ELSA-2026-500587 — Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Summary

[6.12.0-208.112.5.1]
- iommu/amd: Force device table to maximum size (Suravee Suthikulpanit) [Orabug: 40172716] {CVE-2024-21963}
- Fix Zen5 TSA (Borislav Petkov (AMD)) [Orabug: 40172716] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004}

Fixed packages 35

Release	Package	Fixed in
Oracle Linux · 9	kernel-uek	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-core	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-core	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-devel	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-core	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-deprecated	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-desktop	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-extra	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-extra-netfilter	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-usb	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-debug-modules-wireless	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-devel	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-doc	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-core	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-deprecated	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-desktop	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-extra	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-extra-netfilter	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-usb	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-modules-wireless	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek-tools	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-core	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-devel	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-core	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-deprecated	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-desktop	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-extra	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-extra-netfilter	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-usb	0:6.12.0-208.112.5.1.el10uek
Oracle Linux · 9	kernel-uek64k-modules-wireless	0:6.12.0-208.112.5.1.el10uek

Vulnerabilities 4

Medium 6.0

CVE-2024-21963

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors Debian Ubuntu Alpine

Nov 12, 2026
Medium 5.7

CVE-2026-0004

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on th…

AMD AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors AMD Ryzen™ 9000 Series Desktop Processors Debian Ubuntu

Nov 12, 2026
Medium 5.6

CVE-2024-36350

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, po…

AMD AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors AMD Ryzen™ 9000 Series Desktop Processors Debian Ubuntu Alpine

Jul 8, 2025
Medium 5.6

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potent…

AMD AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors AMD Ryzen™ 9000 Series Desktop Processors Debian Ubuntu Alpine

Jul 8, 2025

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Summary

Fixed packages 35

Vulnerabilities 4

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on th…

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, po…

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potent…