ELSA-2026-50234

ELSA-2026-50234 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-15

Description

[5.4.17-2136.354.4.1]
- Revert 'rds: Drop rds conn in connect worker if not in down state.' (Alok Tiwari) [Orabug: 39200399]

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe JAILLET) [Orabug: 38887731]
- macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510]
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209}

[5.4.17-2136.354.3]
- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 39064937] {CVE-2025-68814}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39045035]

[5.4.17-2136.354.2]
- ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38916908]
- jbd2: store more accurate errno in superblock (Wengang Wang) [Orabug: 38916908]
- ext4: save the error code which triggered an (Wengang Wang) [Orabug: 38916908]

[5.4.17-2136.354.1]
- genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask (Imran Khan) [Orabug: 39001911]
- rds: Add state field to RDS trace logs. (Rohit Nair) [Orabug: 38870347]

[5.4.17-2136.353.3]
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 38934000]
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 38934000,39004270] {CVE-2025-40256}
- Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca) [Orabug: 38934000]
- Revert 'IB/mlx5: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520]
- Revert 'IB/core: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520]
- Revert 'ib/core: add SET_DEVICE_OP call for clear_hw_stats()' (Sharath Srinivasan) [Orabug: 38923520]
- fs: proc: inode: delay put_pid() by RCU (Stephen Brennan) [Orabug: 38766812]

[5.4.17-2136.353.2]
- Revert 'perf/x86: Always store regs->ip in perf_callchain_kernel()' (Jiri Olsa) [Orabug: 38893604]
- xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) [Orabug: 38730493,39016501] {CVE-2025-40215}

[5.4.17-2136.352.5]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38879907,38884602,39004445] {CVE-2025-40022}

[5.4.17-2136.352.4]
- arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner) [Orabug: 38821197]

[5.4.17-2136.352.3]
- net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju) [Orabug: 38340278]
- net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change (Praveen Kumar Kannoju) [Orabug: 38252416]
- infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE. (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xsvnic_main: Remove unused functions (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_cm: Fix mixed code warning (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_ethtool: Remove unused variable 'priv' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix misleading indentation (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix mixed code warning (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix mixed code warning (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix misleading indentation (Siddh Raman Pant) [Orabug: 38418469]
- inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xscore_impl: Remove unused label 'err_pd' (Siddh Raman Pant) [Orabug: 38418469]
- rds: Fix jiffies type in struct rds_conn_path (Siddh Raman Pant) [Orabug: 38418727]
- kernel: sysctl: Remove unused variable 'zero' (Siddh Raman Pant) [Orabug: 38418727]
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu) [Orabug: 38537469,38855313] {CVE-2025-39964}
- RDMA/cm: Base cm_id destruction timeout on CMA values (Hakon Bugge) [Orabug: 38753622]
- x86/its: Build fails with CONFIG_MITIGATION_ITS=n (Alexandre Chartre) [Orabug: 38756954]

Related CVEs

CVE-2025-68814

CVE-2026-23001

CVE-2026-23209

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2136.354.4.1.el7uek.src.rpm	916d990621db034933f8ca45b47219fd9a349695fd5fd08ed7d3eab2094787a2	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	f36f9d99f2fcd3e16bdce20f8cd39a28704d9f54b5ea4aa6667b97cf2f757703	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	28552a86cf1dce8cf85ea8902b5c638f872089d789a396d6f810f4fa987b5e9e	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-debug-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	156ffc6b1cc00bde0aef4127fdc0c05486802ed0fa2986c18c42b6d6261c950f	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	6bb061a93d3e579b8e16afc08e5d5e7674437c1d22d333b06e5167b61b334394	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-devel-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	7ddc5b37b8348b39a0e3476ce5424e7d9cde245c83eb731547853027df068848	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-devel-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	f749be4a65f43002be642c569ee128ef84c85e965d0b5ba218cb7b14aa2e208a	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-doc-5.4.17-2136.354.4.1.el7uek.noarch.rpm	385363a7ca66d51bff6f14553e3c0d4f327775ef5416229f7eadd2e38d9be0bd	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-tools-5.4.17-2136.354.4.1.el7uek.x86_64.rpm	0cd7d7fb6a1a436cea06b9060ba1c4e93604cc4335e5d0f0183b8fdf72792c75	-	ol7_x86_64_UEKR6_ELS
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2136.354.4.1.el8uek.src.rpm	f82e31b754684b1992d9a95714ab6a1dc0b2137079b90b036c3cb1fdc6467fb7	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.354.4.1.el8uek.src.rpm	f82e31b754684b1992d9a95714ab6a1dc0b2137079b90b036c3cb1fdc6467fb7	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	0e5fe155a7693f0efadf1a34f745632b948a67411d25ab8778c2e32cab56cf5d	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	0e5fe155a7693f0efadf1a34f745632b948a67411d25ab8778c2e32cab56cf5d	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	217c60343aa745bc0c753da5a3ab73b63be34f361f91b0e4edf0535bd0edd09d	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	217c60343aa745bc0c753da5a3ab73b63be34f361f91b0e4edf0535bd0edd09d	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-devel-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	c4f173190c436dbe058f29ab24538a965492cc1ed4c64a01e3d40b4fefe5cec1	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	c4f173190c436dbe058f29ab24538a965492cc1ed4c64a01e3d40b4fefe5cec1	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-devel-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	e7a5c9a981d4f259fb4c8a5c7fdbf286e43cba30c1ad818f801cd86832689ef3	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2136.354.4.1.el8uek.aarch64.rpm	e7a5c9a981d4f259fb4c8a5c7fdbf286e43cba30c1ad818f801cd86832689ef3	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-doc-5.4.17-2136.354.4.1.el8uek.noarch.rpm	bd88102901e22043f354c6248474088c7db5c1043c81f5888e39cb6796a397a1	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2136.354.4.1.el8uek.noarch.rpm	bd88102901e22043f354c6248474088c7db5c1043c81f5888e39cb6796a397a1	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2136.354.4.1.el8uek.src.rpm	f82e31b754684b1992d9a95714ab6a1dc0b2137079b90b036c3cb1fdc6467fb7	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2136.354.4.1.el8uek.x86_64.rpm	9a625051a57151ae77a3ce3607f74d543c99338cab4f4c057c50632779bc5620	-	ol8_x86_64_UEKR6
	kernel-uek-container-5.4.17-2136.354.4.1.el8uek.x86_64.rpm	88082d54bffa8ba680087fe2c654ed02d2178c41b52410c2a445735c3b5bdb25	-	ol8_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2136.354.4.1.el8uek.x86_64.rpm	f26973530e094ec09b4d5948dda27b02c026e4c9e3f003b918e1cbac9af1cff7	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2136.354.4.1.el8uek.x86_64.rpm	90b4d29cf98b66294478e829cd47b7baa40bedb1e87635bb29508410f343a865	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.354.4.1.el8uek.x86_64.rpm	b0027100596d4e1698a17092cce269d9929778d84ea6ce90ef0012a651c40661	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2136.354.4.1.el8uek.x86_64.rpm	1f3cf9dc6358903343b420f4fbf81bbe3698b057bf94274b59affedf1ad62735	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2136.354.4.1.el8uek.noarch.rpm	bd88102901e22043f354c6248474088c7db5c1043c81f5888e39cb6796a397a1	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team