Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

367 results · Clear filters · Feed

High max 8.8

ELSA-2026-39083 8 CVEs 1 exploited

Important: kernel update (Oracle Linux 8)

[4.18.0-553.143.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

Jul 14, 2026
High max 8.8

ELSA-2026-36645 3 CVEs 1 exploited

Important: kernel update (Oracle Linux 9)

[5.14.0-687.23.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Jul 14, 2026
High max 7.5

ELSA-2026-37137 2 CVEs 1 exploited

Important: tomcat security, bug fix, and enhancement update (Oracle Linux 8)

[1:9.0.87-2] - Resolves: RHEL-183993 Remove tomcat clustering JAR from RPM builds

Jul 9, 2026
High max 7.5

ELSA-2026-36879 2 CVEs 1 exploited

Important: tomcat security, bug fix, and enhancement update (Oracle Linux 9)

[1:9.0.117-2] - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build

Jul 8, 2026
High max 8.8

ELSA-2026-19074 4 CVEs 1 exploited

Important: kernel security update (Oracle Linux 10)

[6.12.0-211.7.3.el10_2.OL10] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK…

Jul 8, 2026
High max 9.8

ELSA-2026-50372 822 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-204.92.4.2] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673880] - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) {CVE-2026-46331} - net_sched: act_pedit: use RCU in tc…

Jul 2, 2026
High max 9.8

ELSA-2026-19568 17 CVEs 1 exploited

Important: kernel security update (Oracle Linux 9)

[5.14.0-687.17.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Jun 29, 2026
High max 9.8

ELSA-2026-19704 26 CVEs 1 exploited

Important: firefox security update (Oracle Linux 7)

[140.10.0-1.0.1] - Update to 140.10.0 ESR [Orabug: 39499844][CVE-2026-6746][CVE-2026-6747] [CVE-2026-6748][CVE-2026-6749][CVE-2026-6750][CVE-2026-6751][CVE-2026-6752] [CVE-2026-6753][CVE-2026-6754][CVE-2026-6757][CVE-2026-6759][CVE-2026-6761] [CVE-2026-6762][…

Jun 15, 2026
High max 8.8

ELSA-2026-19225 4 CVEs 1 exploited

Important: kernel security update (Oracle Linux 9)

[5.14.0-687.5.3] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…

Jun 12, 2026
High max 9.8

ELSA-2026-50299 8 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.356.4.1] - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463669] [5.4.17-2136.356.4] - tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147] - tap: free page on error…

Jun 3, 2026
High max 9.8

ELSA-2026-50294 7 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-321.202.5] - Revert 'ip6_tunnel: Fix usage of skb_vlan_inet_prepare()' (Harshit Mogalapalli) [Orabug: 39476647] - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463672] [5.15.0-321.202.4] - tun: free page…

Jun 3, 2026
High max 9.8

ELSA-2026-50293 13 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-203.76.7.1] - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39474418] [6.12.0-203.76.7] - tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39456024] - tap: free page on error pat…

Jun 2, 2026
High max 7.8

ELSA-2026-50288 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update: Fragnesia (Oracle Linux 7)

[5.4.17-2136.355.3.4] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39420568] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39420568]

May 25, 2026
High max 7.8

ELSA-2026-50287 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update: Fragnesia (Oracle Linux 8)

[5.15.0-320.202.8.5] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39420565] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39420565]

May 25, 2026
High max 7.8

ELSA-2026-50286 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update: Fragnesia (Oracle Linux 9)

[6.12.0-202.76.4.4] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39420559] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39420559]

May 25, 2026
High max 7.8

ELSA-2026-19666 2 CVEs 1 exploited

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.125.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

May 21, 2026
High max 8.8

ELSA-2026-50275 5 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-318.199.3.6] - xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman) [Orabug: 39368252] {CVE-2026-43284} - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39368252] {CVE-2026-43284} - x86/CPU/AMD: Add a fix for AMD…

May 18, 2026
High max 9.8

ELSA-2026-15892 26 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[140.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.10.0] - Add OpenELA debranding [140.10.0-1] - Update to 140.10.0 ESR

May 11, 2026
High max 8.8

ELSA-2026-50262 9 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.355.3.1] - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39344527] {CVE-2026-43284} - x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39344576] {CVE-2025-54518} [5.4.17-2136.355.3] - crypto: a…

May 10, 2026
High max 9.8

ELSA-2026-50261 52 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-320.202.8.2] - xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman) [Orabug: 39344515] {CVE-2026-43284} - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39344515] {CVE-2026-43284} [5.15.0-320.202.8.1] - x86/CPU/A…

May 10, 2026
High max 9.8

ELSA-2026-50260 15 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

May 10, 2026
High max 9.8

ELSA-2026-13577 6 CVEs 1 exploited

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.123.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

May 5, 2026
High max 9.8

ELSA-2026-13537 26 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[140.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.10.0] - Add OpenELA debranding [140.10.0-1] - Update to 140.10.0 ESR

May 5, 2026
High max 9.8

ELSA-2026-13565 4 CVEs 1 exploited

Important: kernel security update (Oracle Linux 9)

[5.14.0-611.54.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

May 5, 2026
High max 9.8

ELSA-2026-13566 4 CVEs 1 exploited

Important: kernel security update (Oracle Linux 10)

[6.12.0-124.55.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

May 5, 2026
High max 7.8

ELSA-2026-50255 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update: Copy Fail (Oracle Linux 7)

[5.4.17-2136.354.4.2] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39292250] - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39292250] - crypto: authencesn - Fix src offset w…

May 1, 2026
High max 7.8

ELSA-2026-50253 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update: Copy Fail (Oracle Linux 8)

[5.15.0-319.201.4.4] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39291961] - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39291961] - crypto: authencesn - Fix src offset wh…

May 1, 2026
High max 7.8

ELSA-2026-50254 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update: Copy Fail (Oracle Linux 9)

[6.12.0-201.74.2.2] - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39292190] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39292190] - crypto: authencesn - Do not place hiseq …

May 1, 2026
High max 9.8

ELSA-2026-10766 26 CVEs 1 exploited

Important: firefox security update (Oracle Linux 8)

[140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.10.0-1] - Update to 140.10.0 ESR

Apr 27, 2026
High max 9.8

ELSA-2026-10757 26 CVEs 1 exploited

Important: firefox security update (Oracle Linux 9)

[140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

Apr 27, 2026
High max 9.8

ELSA-2026-10767 26 CVEs 1 exploited

Important: firefox security update (Oracle Linux 10)

[140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.10.0-1] - Update to 140.10.0 ESR

Apr 27, 2026
High max 9.8

ELSA-2026-50100 30 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.352.5] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38879907] {CVE-2025-40022} [5.4.17-2136.352.4] - arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner) [Orabug: 38821197] [5.4.17-2136.3…

Feb 7, 2026
High max 7.8

ELSA-2026-50061 3 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.351.3.2] - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38855323] {CVE-2025-40280} - tipc: simplify the finalize work queue (Xin Long) [Orabug: 38855323] - vsock: Ignore signal/timeout on connect() if already e…

Jan 19, 2026
High max 8.8

ELSA-2025-23663 6 CVEs 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.50.4-1] - Update to 2.50.4

Dec 18, 2025
High max 8.8

ELSA-2025-23700 6 CVEs 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.50.4-1] - Update to 2.50.4

Dec 18, 2025
High max 9.8

ELSA-2025-28048 79 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-315.196.5.1] - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso) [Orabug: 38744086] {CVE-2025-38678} - Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha) [Orabug: 38744084] - rtc: expose RTC_FEAT…

Dec 12, 2025
High max 8.8

ELSA-2025-22789 18 CVEs 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.50.3-1] - Update to 2.50.3

Dec 8, 2025
High max 8.8

ELSA-2025-22790 18 CVEs 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.50.3-1] - Update to 2.50.3

Dec 8, 2025
High max 9.8

ELSA-2025-25757 121 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-314.193.5.3] - Revert 'cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry' (Samasth Norway Ananda) [Orabug: 38633525] [5.15.0-314.193.5.2] - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38607608] {CVE-2025-39973} - i40e: …

Nov 10, 2025
High max 9.8

ELSA-2025-20721 2 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-313.189.5.2] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38575798] {CVE-2025-38724} - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38575792] - crypto: af_alg -…

Oct 24, 2025