Linux · Oracle Linux · Security advisory · November 7, 2026

ELSA-2026-81406: Security update for 30 packages

ELSA-2026-81406, released November 7, 2026, fixes 11 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
11
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0080
57th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 2 High 9 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-211.65.1.el10_2
kernel-abi-stablelistsol 100:6.12.0-211.65.1.el10_2
kernel-coreol 100:6.12.0-211.65.1.el10_2
kernel-cross-headersol 100:6.12.0-211.65.1.el10_2
kernel-debugol 100:6.12.0-211.65.1.el10_2
kernel-debug-coreol 100:6.12.0-211.65.1.el10_2
kernel-debug-develol 100:6.12.0-211.65.1.el10_2
kernel-debug-devel-matchedol 100:6.12.0-211.65.1.el10_2
kernel-debug-modulesol 100:6.12.0-211.65.1.el10_2
kernel-debug-modules-coreol 100:6.12.0-211.65.1.el10_2
kernel-debug-modules-extraol 100:6.12.0-211.65.1.el10_2
kernel-debug-uki-virtol 100:6.12.0-211.65.1.el10_2
kernel-develol 100:6.12.0-211.65.1.el10_2
kernel-devel-matchedol 100:6.12.0-211.65.1.el10_2
kernel-docol 100:6.12.0-211.65.1.el10_2
kernel-headersol 100:6.12.0-211.65.1.el10_2
kernel-modulesol 100:6.12.0-211.65.1.el10_2
kernel-modules-coreol 100:6.12.0-211.65.1.el10_2
kernel-modules-extraol 100:6.12.0-211.65.1.el10_2
kernel-modules-extra-matchedol 100:6.12.0-211.65.1.el10_2
kernel-toolsol 100:6.12.0-211.65.1.el10_2
kernel-tools-libsol 100:6.12.0-211.65.1.el10_2
kernel-tools-libs-develol 100:6.12.0-211.65.1.el10_2
kernel-uki-virtol 100:6.12.0-211.65.1.el10_2
kernel-uki-virt-addonsol 100:6.12.0-211.65.1.el10_2
libperfol 100:6.12.0-211.65.1.el10_2
perfol 100:6.12.0-211.65.1.el10_2
python3-perfol 100:6.12.0-211.65.1.el10_2
rtlaol 100:6.12.0-211.65.1.el10_2
rvol 100:6.12.0-211.65.1.el10_2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-89970 nvmet-auth: Synchronize timeout work during SQ teardown9.8 0.0080 None reported
Urgent CVE-2026-72318 linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars...9.4 0.0059 None reported
High CVE-2026-68123 openvswitch: fix GSO userspace truncation underflow9.8 0.0055 None reported
High CVE-2026-64385 smb: client: fix double-free in SMB2_ioctl() replay9.8 0.0046 None reported
High CVE-2026-63925 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.1 0.0035 None reported
High CVE-2026-64507 x86/bugs: Enable IBPB flush on BPF JIT allocation7.8 0.0023 None reported
High CVE-2026-64508 bpf: Support for hardening against JIT spraying7.8 0.0019 None reported
High CVE-2026-72289 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...9.3 0.0019 None reported
High CVE-2026-80521 af_unix: Unlink scc_entry in unix_del_edge().7.8 0.0018 None reported
High CVE-2026-64191 i2c: stub: Reject I2C block transfers with invalid length9.8 0.0017 None reported
High CVE-2026-43332 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...7.8 0.0016 None reported
Showing 1 to 11 of 11 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.