Skip to content
OpenAdvisories
High ELSA-2026-500135 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Aug 6, 2026 · Updated Aug 6, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-204.92.4.4.3]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson) [Orabug: 39832878] {CVE-2026-64561}
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39832867] {CVE-2026-68480}

[6.12.0-204.92.4.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug: 39819149]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [Orabug: 39819142] {CVE-2026-64531}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-204.92.4.4.3.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-204.92.4.4.3.el10uek

Vulnerabilities 4

  • High 8.8
    CVE-2026-64561 Public exploit

    KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64531 Public exploit

    net: openvswitch: reject oversized nested action attrs

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-74684

    net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

    In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() The commit 4f61f133f354 ("net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null") f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-68480

    x86/bugs: Make Safe-RET robust against interrupt injection

    In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu