Описание
ELSA-2026-500135: Unbreakable Enterprise kernel security update (IMPORTANT)
[6.12.0-204.92.4.4.3]
- KVM: x86: Check for invalid/obsolete root after making MMU pages available (Sean Christopherson) [Orabug: 39832878] {CVE-2026-64561}
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39832867] {CVE-2026-68480}
[6.12.0-204.92.4.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug: 39819149]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [Orabug: 39819142] {CVE-2026-64531}
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
kernel-uek
6.12.0-204.92.4.4.3.el10uek
kernel-uek-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-devel
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-deprecated
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-desktop
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-extra
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-usb
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-wireless
6.12.0-204.92.4.4.3.el10uek
kernel-uek-devel
6.12.0-204.92.4.4.3.el10uek
kernel-uek-doc
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-deprecated
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-desktop
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-extra
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-extra-netfilter
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-usb
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-wireless
6.12.0-204.92.4.4.3.el10uek
kernel-uek-tools
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-devel
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-deprecated
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-desktop
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-extra
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-extra-netfilter
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-usb
6.12.0-204.92.4.4.3.el10uek
kernel-uek64k-modules-wireless
6.12.0-204.92.4.4.3.el10uek
Oracle Linux x86_64
kernel-uek
6.12.0-204.92.4.4.3.el10uek
kernel-uek-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-devel
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-deprecated
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-desktop
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-extra
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-usb
6.12.0-204.92.4.4.3.el10uek
kernel-uek-debug-modules-wireless
6.12.0-204.92.4.4.3.el10uek
kernel-uek-devel
6.12.0-204.92.4.4.3.el10uek
kernel-uek-doc
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-core
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-deprecated
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-desktop
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-extra
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-extra-netfilter
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-usb
6.12.0-204.92.4.4.3.el10uek
kernel-uek-modules-wireless
6.12.0-204.92.4.4.3.el10uek
kernel-uek-tools
6.12.0-204.92.4.4.3.el10uek
Oracle Linux 9
Oracle Linux aarch64
kernel-uek
6.12.0-204.92.4.4.3.el9uek
kernel-uek-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-devel
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-deprecated
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-desktop
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-extra
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-usb
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-wireless
6.12.0-204.92.4.4.3.el9uek
kernel-uek-devel
6.12.0-204.92.4.4.3.el9uek
kernel-uek-doc
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-deprecated
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-desktop
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-extra
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-extra-netfilter
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-usb
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-wireless
6.12.0-204.92.4.4.3.el9uek
kernel-uek-tools
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-devel
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-deprecated
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-desktop
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-extra
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-extra-netfilter
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-usb
6.12.0-204.92.4.4.3.el9uek
kernel-uek64k-modules-wireless
6.12.0-204.92.4.4.3.el9uek
Oracle Linux x86_64
kernel-uek
6.12.0-204.92.4.4.3.el9uek
kernel-uek-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-devel
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-deprecated
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-desktop
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-extra
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-usb
6.12.0-204.92.4.4.3.el9uek
kernel-uek-debug-modules-wireless
6.12.0-204.92.4.4.3.el9uek
kernel-uek-devel
6.12.0-204.92.4.4.3.el9uek
kernel-uek-doc
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-core
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-deprecated
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-desktop
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-extra
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-extra-netfilter
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-usb
6.12.0-204.92.4.4.3.el9uek
kernel-uek-modules-wireless
6.12.0-204.92.4.4.3.el9uek
kernel-uek-tools
6.12.0-204.92.4.4.3.el9uek
Связанные CVE
Связанные уязвимости
ELSA-2026-500137: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-500136: Unbreakable Enterprise kernel security update (IMPORTANT)
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE, D...
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE, D...
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE,