Описание
ELSA-2026-50286: Unbreakable Enterprise kernel security update: Fragnesia (IMPORTANT)
[6.12.0-202.76.4.4]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39420559] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39420559]
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
kernel-uek
6.12.0-202.76.4.4.el10uek
kernel-uek-core
6.12.0-202.76.4.4.el10uek
kernel-uek-debug
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-core
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-devel
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-core
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-deprecated
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-desktop
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-extra
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-usb
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-wireless
6.12.0-202.76.4.4.el10uek
kernel-uek-devel
6.12.0-202.76.4.4.el10uek
kernel-uek-doc
6.12.0-202.76.4.4.el10uek
kernel-uek-modules
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-core
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-deprecated
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-desktop
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-extra
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-extra-netfilter
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-usb
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-wireless
6.12.0-202.76.4.4.el10uek
kernel-uek-tools
6.12.0-202.76.4.4.el10uek
kernel-uek64k
6.12.0-202.76.4.4.el10uek
kernel-uek64k-core
6.12.0-202.76.4.4.el10uek
kernel-uek64k-devel
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-core
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-deprecated
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-desktop
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-extra
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-extra-netfilter
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-usb
6.12.0-202.76.4.4.el10uek
kernel-uek64k-modules-wireless
6.12.0-202.76.4.4.el10uek
Oracle Linux x86_64
kernel-uek
6.12.0-202.76.4.4.el10uek
kernel-uek-core
6.12.0-202.76.4.4.el10uek
kernel-uek-debug
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-core
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-devel
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-core
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-deprecated
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-desktop
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-extra
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-usb
6.12.0-202.76.4.4.el10uek
kernel-uek-debug-modules-wireless
6.12.0-202.76.4.4.el10uek
kernel-uek-devel
6.12.0-202.76.4.4.el10uek
kernel-uek-doc
6.12.0-202.76.4.4.el10uek
kernel-uek-modules
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-core
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-deprecated
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-desktop
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-extra
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-extra-netfilter
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-usb
6.12.0-202.76.4.4.el10uek
kernel-uek-modules-wireless
6.12.0-202.76.4.4.el10uek
kernel-uek-tools
6.12.0-202.76.4.4.el10uek
Oracle Linux 9
Oracle Linux aarch64
kernel-uek
6.12.0-202.76.4.4.el9uek
kernel-uek-core
6.12.0-202.76.4.4.el9uek
kernel-uek-debug
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-core
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-devel
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-core
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-deprecated
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-desktop
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-extra
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-usb
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-wireless
6.12.0-202.76.4.4.el9uek
kernel-uek-devel
6.12.0-202.76.4.4.el9uek
kernel-uek-doc
6.12.0-202.76.4.4.el9uek
kernel-uek-modules
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-core
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-deprecated
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-desktop
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-extra
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-extra-netfilter
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-usb
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-wireless
6.12.0-202.76.4.4.el9uek
kernel-uek-tools
6.12.0-202.76.4.4.el9uek
kernel-uek64k
6.12.0-202.76.4.4.el9uek
kernel-uek64k-core
6.12.0-202.76.4.4.el9uek
kernel-uek64k-devel
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-core
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-deprecated
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-desktop
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-extra
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-extra-netfilter
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-usb
6.12.0-202.76.4.4.el9uek
kernel-uek64k-modules-wireless
6.12.0-202.76.4.4.el9uek
Oracle Linux x86_64
kernel-uek
6.12.0-202.76.4.4.el9uek
kernel-uek-core
6.12.0-202.76.4.4.el9uek
kernel-uek-debug
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-core
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-devel
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-core
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-deprecated
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-desktop
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-extra
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-usb
6.12.0-202.76.4.4.el9uek
kernel-uek-debug-modules-wireless
6.12.0-202.76.4.4.el9uek
kernel-uek-devel
6.12.0-202.76.4.4.el9uek
kernel-uek-doc
6.12.0-202.76.4.4.el9uek
kernel-uek-modules
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-core
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-deprecated
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-desktop
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-extra
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-extra-netfilter
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-usb
6.12.0-202.76.4.4.el9uek
kernel-uek-modules-wireless
6.12.0-202.76.4.4.el9uek
kernel-uek-tools
6.12.0-202.76.4.4.el9uek
Связанные CVE
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.
net: skbuff: preserve shared-frag marker during coalescing
In the Linux kernel, the following vulnerability has been resolved: n ...