Skip to content
OpenAdvisories
High ELSA-2026-500399 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Oct 16, 2026 · Updated Oct 16, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-207.111.5.4]
- ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet) [Orabug: 40167669] {CVE-2026-98432}
- ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin) [Orabug: 40167684] {CVE-2026-99999}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-207.111.5.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-207.111.5.4.el10uek

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-98432 Public exploit

    ipv4: free inet_opt and ireq_opt after an RCU grace period

    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.3
    CVE-2026-99999 Public exploit

    ipv4: validate checksum_start before completing checksum

    In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux