CLSA-2026-1792753425 kernel-uek: Fix of 6 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 - reboot: fix cadpid use-after-free race CVE-2026-97938 - ALSA: seq: midi: Serialize output...

CLSA-2026-1792137027 kernel-uek: Fix of 161 CVEs

net: usb: pegasus: don't rely on id table pointer arithmetic CVE-2026-97540 - ocfs2: validate directory-index entry counts when reading metadata CVE-2026-89492 - ocfs2: validate dxroot extent list fields during block read CVE-2026-89492 - nvme-tcp: reject a read that transferred too few bytes...

CLSA-2026-1787304608 kernel-uek: Fix of 34 CVEs

Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison CVE-2026-53309 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 - ixgbevf:...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500238)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500238 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39784513 CVE-2026-68480 - ocfs2: fix possible deadlock...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500150)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500150 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39844812 CVE-2026-68480 - KVM: x86: Check for...

CLSA-2026-1780315683 kernel-uek: Fix of 26 CVEs

libceph: make decodepool more resilient against corrupted osdmaps CVE-2025-71116 - scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 - e1000: fix OOB in e1000tbishouldaccept CVE-2025-71093 - ALSA: usb-audio: Use correct version for UAC3 header validation...

CLSA-2026-1783859504 kernel-uek: Fix of 2 CVEs

futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - ip6tunnel: clear skb2-cb in ip4ip6err CVE-2026-43037...

CLSA-2026-1783336710 kernel-uek: Fix of 10 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - net: afkey: zero aligned sockaddr tail in PFKEY exports CVE-2026-43088 - scsi: aic94xx: fix use-after-free in device removal path CVE-2025-71075 - i2c: piix4: Fix adapter not be removed in piix4remove...

redis:6 security update

6.2.22-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.22-1 - rebase to 6.2.22 for CVE-2026-25243...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002464 advisory. Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors. Tenable has extracted the...

Unbreakable Enterprise kernel security update

5.15.0-315.196.5.1 - netfilter: nftables: reject duplicate device on updates Pablo Neira Ayuso Orabug: 38744086 CVE-2025-38678 - Reapply 'cpuidle: menu: Avoid discarding useful information' Harshvardhan Jha Orabug: 38744084 - rtc: expose RTCFEATUREUPDATEINTERRUPT Alexandre Belloni Orabug: 3874408...

redis:7 security update

7.2.11-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.11-1 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 7.2.10-1 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 7.2.8-1 - rebase to 7.2.8 for CVE-2025-21605 7.2.7-1 ...

Unbreakable Enterprise kernel security update

5.15.0-314.193.5.3 - Revert 'cpufreq: Introduce an optional cpuinfoavgfreq sysfs entry' Samasth Norway Ananda Orabug: 38633525 5.15.0-314.193.5.2 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38607608 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabu...

microcode_ctl security update

2:2.1-73.24.0.20250512 - update microcode bundle to 20250512 Orabug: 38139038 2:2.1-73.23.0.20250211 - update microcode bundle to 20250211 Orabug: 37670820 - drop releasenote.md file 2:2.1-73.20.0.1 - don't bother calling dracut if virtualized Orabug: 35702409 - also rebuild initramfs for...

Unbreakable Enterprise kernel security update

5.15.0-313.189.5.1 - afunix: Don't leave consecutive consumed OOB skbs. Kuniyuki Iwashima Orabug: 38528187 CVE-2025-38236 - fs: writeback: fix use-after-free in markinodedirty Jiufei Xue Orabug: 38528183 CVE-2025-39866 - rtnetlink: Fix L3 stats disable handling in rtnloffloadxstatsfill Vijayendra...

Unbreakable Enterprise kernel security update

6.12.0-102.36.5.2 - iommu/vt-d: Fix misplaced domainattached assignment Ban ZuoXiang Orabug: 38294635 6.12.0-102.36.5.1 - net/sched: Always pass notifications when child class becomes empty Lion Ackermann Orabug: 38217337 6.12.0-102.36.5 - uek-rpm: Enable few modules related to various subsystems...

PT-2025-30548 · Undefined · Undefined

URGENT: Oracle UEK kernel flaw CVE-2025-20480 patching guide: ✅ Exploit mechanics ✅ Mitigation commands ✅ Compliance checklist Read more: 👉 https://t.co/6cfH4WrvjP CVE202520480 DevSecOps https://t.co/AOwz4P72un...

Failed to load module [veeamblksnap] on Oracle Linux 9 with UEK R8 kernel

Article Applicability This article is specifically regarding Oracle Linux 9 with UEK R8 kernel 6.12+: root@localhost cat /etc/os-release PRETTYNAME="Oracle Linux Server 9.5" root@localhost uname -r 6.12.0-0.20.20.el9uek.x8664 For all other situations involving the error "Failed to load module...