elsa-2026-50319

oracle_linux
Description

[6.12.0-203.76.7.5] - uek-rpm: avoid final module link in early FIPS symvers pass (Sherry Yang) [Orabug: 39563330] - netfilter: nf_tables: unconditionally bump set-nelems before insertion (Pablo Neira Ayuso) [Orabug: 39562729] {CVE-2026-23272} [6.12.0-203.76.7.4] - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [Orabug: 39556377] {CVE-2026-31419} - eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [Orabug: 39556391] {CVE-2026-43074} - batman-adv: hold claim backbone gateways by reference (Haoze Xie) [Orabug: 39556388] {CVE-2026-31657} - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan) [Orabug: 39556386] {CVE-2026-31533} - mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [Orabug: 39556381] {CVE-2026-31669} - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [Orabug: 39556380] {CVE-2026-31504} - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39556379] {CVE-2026-43499} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [Orabug: 39556375] {CVE-2026-46116} - ip6_tunnel: clear skb2-cb[] in ip4ip6_err() (Eric Dumazet) [Orabug: 39556341] {CVE-2026-43037}

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-23272",
    "CVE-2026-31419",
    "CVE-2026-31504",
    "CVE-2026-31533",
    "CVE-2026-31657",
    "CVE-2026-31669",
    "CVE-2026-43037",
    "CVE-2026-43074",
    "CVE-2026-43499",
    "CVE-2026-46116"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[6.12.0-203.76.7.5]\n- uek-rpm: avoid final module link in early FIPS symvers pass (Sherry Yang)  [Orabug: 39563330] \n- netfilter: nf_tables: unconditionally bump set-nelems before insertion (Pablo Neira Ayuso)  [Orabug: 39562729]  {CVE-2026-23272}\n\n[6.12.0-203.76.7.4]\n- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei)  [Orabug: 39556377]  {CVE-2026-31419}\n- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini)  [Orabug: 39556391]  {CVE-2026-43074}\n- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39556388]  {CVE-2026-31657}\n- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)  [Orabug: 39556386]  {CVE-2026-31533}\n- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)  [Orabug: 39556381]  {CVE-2026-31669}\n- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39556380]  {CVE-2026-31504}\n- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39556379]  {CVE-2026-43499}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek)  [Orabug: 39556375]  {CVE-2026-46116}\n- ip6_tunnel: clear skb2-cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39556341]  {CVE-2026-43037}",
  "id": "ELSA-2026-50319",
  "ovalId": "oval:com.oracle.elsa:def:202650319",
  "source": "oracle_linux",
  "title": "ELSA-2026-50319: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-50319.html"
}
View JSON API Download JSON