Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-500399

Опубликовано: 16 окт. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10
Платформа: Oracle Linux 9

Описание

ELSA-2026-500399: Unbreakable Enterprise kernel security update (IMPORTANT)

[6.12.0-207.111.5.4]

  • ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet) [Orabug: 40167669] {CVE-2026-98432}
  • ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin) [Orabug: 40167684] {CVE-2026-99999}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-uek

6.12.0-207.111.5.4.el10uek

kernel-uek-core

6.12.0-207.111.5.4.el10uek

kernel-uek-debug

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-core

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-devel

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-core

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-desktop

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-extra

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-usb

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-wireless

6.12.0-207.111.5.4.el10uek

kernel-uek-devel

6.12.0-207.111.5.4.el10uek

kernel-uek-doc

6.12.0-207.111.5.4.el10uek

kernel-uek-modules

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-core

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-deprecated

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-desktop

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-extra

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-usb

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-wireless

6.12.0-207.111.5.4.el10uek

kernel-uek-tools

6.12.0-207.111.5.4.el10uek

kernel-uek64k

6.12.0-207.111.5.4.el10uek

kernel-uek64k-core

6.12.0-207.111.5.4.el10uek

kernel-uek64k-devel

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-core

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-deprecated

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-desktop

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-extra

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-extra-netfilter

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-usb

6.12.0-207.111.5.4.el10uek

kernel-uek64k-modules-wireless

6.12.0-207.111.5.4.el10uek

Oracle Linux x86_64

kernel-uek

6.12.0-207.111.5.4.el10uek

kernel-uek-core

6.12.0-207.111.5.4.el10uek

kernel-uek-debug

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-core

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-devel

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-core

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-desktop

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-extra

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-usb

6.12.0-207.111.5.4.el10uek

kernel-uek-debug-modules-wireless

6.12.0-207.111.5.4.el10uek

kernel-uek-devel

6.12.0-207.111.5.4.el10uek

kernel-uek-doc

6.12.0-207.111.5.4.el10uek

kernel-uek-modules

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-core

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-deprecated

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-desktop

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-extra

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-usb

6.12.0-207.111.5.4.el10uek

kernel-uek-modules-wireless

6.12.0-207.111.5.4.el10uek

kernel-uek-tools

6.12.0-207.111.5.4.el10uek

Oracle Linux 9

Oracle Linux aarch64

kernel-uek

6.12.0-207.111.5.4.el9uek

kernel-uek-core

6.12.0-207.111.5.4.el9uek

kernel-uek-debug

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-core

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-devel

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-core

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-desktop

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-extra

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-usb

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-wireless

6.12.0-207.111.5.4.el9uek

kernel-uek-devel

6.12.0-207.111.5.4.el9uek

kernel-uek-doc

6.12.0-207.111.5.4.el9uek

kernel-uek-modules

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-core

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-deprecated

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-desktop

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-extra

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-usb

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-wireless

6.12.0-207.111.5.4.el9uek

kernel-uek-tools

6.12.0-207.111.5.4.el9uek

kernel-uek64k

6.12.0-207.111.5.4.el9uek

kernel-uek64k-core

6.12.0-207.111.5.4.el9uek

kernel-uek64k-devel

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-core

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-deprecated

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-desktop

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-extra

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-extra-netfilter

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-usb

6.12.0-207.111.5.4.el9uek

kernel-uek64k-modules-wireless

6.12.0-207.111.5.4.el9uek

Oracle Linux x86_64

kernel-uek

6.12.0-207.111.5.4.el9uek

kernel-uek-core

6.12.0-207.111.5.4.el9uek

kernel-uek-debug

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-core

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-devel

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-core

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-desktop

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-extra

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-usb

6.12.0-207.111.5.4.el9uek

kernel-uek-debug-modules-wireless

6.12.0-207.111.5.4.el9uek

kernel-uek-devel

6.12.0-207.111.5.4.el9uek

kernel-uek-doc

6.12.0-207.111.5.4.el9uek

kernel-uek-modules

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-core

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-deprecated

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-desktop

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-extra

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-usb

6.12.0-207.111.5.4.el9uek

kernel-uek-modules-wireless

6.12.0-207.111.5.4.el9uek

kernel-uek-tools

6.12.0-207.111.5.4.el9uek

Связанные CVE

CVE-2026-98432
CVE-2026-99999

Ссылки на источники

Связанные уязвимости

oracle-oval логотип

ELSA-2026-500398

oracle-oval
11 дней назад

ELSA-2026-500398: Unbreakable Enterprise kernel security update (IMPORTANT)

oracle-oval логотип

ELSA-2026-500397

oracle-oval
11 дней назад

ELSA-2026-500397: Unbreakable Enterprise kernel security update (IMPORTANT)

ubuntu логотип

CVE-2026-98432

CVSS3: 9.8
ubuntu
12 дней назад

[ipv4: free inet_opt and ireq_opt after an RCU grace period]

redhat логотип

CVE-2026-98432

CVSS3: 5.9
redhat
12 дней назад

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do no...

nvd логотип

CVE-2026-98432

CVSS3: 9.8
nvd
11 дней назад

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do