Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-500135

Опубликовано: 06 авг. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10
Платформа: Oracle Linux 9

Описание

ELSA-2026-500135: Unbreakable Enterprise kernel security update (IMPORTANT)

[6.12.0-204.92.4.4.3]

  • KVM: x86: Check for invalid/obsolete root after making MMU pages available (Sean Christopherson) [Orabug: 39832878] {CVE-2026-64561}
  • x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39832867] {CVE-2026-68480}

[6.12.0-204.92.4.4.2]

  • net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug: 39819149]
  • net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [Orabug: 39819142] {CVE-2026-64531}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-uek

6.12.0-204.92.4.4.3.el10uek

kernel-uek-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-devel

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-desktop

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-extra

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-usb

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-wireless

6.12.0-204.92.4.4.3.el10uek

kernel-uek-devel

6.12.0-204.92.4.4.3.el10uek

kernel-uek-doc

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-deprecated

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-desktop

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-extra

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-usb

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-wireless

6.12.0-204.92.4.4.3.el10uek

kernel-uek-tools

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-devel

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-deprecated

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-desktop

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-extra

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-extra-netfilter

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-usb

6.12.0-204.92.4.4.3.el10uek

kernel-uek64k-modules-wireless

6.12.0-204.92.4.4.3.el10uek

Oracle Linux x86_64

kernel-uek

6.12.0-204.92.4.4.3.el10uek

kernel-uek-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-devel

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-desktop

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-extra

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-usb

6.12.0-204.92.4.4.3.el10uek

kernel-uek-debug-modules-wireless

6.12.0-204.92.4.4.3.el10uek

kernel-uek-devel

6.12.0-204.92.4.4.3.el10uek

kernel-uek-doc

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-core

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-deprecated

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-desktop

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-extra

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-usb

6.12.0-204.92.4.4.3.el10uek

kernel-uek-modules-wireless

6.12.0-204.92.4.4.3.el10uek

kernel-uek-tools

6.12.0-204.92.4.4.3.el10uek

Oracle Linux 9

Oracle Linux aarch64

kernel-uek

6.12.0-204.92.4.4.3.el9uek

kernel-uek-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-devel

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-desktop

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-extra

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-usb

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-wireless

6.12.0-204.92.4.4.3.el9uek

kernel-uek-devel

6.12.0-204.92.4.4.3.el9uek

kernel-uek-doc

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-deprecated

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-desktop

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-extra

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-usb

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-wireless

6.12.0-204.92.4.4.3.el9uek

kernel-uek-tools

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-devel

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-deprecated

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-desktop

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-extra

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-extra-netfilter

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-usb

6.12.0-204.92.4.4.3.el9uek

kernel-uek64k-modules-wireless

6.12.0-204.92.4.4.3.el9uek

Oracle Linux x86_64

kernel-uek

6.12.0-204.92.4.4.3.el9uek

kernel-uek-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-devel

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-desktop

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-extra

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-usb

6.12.0-204.92.4.4.3.el9uek

kernel-uek-debug-modules-wireless

6.12.0-204.92.4.4.3.el9uek

kernel-uek-devel

6.12.0-204.92.4.4.3.el9uek

kernel-uek-doc

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-core

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-deprecated

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-desktop

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-extra

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-usb

6.12.0-204.92.4.4.3.el9uek

kernel-uek-modules-wireless

6.12.0-204.92.4.4.3.el9uek

kernel-uek-tools

6.12.0-204.92.4.4.3.el9uek

Связанные уязвимости

oracle-oval
4 дня назад

ELSA-2026-500137: Unbreakable Enterprise kernel security update (IMPORTANT)

oracle-oval
5 дней назад

ELSA-2026-500136: Unbreakable Enterprise kernel security update (IMPORTANT)

CVSS3: 7.8
ubuntu
13 дней назад

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE, D...

CVSS3: 7.8
redhat
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE, D...

CVSS3: 7.8
nvd
13 дней назад

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE,