Summary
[5.15.0-319.201.4.6]
- xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman) [Orabug: 39342679] {CVE-2026-43284}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39342679] {CVE-2026-43284}
[5.15.0-319.201.4.5]
- iommu/arm-smmu-v3: Handle zeroed A4-2C HTTU override settings (Joao Martins) [Orabug: 39312049]
- iommu: Move IOMMU_DIRTY_NO_CLEAR define (Shameer Kolothum) [Orabug: 39312049]
- iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping (Kunkun Jiang) [Orabug: 39312049]
- iommu/arm-smmu-v3: Add support for dirty tracking in domain alloc (Joao Martins) [Orabug: 39312049]
- iommu/io-pgtable-arm: Add read_and_clear_dirty() support (Shameer Kolothum) [Orabug: 39312049]
- iommu/arm-smmu-v3: Add feature detection for HTTU (Jean-Philippe Brucker) [Orabug: 39312049]
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-319.201.4.6.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-319.201.4.6.el9uek |
Vulnerabilities 1
-
High 8.8
xfrm: esp: avoid in-place decrypt on shared skb frags
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter()…