{"cves":["CVE-2026-23272","CVE-2026-31419","CVE-2026-31504","CVE-2026-31533","CVE-2026-31657","CVE-2026-31669","CVE-2026-43037","CVE-2026-43074","CVE-2026-43499","CVE-2026-46116"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[6.12.0-203.76.7.5]\n- uek-rpm: avoid final module link in early FIPS symvers pass (Sherry Yang)  [Orabug: 39563330] \n- netfilter: nf_tables: unconditionally bump set-nelems before insertion (Pablo Neira Ayuso)  [Orabug: 39562729]  {CVE-2026-23272}\n\n[6.12.0-203.76.7.4]\n- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei)  [Orabug: 39556377]  {CVE-2026-31419}\n- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini)  [Orabug: 39556391]  {CVE-2026-43074}\n- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39556388]  {CVE-2026-31657}\n- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)  [Orabug: 39556386]  {CVE-2026-31533}\n- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)  [Orabug: 39556381]  {CVE-2026-31669}\n- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39556380]  {CVE-2026-31504}\n- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39556379]  {CVE-2026-43499}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek)  [Orabug: 39556375]  {CVE-2026-46116}\n- ip6_tunnel: clear skb2-cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39556341]  {CVE-2026-43037}","id":"ELSA-2026-50319","ovalId":"oval:com.oracle.elsa:def:202650319","source":"oracle_linux","title":"ELSA-2026-50319: Unbreakable Enterprise kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-50319.html"}