Skip to content
OpenAdvisories
High ELSA-2026-50270 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published May 13, 2026 · Updated May 13, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-202.76.4.2]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [Orabug: 39361451] {CVE-2026-23270}
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [Orabug: 39361449] {CVE-2026-23278}
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39361444] {CVE-2026-31402}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-202.76.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-202.76.4.2.el10uek

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-31402 Public exploit

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses. This size…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23270

    net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can return TC_ACT_CONSUMED while the curren…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23278

    netfilter: nf_tables: always walk all pending catchall elements

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux