Skip to content
OpenAdvisories
High ELSA-2026-500631 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Oracle Linux

Summary

[5.15.0-326.224.5.1]
- net: restore refcount ordering for lockless socket access (Hyunwoo Kim) [Orabug: 40285605]
- refcount: provide ops for cases when object's memory can be reused (Suren Baghdasaryan) [Orabug: 40285605]
- inet: reject unhashed sockets during established lookups (Hyunwoo Kim) [Orabug: 40285605] {CVE-2026-99288}
- tcp: Fix potential UAF in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 40285605] {CVE-2026-99270}

Fixed packages 19

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek64k 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek64k-core 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek64k-devel 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek64k-modules 0:5.15.0-326.224.5.1.el9uek
Oracle Linux · 8 kernel-uek64k-modules-extra 0:5.15.0-326.224.5.1.el9uek

Vulnerabilities 2

  • High 8.1
    CVE-2026-99270

    tcp: Fix potential UAF in reqsk_timer_handler().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_ehash_insert() in reqsk_timer_handler(), we jump to the no_ownership: label and free the new reqsk imm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-99288

    inet: reject unhashed sockets during established lookups

    In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLAB_TYPESAFE_BY_RCU, so memory can be reused before an RCU…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux