Unbreakable Enterprise kernel security update

5.4.17-2136.360.3.1 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167666 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.3 - mm/pagewalk: fix stale walk-action escaping walkpmdrange Hyunwoo Kim Orabug: 40157478 CVE-2026-89754 - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157474 CVE-2026-98260 6.12.0-207.111.5.2 - PCI: Fix BAR resize for devices on a root bus Liz Fong-Jones...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.3 - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157515 CVE-2026-98260 5.15.0-325.221.6.2 - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - eventpoll: move epifget up Christian Brauner Orabug:...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500385)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500385 advisory. - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - landlock: Require...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.2 - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - eventpoll: move epifget up Christian Brauner Orabug: 39784995 - eventpoll: rename epremovesafe back to epremove Christian Brauner Orabug: 39784995 - eventpoll: drop...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.1 - x86/kexec: Add EFI config table identity mapping for kexec kernel Tao Liu Orabug: 40127851 - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Sean Christopherson Orabug: 40127747 CVE-2026-80726 5.15.0-325.221.6 - scsi: qla2xxx: Preserve PURLS head o...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500374 advisory. - mptcp: fix bad accounting in mptcpsubflowpushpending Paolo Abeni Orabug: 40078583 CVE-2026-97522 - mptcp: close race between scheduler and sta...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500375)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500375 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft As...

Unbreakable Enterprise kernel security update

5.15.0-325.220.5 - octeontx2-pf: fix SQB pointer leak on init failure Dawei Feng Orabug: 39951718 - batman-adv: Remove stale reason member from batadvtpvars Vijayendra Suman Orabug: 39966037 - Revert 'octeontx2-pf: Fix leak of SQ timestamp buffer on teardown' Vijayendra Suman Orabug: 39967930 -...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500377)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500377 advisory. - tcp: fix potential race in tcpv6synrecvsock Eric Dumazet Orabug: 39331624 CVE-2026-43198 - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe Bjoe...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.1 - selftests/mm/khugepaged: include kselftest.h in khugepaged Sherry Yang Orabug: 40099804 6.12.0-207.111.5 - Rename ONOS kernel flavor to OSP for OL9 and OL10 Vijay Kumar Orabug: 40055216 - tcp: Remove hashinfo test for inet6?lookuprunsklookup. Kuniyuki Iwashima Orabug: 4005230...

Unbreakable Enterprise kernel security update

5.4.17-2136.360.3 - IB/mlx4: delete allocated idmapentry while sending REJ Praveen Kumar Kannoju Orabug: 39999072 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 399821...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500329)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500329 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035523 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft As...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500328)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500328 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035126 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft...

Unbreakable Enterprise kernel security update

6.12.0-206.104.4.4 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035126 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035125 CVE-2026-80844 - RDMA/nldev: Fix locking when accessing mr-pd Jason Gunthorpe Orabug: 400289...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.3 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035523 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035522 CVE-2026-80844 - tcp: clear sockops cb flags before force-closing a child socket Sechang Lim...

Unbreakable Enterprise kernel security update

5.4.17-2136.359.3.2 - sctp: prevent peer transport count overflow Asim Viladi Oglu Manizada Orabug: 40036878 CVE-2026-74469 - pppoe: reload header pointer after devhardheader Asim Viladi Oglu Manizada Orabug: 40036877 CVE-2026-68121 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Og...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500330)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500330 advisory. - sctp: prevent peer transport count overflow Asim Viladi Oglu Manizada Orabug: 40036878 CVE-2026-74469 - pppoe: reload header pointer after...

Unbreakable Enterprise kernel security update

5.4.17-2136.359.3.1 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974845 CVE-2026-80590 5.4.17-2136.359.3 - Partial revert of 'x86/alternatives: Optimize optimizenops' Harshit Mogalapalli Orabug: 39866546 - Revert 'x86/alternatives: Add altinstr.flags' Harsh...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.2 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 5.15.0-324.217.5.1 - crypto: qat: restore misc workqueue lifecycle Manjunath Patil Orabug: 39937535 - LTS version: v5.15.217 Vijayendra Suman - ring-buffer: Use...