Skip to content
OpenAdvisories
High ELSA-2026-50258 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published May 9, 2026 · Updated May 9, 2026

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.354.4.3]
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39342682] {CVE-2026-43284}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.354.4.3.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.354.4.3.el7uek

Vulnerabilities 1

  • High 8.8
    CVE-2026-43284 Public exploit EPSS 94%

    xfrm: esp: avoid in-place decrypt on shared skb frags

    In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux