Skip to content
OpenAdvisories
High ELSA-2026-50184 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Nov 6, 2026 · Updated Nov 6, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-200.74.27.2]
- ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 39186444] {CVE-2025-40135}
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Inseo An) [Orabug: 39181102] {CVE-2026-23231}
- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [Orabug: 39181101] {CVE-2026-23004}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-200.74.27.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-200.74.27.2.el10uek

Vulnerabilities 3

  • High 8.1
    CVE-2025-40135

    ipv6: use RCU in ip6_xmit()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23004 Public exploit

    dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()

    In the Linux kernel, the following vulnerability has been resolved: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() syzbot was able to crash the kernel in rt6_uncached_list_flush_dev() in an interesting way [1] Crash happens in list_del_i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23231 Public exploit

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in nft_chain_add()) before registering hook…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux