0023 None reported
Showing 1 to 25 of 145 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.