Skip to content
OpenAdvisories
Medium ELSA-2026-50071 1 CVE

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jan 26, 2026 · Updated Jan 26, 2026

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.351.3.3]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38884602] {CVE-2025-40022}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.351.3.3.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.351.3.3.el7uek

Vulnerabilities 1

  • Unscored —
    CVE-2025-40022

    crypto: af_alg - Fix incorrect boolean values in af_alg_ctx

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg") changed some fields from bool to 1-bit bitfie…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu