RHSA-2026:61887: kernel security update

RHSA-2026:61887, released September 2, 2026, fixes 23 CVEs in kernel (version 6.12.0-211.50.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

3 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0080

56th percentile

Priority of the 23 CVEs

Patch now 0
                                Urgent 3
                                High 20
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 10	6.12.0-211.50.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-72069	linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in...	9.8	0.0073	None reported
Urgent	CVE-2026-63800	pNFS: Fix use-after-free in pnfs_update_layout()	9.8	0.0064	None reported
Urgent	CVE-2026-53053	iommu/amd: Fix clone_alias() to use the original device's devid	9.8	0.0013	None reported
High	CVE-2026-64320	nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page	9.1	0.0080	None reported
High	CVE-2026-53399	nfsd: release layout stid on setlease failure	9.8	0.0066	None reported
High	CVE-2026-23003	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k...	8.8	0.0055	None reported
High	CVE-2026-53392	NFSv4/flexfiles: reject zero filehandle version count	8.8	0.0053	None reported
High	CVE-2026-53397	nfsd: fix posix_acl leak on SETACL decode failure	8.8	0.0053	None reported
High	CVE-2026-53391	NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr	8.8	0.0052	None reported
High	CVE-2026-64384	smb: client: fix change notify replay double-free	9.8	0.0046	None reported
High	CVE-2026-53026	kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_a...	8.8	0.0043	None reported
High	CVE-2026-64136	kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f...	9.8	0.0041	None reported
High	CVE-2025-21834	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0018	None reported
High	CVE-2026-64276	Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count	8.8	0.0017	None reported
High	CVE-2026-64277	Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count	8.8	0.0017	None reported
High	CVE-2026-64298	NFSv4: include MAY_WRITE in open permission mask for O_TRUNC	8.8	0.0015	None reported
High	CVE-2026-64018	kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-...	9.3	0.0014	None reported
High	CVE-2026-53189	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...	8.8	0.0013	None reported
High	CVE-2026-45970	kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0013	None reported
High	CVE-2026-64189	netfilter: ipset: fix race between dump and ip_set_list resize	8.8	0.0013	None reported
High	CVE-2026-43454	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0012	None reported
High	CVE-2026-53153	kernel-rt-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0010	None reported
High	CVE-2026-64418	linux: In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race wi...	8.8	0.0010	None reported

Also fixes CVE-2026-72069

SUSE-SU-2026:4120-1
kernel-livepatch-SLE15-SP7-RT_Update_20 on sles 15.7
OPENSUSE-SU-2026:21910-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:23902-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
SUSE-SU-2026:4254-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
SUSE-SU-2026:4369-1
kernel-default, kernel-default-base, kernel-docs and 4 more on sles 15.6
ALSA-2026:61887
kernel, kernel-64k, kernel-64k-core and 72 more on almalinux 10
RLSA-2026:61887
kernel on rocky 10
ELSA-2026-61887-0
kernel, kernel-abi-stablelists, kernel-core and 27 more on ol 10

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:61887

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rhsa-2026-61887">RHSA-2026:61887 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.