Linux · Oracle Linux · Security advisory · September 15, 2026

ELSA-2026-67471-0: Security update for 30 packages

ELSA-2026-67471-0, released September 15, 2026, fixes 25 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
25
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0066
51st percentile

Priority of the 25 CVEs

Patch now 0 Urgent 1 High 24 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.55.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.55.1.el10_2
kernel-coreol 100:6.12.0-211.55.1.el10_2
kernel-cross-headersol 100:6.12.0-211.55.1.el10_2
kernel-debugol 100:6.12.0-211.55.1.el10_2
kernel-debug-coreol 100:6.12.0-211.55.1.el10_2
kernel-debug-develol 100:6.12.0-211.55.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.55.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.55.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.55.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.55.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.55.1.el10_2
kernel-develol 100:6.12.0-211.55.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.55.1.el10_2
kernel-docol 100:6.12.0-211.55.1.el10_2
kernel-headersol 100:6.12.0-211.55.1.el10_2
kernel-modulesol 100:6.12.0-211.55.1.el10_2
kernel-modules-coreol 100:6.12.0-211.55.1.el10_2
kernel-modules-extraol 100:6.12.0-211.55.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.55.1.el10_2
kernel-toolsol 100:6.12.0-211.55.1.el10_2
kernel-tools-libsol 100:6.12.0-211.55.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.55.1.el10_2
kernel-uki-virtol 100:6.12.0-211.55.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.55.1.el10_2
libperfol 100:6.12.0-211.55.1.el10_2
perfol 100:6.12.0-211.55.1.el10_2
python3-perfol 100:6.12.0-211.55.1.el10_2
rtlaol 100:6.12.0-211.55.1.el10_2
rvol 100:6.12.0-211.55.1.el10_2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-68745 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm...9.8 0.0050 None reported
High CVE-2026-52924 sctp: purge outqueue on stale COOKIE-ECHO handling9.8 0.0066 None reported
High CVE-2026-63919 kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).8.8 0.0065 None reported
High CVE-2026-68426 xfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 0.0050 None reported
High CVE-2026-53246 sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 0.0044 None reported
High CVE-2026-53131 netfilter: require Ethernet MAC header before using eth_hdr()9.4 0.0044 None reported
High CVE-2026-74556 scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 0.0040 None reported
High CVE-2026-63889 kernel-rt-modules-core: kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u328.8 0.0036 None reported
High CVE-2026-31539 kernel: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_i...8.8 0.0033 None reported
High CVE-2026-53361 af_unix: Set gc_in_progress to true in unix_gc().8.8 0.0026 None reported
High CVE-2026-31663 xfrm: hold dev ref until after transport_finish NF_HOOK8.8 0.0022 None reported
High CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().8.8 0.0017 None reported
High CVE-2026-63917 kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).8.8 0.0017 None reported
High CVE-2026-43248 vhost: move vdpa group bound check to vhost_vdpa8.8 0.0016 None reported
High CVE-2026-43368 kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)8.8 0.0016 None reported
High CVE-2026-63921 kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).8.8 0.0016 None reported
High CVE-2026-46149 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()8.8 0.0014 None reported
High CVE-2026-68264 kernel-modules-core: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Jose Exposito) [RHEL-236583]8.8 0.0014 None reported
High CVE-2026-64111 kernel: In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr(...8.8 0.0014 None reported
High CVE-2026-31479 kernel-64kb: drm/xe: always keep track of remap prev/next (bsc#1262765).8.8 0.0013 None reported
High CVE-2026-31566 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib8.8 0.0013 None reported
High CVE-2026-43370 kernel-64kb: Security update for the Linux Kernel8.8 0.0012 None reported
High CVE-2026-23466 kernel-64kb: Security update for the Linux Kernel8.8 0.0010 None reported
High CVE-2026-53239 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()8.8 0.0010 None reported
High CVE-2026-31656 drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat8.8 0.0009 None reported
Showing 1 to 25 of 25 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.