{
  "cves": [
    "CVE-2025-54518",
    "CVE-2026-23193",
    "CVE-2026-23216",
    "CVE-2026-31431",
    "CVE-2026-43284"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[5.15.0-318.199.3.6]\n- xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman)  [Orabug: 39368252]  {CVE-2026-43284}\n- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39368252]  {CVE-2026-43284}\n- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39368491]  {CVE-2025-54518}\n\n[5.15.0-318.199.3.5]\n- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu)  [Orabug: 39312618]\n- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu)  [Orabug: 39312618]\n- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu)  [Orabug: 39312618]\n- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu)  [Orabug: 39312618]\n- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers)  [Orabug: 39312618]\n- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le)  [Orabug: 39312618]\n- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu)  [Orabug: 39312618]  {CVE-2026-31431}\n- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers)  [Orabug: 39312618]\n- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers)  [Orabug: 39312618]\n- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi)  [Orabug: 39312608]  {CVE-2026-23216}\n- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi)  [Orabug: 39312602]  {CVE-2026-23193}\n\n[5.15.0-318.199.3.4]\n- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson)  [Orabug: 39150890]\n- vfio: Adapt to upstream uAPI for VFIO_PRECOPY_INFO_REINIT (Maciej S. Szmigiero)  [Orabug: 39150887]\n\n[5.15.0-318.199.3.3]\n- vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Yishai Hadas)  [Orabug: 39110129]\n- vfio/mlx5: consider inflight SAVE during PRE_COPY (Yishai Hadas)  [Orabug: 39110129]\n- net/mlx5: Add IFC bits for migration state (Yishai Hadas)  [Orabug: 39110129]\n- vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Yishai Hadas)  [Orabug: 39110129]\n- vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Yishai Hadas)  [Orabug: 39110129]\n- vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Yishai Hadas)  [Orabug: 39110129]",
  "id": "ELSA-2026-50275",
  "ovalId": "oval:com.oracle.elsa:def:202650275",
  "source": "oracle_linux",
  "title": "ELSA-2026-50275: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-50275.html"
}