{
  "cves": [
    "CVE-2022-50073",
    "CVE-2026-31504",
    "CVE-2026-31533",
    "CVE-2026-31657",
    "CVE-2026-31669"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[5.15.0-321.202.5.2]\n- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)  [Orabug: 39543209]  {CVE-2026-31533}\n- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39543208]  {CVE-2026-31504}\n- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb-dev is null (Cezar Bulinaru)  [Orabug: 39543201]  {CVE-2022-50073}\n- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)  [Orabug: 39543200]  {CVE-2026-31669}\n- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39543197]  {CVE-2026-31657}\n- arm64: dts: pensando: drop elba penfw firmware node (Tom Saeger)  [Orabug: 39543196]",
  "id": "ELSA-2026-50318",
  "ovalId": "oval:com.oracle.elsa:def:202650318",
  "source": "oracle_linux",
  "title": "ELSA-2026-50318: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-50318.html"
}