{"cves":["CVE-2022-50073","CVE-2026-31504","CVE-2026-31533","CVE-2026-31657","CVE-2026-31669"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[5.15.0-321.202.5.2]\n- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)  [Orabug: 39543209]  {CVE-2026-31533}\n- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39543208]  {CVE-2026-31504}\n- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb-dev is null (Cezar Bulinaru)  [Orabug: 39543201]  {CVE-2022-50073}\n- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)  [Orabug: 39543200]  {CVE-2026-31669}\n- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39543197]  {CVE-2026-31657}\n- arm64: dts: pensando: drop elba penfw firmware node (Tom Saeger)  [Orabug: 39543196]","id":"ELSA-2026-50318","ovalId":"oval:com.oracle.elsa:def:202650318","source":"oracle_linux","title":"ELSA-2026-50318: Unbreakable Enterprise kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-50318.html"}