ELSA-2026-500630

ELSA-2026-500630 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-12

Description

[5.4.17-2136.361.4.2]
- net: restore refcount ordering for lockless socket access (Hyunwoo Kim) [Orabug: 40285708]
- inet: reject unhashed sockets during established lookups (Hyunwoo Kim) [Orabug: 40285708] {CVE-2026-99288}
- rcu: Add a hlist_nulls_unhashed_lockless() function (Paul E. McKenney) [Orabug: 40285708]

[5.4.17-2136.361.4.1]
- iommu/amd: Force device table to maximum size (Suravee Suthikulpanit) [Orabug: 40172712] {CVE-2024-21963}
- x86/microcode/AMD: Increase PATCH_MAX_SIZE for Family 1Ah (Saeed Mirzamohammadi) [Orabug: 40172712]

[5.4.17-2136.361.4]
- vhost-scsi: zero misaligned I/O bounce pages (Shubham Antil) [Orabug: 40193932]

[5.4.17-2136.361.3]
- KVM: x86: Use active memslots for the per-vCPU MMIO cache (Jinu Kim) [Orabug: 40180571,40201707] {CVE-2026-99082}
- drbd: fix 'LOGIC BUG' in drbd_al_begin_io_nonblock() (Lars Ellenberg) [Orabug: 39130967] {CVE-2026-23356}
- rds: cong: fix race while clearing rs_cong_mask (Anand Khoje) [Orabug: 39519861]
- hugetlbfs: hold trunc_rwsem during hugepage migration (Stephen Brennan) [Orabug: 39541934]
- ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin) [Orabug: 40165812,40167666] {CVE-2026-99999}
- netfilter: nfnetlink_queue: unbreak SCTP traffic (Antonio Ojea) [Orabug: 40165812]
- net: add inline function skb_csum_is_sctp (Xin Long) [Orabug: 40165812]
- ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet) [Orabug: 40165790,40167664] {CVE-2026-98432}
- vhost: reset the vring metadata cache on vring reconfiguration (Jun Yang) [Orabug: 39917526] {CVE-2026-74580}

[5.4.17-2136.361.2]
- ionic: serialize hardware timestamp Tx queue access (Joseph Dobosenski) [Orabug: 40061822]

[5.4.17-2136.361.1]
- net/mlx5: Set parent device before health polling (Manjunath Patil) [Orabug: 39208695]

[5.4.17-2136.360.3]
- IB/mlx4: delete allocated id_map_entry while sending REJ (Praveen Kumar Kannoju) [Orabug: 39999072]
- net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40020673,40036871] {CVE-2026-81000}
- xfrm: ah6: validate routing header segments_left (Asim Viladi Oglu Manizada) [Orabug: 39982188,40036875] {CVE-2026-80844}
- inet: frags: strip GSO state from fragments before reassembly (Xinyang Ge) [Orabug: 39972532] {CVE-2026-80590}
- sctp: prevent peer transport count overflow (Asim Viladi Oglu Manizada) [Orabug: 39886843,40036878] {CVE-2026-74469}
- pppoe: reload header pointer after dev_hard_header() (Asim Viladi Oglu Manizada) [Orabug: 39859408,40036877] {CVE-2026-68121}

[5.4.17-2136.360.2]
- Revert 'net/mlx5: Add poll-eq API to be used by ULP's' (Praveen Kumar Kannoju) [Orabug: 39764468]

[5.4.17-2136.360.1]
- x86/alternatives: Guard struct alt_instr kABI layout (Saeed Mirzamohammadi) [Orabug: 39860383]
- crypto: ecc - Fix carry overflow in vli multiplication (Anastasia Tishchenko) [Orabug: 39785911] {CVE-2026-64313}
- crypto: pcrypt - restore callback for non-parallel fallback (Ruijie Li) [Orabug: 39785907] {CVE-2026-64312}
- crypto: drbg - Fix returning success on failure in CTR_DRBG (Eric Biggers) [Orabug: 39785894] {CVE-2026-64306}
- KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug: 39273524] {CVE-2026-31588}
- xfrm: clear trailing padding in build_polexpire() (Yasuaki Torimaru) [Orabug: 39262403] {CVE-2026-31664}
- tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko) [Orabug: 39262395] {CVE-2026-31662}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Moller) [Orabug: 39167519] {CVE-2026-23457}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [Orabug: 39167511] {CVE-2026-23455}

[5.4.17-2136.359.3]
- Partial revert of 'x86/alternatives: Optimize optimize_nops()' (Harshit Mogalapalli) [Orabug: 39866546]
- Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39866546]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov) [Orabug: 39784513,39853776] {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Support relocations in alternatives (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Make debug-alternative selective (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternatives: Add alt_instr.flags (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Align insn bytes vertically (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
(H Peter Anvin) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
- x86: Add insn_decode_kernel() (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
- x86/insn: Add an insn_decode() API (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Merge include files (Juergen Gross) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross) [Orabug: 39784513] {CVE-2026-68480}
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky) [Orabug: 39784513] {CVE-2026-68480}
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik) [Orabug: 39784513] {CVE-2026-68480}
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo) [Orabug: 39784513] {CVE-2026-68480}
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik) [Orabug: 39784513] {CVE-2026-68480}
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik) [Orabug: 39784513] {CVE-2026-68480}
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo) [Orabug: 39784513] {CVE-2026-68480}
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 39784513] {CVE-2026-68480}
- net/rds: restrict RDS_INFO dumps to caller netns (Praveen Kumar Kannoju) [Orabug: 39681637]

Related CVEs

CVE-2026-99288

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2136.361.4.2.el7uek.src.rpm	9d3024d4fd4133d19c198a34735b6d59e7a1cdb6c09ecd6023fc961f46bbe373	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	ef5897c94712cf63c24c70d485ff9a273666383fcf89673c4d642b05aa80b3de	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	a29fa3f8e5546432a60f4bbf2f04220ee4eaab61cbc4bb87f5dab560c82f8f2f	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-debug-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	aba5759f28b710484825fd7b89b6bafc7ac0f68787f5a9f2c6ead759ee28e3d8	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	c766651f9c69a16a0806afc9462aa5e13e926177204bd0279418ff1025ebfe59	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-devel-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	95f6c947125eee45d02eb8af287b29a02151684e476484227e32ee6249c4dc9d	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-devel-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	ece3cc448ea8c05f0b2782f894142a4dca50967b91a7134f61d7d3813ff048db	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-doc-5.4.17-2136.361.4.2.el7uek.noarch.rpm	496adf6fe369b1fc89c875d53c2af9a3f8ea619f2869d1e6ef08d5dcdc4f8e32	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-tools-5.4.17-2136.361.4.2.el7uek.x86_64.rpm	436aa7acadb9a25feb1f4cd10bc98c4134cf41cd130f4a782b736903f000961a	-	ol7_x86_64_UEKR6_ELS
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2136.361.4.2.el8uek.src.rpm	0235fe16b266d76877ca3b96d6ac9b99a3ff0d63dc6f15d0e435bc7c6b2e2171	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.361.4.2.el8uek.src.rpm	0235fe16b266d76877ca3b96d6ac9b99a3ff0d63dc6f15d0e435bc7c6b2e2171	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	ae87bf6fa2e08b3193ad94bedaa614dc300d4733e5fe75cd898f1793e8c19a96	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	ae87bf6fa2e08b3193ad94bedaa614dc300d4733e5fe75cd898f1793e8c19a96	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	a34479baacab2ed4a8cad680d3e2a507c6a12758edc913a90db6efd78b187738	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	a34479baacab2ed4a8cad680d3e2a507c6a12758edc913a90db6efd78b187738	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-devel-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	7afbc0272bd8e89d7378111b358244634f90c1de04d765f567e7e7ce4c243b5e	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	7afbc0272bd8e89d7378111b358244634f90c1de04d765f567e7e7ce4c243b5e	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-devel-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	9a0e2c2793316a9bb1058c5e9acaef6d02305cda843b70b8f0f6748712613af6	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2136.361.4.2.el8uek.aarch64.rpm	9a0e2c2793316a9bb1058c5e9acaef6d02305cda843b70b8f0f6748712613af6	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-doc-5.4.17-2136.361.4.2.el8uek.noarch.rpm	82810579d09148e67ff16be8af523b0757efdd86d7c4bdc3dea3e0b381a5302c	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2136.361.4.2.el8uek.noarch.rpm	82810579d09148e67ff16be8af523b0757efdd86d7c4bdc3dea3e0b381a5302c	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2136.361.4.2.el8uek.src.rpm	0235fe16b266d76877ca3b96d6ac9b99a3ff0d63dc6f15d0e435bc7c6b2e2171	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2136.361.4.2.el8uek.x86_64.rpm	fdf11e5b39531a9906985be07cc9fed1654574d46a1348bb67076e0d84679190	-	ol8_x86_64_UEKR6
	kernel-uek-container-5.4.17-2136.361.4.2.el8uek.x86_64.rpm	791552e12f12ab05f7c299740fce4ac1acefe480d79c3ca53351029b967ef65c	-	ol8_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2136.361.4.2.el8uek.x86_64.rpm	e15e794495d018bd2001399d24462902d62326ed713ed30c8e9c5ad7f01fe44c	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2136.361.4.2.el8uek.x86_64.rpm	7629b3a6977843203d8f41d6d46a725e0642c995db65f5881d96291085ae09dc	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.361.4.2.el8uek.x86_64.rpm	ba4906445aa2460388c13e9eb93f5ec69f05260d917501cc222e6910bb52607a	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2136.361.4.2.el8uek.x86_64.rpm	db8015e0aedd95b6b99c0cc2de907920d749ecc6b3f5122ae00869e96ec14ac3	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2136.361.4.2.el8uek.noarch.rpm	82810579d09148e67ff16be8af523b0757efdd86d7c4bdc3dea3e0b381a5302c	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team