Linux · Oracle Linux · Security advisory · May 10, 2026

ELSA-2026-50261: Security update for 19 packages

ELSA-2026-50261, released May 10, 2026, fixes 49 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
49
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile

Priority of the 49 CVEs

Patch now 0 Urgent 1 High 24 Routine 24

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-320.202.8.2.el9uek
bpftoolol 90:5.15.0-320.202.8.2.el9uek
kernel-uekol 80:5.15.0-320.202.8.2.el9uek
kernel-uekol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-containerol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-containerol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-container-debugol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-container-debugol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-coreol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-coreol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debugol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debugol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-develol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-develol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-develol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-develol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-docol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-docol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-modulesol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-modulesol 90:5.15.0-320.202.8.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-320.202.8.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64kol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64kol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-coreol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-coreol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-develol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-develol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-320.202.8.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-320.202.8.2.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-68741 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite...9.8 0.0043 None reported
High CVE-2025-40135 ipv6: use RCU in ip6_xmit()8.4 0.0071 None reported
High CVE-2025-40129 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-len...7.5 0.0057 None reported
High CVE-2025-68775 net/handshake: duplicate handshake cancellations leak socket9.8 0.0055 None reported
High CVE-2024-50043 linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When...7.8 0.0049 None reported
High CVE-2025-68770 linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in b...7.5 0.0039 None reported
High CVE-2025-54518 AMD: CVE-2025-54518 CPU OP Cache Corruption7.8 0.0029 Exploitation Unlikely
High CVE-2025-21857 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0022 None reported
High CVE-2025-21867 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0021 None reported
High CVE-2025-21997 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.1 0.0021 None reported
High CVE-2025-38385 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect7.8 0.0020 None reported
High CVE-2025-38109 net/mlx5: Fix ECVF vports unload on shutdown flow7.8 0.0020 None reported
High CVE-2025-68371 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed af...7.0 0.0020 None reported
High CVE-2025-38015 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system7.0 0.0020 None reported
High CVE-2025-38020 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0020 None reported
High CVE-2025-38113 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used7.0 0.0020 None reported
High CVE-2025-21724 linux: In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in...7.8 0.0019 None reported
High CVE-2025-40292 virtio-net: fix received length check in big packets8.4 0.0018 None reported
High CVE-2026-23243 RDMA/umad: Reject negative data_len in ib_umad_write7.8 0.0018 None reported
High CVE-2025-38735 gve: prevent ethtool ops after shutdown7.0 0.0018 None reported
High CVE-2025-40051 vhost: vringh: Modify the return value check7.8 0.0017 None reported
High CVE-2025-68171 linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se...7.8 0.0015 None reported
High CVE-2025-39721 crypto: qat - flush misc workqueue during device shutdown7.0 0.0015 None reported
High CVE-2026-31411 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.1 0.0013 None reported
High CVE-2026-23296 scsi: core: Fix refcount leak for tagset_refcnt7.1 0.0013 None reported
Showing 1 to 25 of 49 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.