elsa-2026-50262

{
  "cves": [
    "CVE-2025-54518",
    "CVE-2025-71120",
    "CVE-2026-23074",
    "CVE-2026-31431",
    "CVE-2026-31628",
    "CVE-2026-43033",
    "CVE-2026-43077",
    "CVE-2026-43078",
    "CVE-2026-43284"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[5.4.17-2136.355.3.1]\n- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39344527]  {CVE-2026-43284}\n- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39344576]  {CVE-2025-54518}\n\n[5.4.17-2136.355.3]\n- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250687,39331106] {CVE-2026-43077}\n- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250687,39331111] {CVE-2026-43078}\n- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250687]\n- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250687,39300911] {CVE-2026-43033}\n- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687]\n- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250687]\n- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250687,39283868,39292250] {CVE-2026-31431}\n- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687] {CVE-2026-31431}\n- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250687]\n- crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [Orabug: 39250687]\n\n[5.4.17-2136.355.2]\n- Revert 'rds: Drop rds conn in connect worker if not in down state.' (Alok Tiwari) [Orabug: 39253770]\n- x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant) [Orabug: 39241225,39273723] {CVE-2026-31628}\n- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852342] {CVE-2025-71120}\n\n[5.4.17-2136.355.1]\n- net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [Orabug: 38930950] {CVE-2026-23074}\n\n[5.4.17-2136.354.4]\n- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001}\n- macvlan: Use 'hash' iterators to simplify code (Christophe Jaillet) [Orabug: 38887731] {CVE-2026-23001}\n- macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731] {CVE-2026-23001}\n- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510,39188399] {CVE-2026-23209,CVE-2026-23273}\n- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209}\n\n[5.4.17-2136.354.3]\n- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 39064937] {CVE-2025-68814}\n- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39045035]\n\n[5.4.17-2136.354.2]\n- ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38916908]\n- jbd2: store more accurate errno in superblock (Wengang Wang) [Orabug: 38916908]\n- ext4: save the error code which triggered an (Wengang Wang) [Orabug: 38916908]\n\n[5.4.17-2136.354.1]\n- genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask (Imran Khan) [Orabug: 39001911]\n- rds: Add state field to RDS trace logs. (Rohit Nair) [Orabug: 38870347]\n\n[5.4.17-2136.353.3]\n- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 38934000]\n- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 38934000,39004270] {CVE-2025-40256}\n- Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca) [Orabug: 38934000]\n- Revert 'IB/mlx5: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520]\n- Revert 'IB/core: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520]\n- Revert 'ib/core: add SET_DEVICE_OP call for clear_hw_stats()' (Sharath Srinivasan) [Orabug: 38923520]\n- fs: proc: inode: delay put_pid() by RCU (Stephen Brennan) [Orabug: 38766812]\n\n[5.4.17-2136.353.2]\n- Revert 'perf/x86: Always store regs-ip in perf_callchain_kernel()' (Jiri Olsa) [Orabug: 38893604]\n- xfrm: delete x-tunnel as we delete x (Sabrina Dubroca) [Orabug: 38730493,39016501] {CVE-2025-40215}",
  "id": "ELSA-2026-50262",
  "ovalId": "oval:com.oracle.elsa:def:202650262",
  "source": "oracle_linux",
  "title": "ELSA-2026-50262: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-50262.html"
}