Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2026-50254 1 CVE

Important: Unbreakable Enterprise kernel security update: Copy Fail (Oracle Linux 9)

Published May 1, 2026 · Updated May 1, 2026

Summary

[6.12.0-201.74.2.2]
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39292190]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39292190]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39292190]
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39292190]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39292190]
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39292190] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39292190]
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39292190]
- uek-rpm: Enable FWCTL modules for aarch64 (Dave Kleikamp) [Orabug: 39292173]
- uek-rpm: CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON should be set (Dave Kleikamp) [Orabug: 39292151]
- x86/CPU: Fix FPDSS on Zen1 (Borislav Petkov (AMD)) [Orabug: 39292145]

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-201.74.2.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-201.74.2.2.el10uek

Vulnerabilities 1

  • High 7.8
    CVE-2026-31431 Exploited Public exploit EPSS 98%

    crypto: algif_aead - Revert to operating out-of-place

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

    KEV May 1, 2026