Skip to content
OpenAdvisories
High ELSA-2026-500632 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Nov 12, 2026 · Updated Nov 12, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-208.112.5.2]
- net: restore refcount ordering for lockless socket access (Hyunwoo Kim) [Orabug: 40285160]
- inet: reject unhashed sockets during established lookups (Hyunwoo Kim) [Orabug: 40285160] {CVE-2026-99288}
- refcount: provide ops for cases when object's memory can be reused (Suren Baghdasaryan) [Orabug: 40285160]
- tcp: Fix potential UAF in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 40285160] {CVE-2026-99270}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-208.112.5.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-208.112.5.2.el10uek

Vulnerabilities 2

  • High 8.1
    CVE-2026-99270

    tcp: Fix potential UAF in reqsk_timer_handler().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_ehash_insert() in reqsk_timer_handler(), we jump to the no_ownership: label and free the new reqsk imm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-99288

    inet: reject unhashed sockets during established lookups

    In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLAB_TYPESAFE_BY_RCU, so memory can be reused before an RCU…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux