ELSA-2026-50372: Security update for 35 packages

ELSA-2026-50372, released July 2, 2026, fixes 679 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

679

16 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0458

91st percentile

Priority of the 679 CVEs

Patch now 0
                                Urgent 16
                                High 332
                                Routine 331

Fixed package versions

Product	Release	Fixed in
kernel-uek	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-core	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-core	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-core	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-core	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-devel	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-devel	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-core	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-core	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-deprecated	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-deprecated	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-desktop	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-desktop	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-extra	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-extra	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-extra-netfilter	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-extra-netfilter	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-usb	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-usb	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-wireless	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-debug-modules-wireless	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-devel	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-devel	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-doc	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-doc	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-core	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-core	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-deprecated	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-deprecated	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-desktop	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-desktop	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-extra	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-extra	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-extra-netfilter	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-extra-netfilter	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-usb	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-usb	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-wireless	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-modules-wireless	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek-tools	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek-tools	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-core	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-core	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-devel	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-devel	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-core	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-core	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-deprecated	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-deprecated	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-desktop	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-desktop	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-extra	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-extra	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-extra-netfilter	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-extra-netfilter	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-usb	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-usb	ol 9	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-wireless	ol 10	0:6.12.0-204.92.4.2.el9uek
kernel-uek64k-modules-wireless	ol 9	0:6.12.0-204.92.4.2.el9uek

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-43407	linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in c...	9.1	0.0066	None reported
Urgent	CVE-2026-43186	linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_...	9.8	0.0064	None reported
Urgent	CVE-2026-43304	linux: In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN Wh...	9.8	0.0061	None reported
Urgent	CVE-2026-43406	linux: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads i...	9.1	0.0061	None reported
Urgent	CVE-2026-31405	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	9.8	0.0056	None reported
Urgent	CVE-2026-43383	linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t...	9.4	0.0054	None reported
Urgent	CVE-2026-45898	linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by remo...	9.8	0.0053	None reported
Urgent	CVE-2026-43341	linux: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparoun...	9.8	0.0051	None reported
Urgent	CVE-2026-43071	linux: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to tw...	9.1	0.0046	None reported
Urgent	CVE-2026-43117	linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from...	9.1	0.0046	None reported
Urgent	CVE-2026-31436	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	9.8	0.0046	None reported
Urgent	CVE-2026-45988	linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If...	9.8	0.0046	None reported
Urgent	CVE-2026-45972	linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free i...	9.8	0.0033	None reported
Urgent	CVE-2026-23395	Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ	9.1	0.0027	None reported
Urgent	CVE-2025-71305	drm/display/dp_mst: Add protection against 0 vcpi	9.8	0.0016	None reported
Urgent	CVE-2026-45899	ext4: drop extent cache when splitting extent fails	9.8	0.0016	None reported
High	CVE-2026-46242	kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...	7.8	0.0458	None reported
High	CVE-2026-43503	net: skbuff: propagate shared-frag marker through frag-transfer helpers	8.8	0.0199	None reported
High	CVE-2026-23455	kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng...	9.1	0.0159	None reported
High	CVE-2026-53359	kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...	8.8	0.0137	None reported
High	CVE-2026-45860	linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection...	7.5	0.0075	None reported
High	CVE-2026-43501	ipv6: rpl: reserve mac_len headroom when recompressed SRH grows	9.8	0.0073	None reported
High	CVE-2026-45859	netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation	8.1	0.0071	None reported
High	CVE-2026-43493	crypto: pcrypt - Fix handling of MAY_BACKLOG requests	9.8	0.0068	None reported
High	CVE-2026-46331	net/sched: fix pedit partial COW leading to page cache corruption	8.1	0.0064	None reported

Also fixes CVE-2026-43407

SUSE-SU-2026:22835-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
OPENSUSE-SU-2026:21388-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:2482-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
SUSE-SU-2026:2591-1
kernel-livepatch-SLE15-SP7-RT_Update_16 on sles 15.7
ALAS2023-2026-1681
bpftool, bpftool-debuginfo, kernel and 19 more on amzn 2023
ALAS2023-2026-1596
bpftool6.18, bpftool6.18-debuginfo, kernel-livepatch-6.18.20-20.229 and 19 more on amzn 2023
ALAS2023-2026-1594
bpftool6.12, bpftool6.12-debuginfo, kernel-livepatch-6.12.79-101.147 and 19 more on amzn 2023
DEBIAN-CVE-2026-43407
linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://linux.oracle.com/errata/ELSA-2026-50372.html

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/elsa-2026-50372">ELSA-2026-50372 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.