Linux · Oracle Linux · Security advisory · September 7, 2026

ELSA-2026-63014-0: Security update for 20 packages

ELSA-2026-63014-0, released September 7, 2026, fixes 14 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 1 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:4.18.0-553.159.1.el8_10
kernelol 80:4.18.0-553.159.1.el8_10
kernel-abi-stablelistsol 80:4.18.0-553.159.1.el8_10
kernel-coreol 80:4.18.0-553.159.1.el8_10
kernel-cross-headersol 80:4.18.0-553.159.1.el8_10
kernel-debugol 80:4.18.0-553.159.1.el8_10
kernel-debug-coreol 80:4.18.0-553.159.1.el8_10
kernel-debug-develol 80:4.18.0-553.159.1.el8_10
kernel-debug-modulesol 80:4.18.0-553.159.1.el8_10
kernel-debug-modules-extraol 80:4.18.0-553.159.1.el8_10
kernel-develol 80:4.18.0-553.159.1.el8_10
kernel-docol 80:4.18.0-553.159.1.el8_10
kernel-headersol 80:4.18.0-553.159.1.el8_10
kernel-modulesol 80:4.18.0-553.159.1.el8_10
kernel-modules-extraol 80:4.18.0-553.159.1.el8_10
kernel-toolsol 80:4.18.0-553.159.1.el8_10
kernel-tools-libsol 80:4.18.0-553.159.1.el8_10
kernel-tools-libs-develol 80:4.18.0-553.159.1.el8_10
perfol 80:4.18.0-553.159.1.el8_10
python3-perfol 80:4.18.0-553.159.1.el8_10

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()9.8 0.0064 None reported
High CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length9.8 0.0071 None reported
High CVE-2026-53399 nfsd: release layout stid on setlease failure9.8 0.0066 None reported
High CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count8.8 0.0053 None reported
High CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure8.8 0.0053 None reported
High CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr8.8 0.0052 None reported
High CVE-2026-74581 net: ipv6: clear suppressed fib6 rule result9.8 0.0042 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection8.8 0.0023 None reported
High CVE-2025-71132 smc91x: fix broken irq-context in PREEMPT_RT8.8 0.0022 None reported
High CVE-2024-57849 kernel-64kb: Security update for the Linux Kernel8.8 0.0021 None reported
High CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC8.8 0.0015 None reported
High CVE-2026-64018 kernel-default: Security update for the Linux Kernel9.3 0.0014 None reported
High CVE-2026-45970 kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).8.8 0.0013 None reported
High CVE-2026-53185 kernel: kernel: zram: fix use-after-free in zram_bvec_write_partial()8.8 0.0011 None reported
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.