Описание
ELSA-2026-50319: Unbreakable Enterprise kernel security update (IMPORTANT)
[6.12.0-203.76.7.5]
- uek-rpm: avoid final module link in early FIPS symvers pass (Sherry Yang) [Orabug: 39563330]
- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso) [Orabug: 39562729] {CVE-2026-23272}
[6.12.0-203.76.7.4]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [Orabug: 39556377] {CVE-2026-31419}
- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [Orabug: 39556391] {CVE-2026-43074}
- batman-adv: hold claim backbone gateways by reference (Haoze Xie) [Orabug: 39556388] {CVE-2026-31657}
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan) [Orabug: 39556386] {CVE-2026-31533}
- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [Orabug: 39556381] {CVE-2026-31669}
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [Orabug: 39556380] {CVE-2026-31504}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39556379] {CVE-2026-43499}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [Orabug: 39556375] {CVE-2026-46116}
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [Orabug: 39556341] {CVE-2026-43037}
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
kernel-uek
6.12.0-203.76.7.5.el10uek
kernel-uek-core
6.12.0-203.76.7.5.el10uek
kernel-uek-debug
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-core
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-devel
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-core
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-deprecated
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-desktop
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-extra
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-usb
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-wireless
6.12.0-203.76.7.5.el10uek
kernel-uek-devel
6.12.0-203.76.7.5.el10uek
kernel-uek-doc
6.12.0-203.76.7.5.el10uek
kernel-uek-modules
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-core
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-deprecated
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-desktop
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-extra
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-extra-netfilter
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-usb
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-wireless
6.12.0-203.76.7.5.el10uek
kernel-uek-tools
6.12.0-203.76.7.5.el10uek
kernel-uek64k
6.12.0-203.76.7.5.el10uek
kernel-uek64k-core
6.12.0-203.76.7.5.el10uek
kernel-uek64k-devel
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-core
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-deprecated
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-desktop
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-extra
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-extra-netfilter
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-usb
6.12.0-203.76.7.5.el10uek
kernel-uek64k-modules-wireless
6.12.0-203.76.7.5.el10uek
Oracle Linux x86_64
kernel-uek
6.12.0-203.76.7.5.el10uek
kernel-uek-core
6.12.0-203.76.7.5.el10uek
kernel-uek-debug
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-core
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-devel
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-core
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-deprecated
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-desktop
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-extra
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-usb
6.12.0-203.76.7.5.el10uek
kernel-uek-debug-modules-wireless
6.12.0-203.76.7.5.el10uek
kernel-uek-devel
6.12.0-203.76.7.5.el10uek
kernel-uek-doc
6.12.0-203.76.7.5.el10uek
kernel-uek-modules
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-core
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-deprecated
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-desktop
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-extra
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-extra-netfilter
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-usb
6.12.0-203.76.7.5.el10uek
kernel-uek-modules-wireless
6.12.0-203.76.7.5.el10uek
kernel-uek-tools
6.12.0-203.76.7.5.el10uek
Oracle Linux 9
Oracle Linux aarch64
kernel-uek
6.12.0-203.76.7.5.el9uek
kernel-uek-core
6.12.0-203.76.7.5.el9uek
kernel-uek-debug
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-core
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-devel
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-core
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-deprecated
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-desktop
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-extra
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-usb
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-wireless
6.12.0-203.76.7.5.el9uek
kernel-uek-devel
6.12.0-203.76.7.5.el9uek
kernel-uek-doc
6.12.0-203.76.7.5.el9uek
kernel-uek-modules
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-core
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-deprecated
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-desktop
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-extra
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-extra-netfilter
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-usb
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-wireless
6.12.0-203.76.7.5.el9uek
kernel-uek-tools
6.12.0-203.76.7.5.el9uek
kernel-uek64k
6.12.0-203.76.7.5.el9uek
kernel-uek64k-core
6.12.0-203.76.7.5.el9uek
kernel-uek64k-devel
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-core
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-deprecated
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-desktop
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-extra
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-extra-netfilter
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-usb
6.12.0-203.76.7.5.el9uek
kernel-uek64k-modules-wireless
6.12.0-203.76.7.5.el9uek
Oracle Linux x86_64
kernel-uek
6.12.0-203.76.7.5.el9uek
kernel-uek-core
6.12.0-203.76.7.5.el9uek
kernel-uek-debug
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-core
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-devel
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-core
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-deprecated
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-desktop
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-extra
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-extra-netfilter
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-usb
6.12.0-203.76.7.5.el9uek
kernel-uek-debug-modules-wireless
6.12.0-203.76.7.5.el9uek
kernel-uek-devel
6.12.0-203.76.7.5.el9uek
kernel-uek-doc
6.12.0-203.76.7.5.el9uek
kernel-uek-modules
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-core
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-deprecated
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-desktop
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-extra
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-extra-netfilter
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-usb
6.12.0-203.76.7.5.el9uek
kernel-uek-modules-wireless
6.12.0-203.76.7.5.el9uek
kernel-uek-tools
6.12.0-203.76.7.5.el9uek
Ссылки на источники
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the set is full, a new element gets published then removed without waiting for the RCU grace period, while RCU reader can be walking over it already. To address this issue, add the element transaction even if set is full, but toggle the set_full flag to report -ENFILE so the abort path safely unwinds the set to its previous state. As for element updates, decrement set->nelems to restore it. A simpler fix is to call synchronize_rcu() in the error path. However, with a large batch adding elements to already maxed-out set, this could cause noticeable slowdown of such batches.
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the set is full, a new element gets published then removed without waiting for the RCU grace period, while RCU reader can be walking over it already. To address this issue, add the element transaction even if set is full, but toggle the set_full flag to report -ENFILE so the abort path safely unwinds the set to its previous state. As for element updates, decrement set->nelems to restore it. A simpler fix is to call synchronize_rcu() in the error path. However, with a large batch adding elements to already maxed-out set, this could cause noticeable slowdown of such batches.
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the set is full, a new element gets published then removed without waiting for the RCU grace period, while RCU reader can be walking over it already. To address this issue, add the element transaction even if set is full, but toggle the set_full flag to report -ENFILE so the abort path safely unwinds the set to its previous state. As for element updates, decrement set->nelems to restore it. A simpler fix is to call synchronize_rcu() in the error path. However, with a large batch adding elements to already maxed-out set, this could cause noticeable slowdown of such batches.
netfilter: nf_tables: unconditionally bump set->nelems before insertion
In the Linux kernel, the following vulnerability has been resolved: n ...