Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELBA-2026-39332

Опубликовано: 16 июл. 2026
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELBA-2026-39332: kernel bug fix and enhancement update (NA)

[5.14.0-687.26.1]

  • Disable UKI signing [Orabug: 36571828]
  • Update Oracle Linux certificates (Kevin Lyons)
  • Disable signing for aarch64 (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
  • Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  • Add Oracle Linux IMA certificates
  • Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.26.1]

  • xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

kernel-cross-headers

5.14.0-687.26.1.el9_8

kernel-tools-libs-devel

5.14.0-687.26.1.el9_8

libperf

5.14.0-687.26.1.el9_8

kernel-tools

5.14.0-687.26.1.el9_8

kernel-tools-libs

5.14.0-687.26.1.el9_8

kernel-headers

5.14.0-687.26.1.el9_8

perf

5.14.0-687.26.1.el9_8

python3-perf

5.14.0-687.26.1.el9_8

rtla

5.14.0-687.26.1.el9_8

rv

5.14.0-687.26.1.el9_8

Oracle Linux x86_64

kernel

5.14.0-687.26.1.el9_8

kernel-abi-stablelists

5.14.0-687.26.1.el9_8

kernel-core

5.14.0-687.26.1.el9_8

kernel-debug

5.14.0-687.26.1.el9_8

kernel-debug-core

5.14.0-687.26.1.el9_8

kernel-debug-modules

5.14.0-687.26.1.el9_8

kernel-debug-modules-core

5.14.0-687.26.1.el9_8

kernel-debug-modules-extra

5.14.0-687.26.1.el9_8

kernel-debug-uki-virt

5.14.0-687.26.1.el9_8

kernel-modules

5.14.0-687.26.1.el9_8

kernel-modules-core

5.14.0-687.26.1.el9_8

kernel-modules-extra

5.14.0-687.26.1.el9_8

kernel-tools

5.14.0-687.26.1.el9_8

kernel-tools-libs

5.14.0-687.26.1.el9_8

kernel-uki-virt

5.14.0-687.26.1.el9_8

kernel-uki-virt-addons

5.14.0-687.26.1.el9_8

kernel-debug-devel

5.14.0-687.26.1.el9_8

kernel-debug-devel-matched

5.14.0-687.26.1.el9_8

kernel-devel

5.14.0-687.26.1.el9_8

kernel-devel-matched

5.14.0-687.26.1.el9_8

kernel-doc

5.14.0-687.26.1.el9_8

kernel-headers

5.14.0-687.26.1.el9_8

perf

5.14.0-687.26.1.el9_8

python3-perf

5.14.0-687.26.1.el9_8

rtla

5.14.0-687.26.1.el9_8

rv

5.14.0-687.26.1.el9_8

kernel-cross-headers

5.14.0-687.26.1.el9_8

kernel-tools-libs-devel

5.14.0-687.26.1.el9_8

libperf

5.14.0-687.26.1.el9_8

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data fork mapping if the sequence counter changes across the ILOCK cycle.

CVSS3: 7.8
redhat
около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data fork mapping if the sequence counter changes across the ILOCK cycle.

CVSS3: 7.8
nvd
около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data fork mapping if the sequence counter changes across the ILOCK cycle.

CVSS3: 7.8
msrc
около 2 месяцев назад

xfs: resample the data fork mapping after cycling ILOCK

CVSS3: 7.8
debian
около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: x ...