CLSA-2026-1792753425 kernel-uek: Fix of 6 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 - reboot: fix cadpid use-after-free race CVE-2026-97938 - ALSA: seq: midi: Serialize output...

CLSA-2026-1792137027 kernel-uek: Fix of 161 CVEs

net: usb: pegasus: don't rely on id table pointer arithmetic CVE-2026-97540 - ocfs2: validate directory-index entry counts when reading metadata CVE-2026-89492 - ocfs2: validate dxroot extent list fields during block read CVE-2026-89492 - nvme-tcp: reject a read that transferred too few bytes...

CLSA-2026-1787304608 kernel-uek: Fix of 34 CVEs

Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison CVE-2026-53309 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 - ixgbevf:...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...

CLSA-2026-1780315683 kernel-uek: Fix of 26 CVEs

libceph: make decodepool more resilient against corrupted osdmaps CVE-2025-71116 - scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 - e1000: fix OOB in e1000tbishouldaccept CVE-2025-71093 - ALSA: usb-audio: Use correct version for UAC3 header validation...

CLSA-2026-1783859504 kernel-uek: Fix of 2 CVEs

futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - ip6tunnel: clear skb2-cb in ip4ip6err CVE-2026-43037...

CLSA-2026-1783336710 kernel-uek: Fix of 10 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - net: afkey: zero aligned sockaddr tail in PFKEY exports CVE-2026-43088 - scsi: aic94xx: fix use-after-free in device removal path CVE-2025-71075 - i2c: piix4: Fix adapter not be removed in piix4remove...

CLSA-2026-1782393170 kernel-uek: Fix of 2 CVEs

net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 - xfrmuser: fix info leak in buildmapping CVE-2026-43089 - xfs: fix freemap adjustments when adding xattrs to leaf blocks CVE-2026-43158...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002464 advisory. Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors. Tenable has extracted the...

OracleVM 3.4 : kernel-uek (OVMSA-2025-0001)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.93.1- cachefiles: fix memory leak in cachefilesaddcache Baokun Li Orabug: 36544657 CVE-2024-26840 Tenable has extracted the preceding description block directly from the OracleVM security advisory. Not...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0014)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.90.3.1- vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132352 Tenable has extracted the preceding description block directly from the OracleVM security advisory. Note that...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0013)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.90.3- SUNRPC: increase size of rpcwaitqueue.qlen from unsigned short to unsigned int Dai Ngo Orabug: 370554394.1.12-124.90.2- scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc Justin Tee Orabug:...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0011)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.89.4- isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284- tracing: Restructure traceclockglobal to never block Steven Rostedt VMware Orabug: 36940388 CVE-2021-46939- ud...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0009)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.87.2.2- net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36660755 Tenable has extracted the preceding description block directly from the OracleVM security advisory. Note that Nessus has...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0006)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.87.2- net: sched: fix race condition in qdiscgraft Eric Dumazet Orabug: 35250827 CVE-2023-05904.1.12-124.87.1- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet Zhengchao Shao Orabug:...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12272)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12272 advisory. - KVM: x86: Add BHINO Daniel Sneddon Orabug: 36384802 CVE-2024-2201 - x86/bhi: Mitigate KVM by default Pawan Gupta Orabug: 36384802 CVE-2024-2201 ...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0004)

The remote OracleVM system is missing necessary patches to address security updates: - A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0003)

The remote OracleVM system is missing necessary patches to address security updates: - An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service panic because inputsetcapability mishandles the situation in which an event code...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0025)

The remote OracleVM system is missing necessary patches to address security updates: - A flaw was found in the Netfilter subsystem in the Linux kernel. The xtu32 module did not validate the fields in the xtu32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds rea...