Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2026-500004 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Jul 15, 2026 · Updated Jul 15, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-204.92.4.3]
- xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [Orabug: 39727259] {CVE-2026-31663}
- xfrm: hold device only for the asynchronous decryption (Jianbo Liu) [Orabug: 39727259]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim) [Orabug: 39727258] {CVE-2026-46316}
- ipv6: account for fraggap on the paged allocation path (Wongi Lee) [Orabug: 39727239] {CVE-2026-53362}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-204.92.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-204.92.4.3.el10uek

Vulnerabilities 3

  • High 7.8
    CVE-2026-53362 Exploited Public exploit

    ipv6: account for fraggap on the paged allocation path

    In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are com…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Aug 27, 2026
  • Critical 9.3
    CVE-2026-46316 Public exploit

    KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-31663

    xfrm: hold dev ref until after transport_finish NF_HOOK

    In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() calls dev_put() immediately on re-entry before the skb reaches transport_finish. The …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux