Oracle Errata System Oracle Linux 5.11 2026-07-15T17:29:57 Oracle Linux 10 Oracle Linux 9 [6.12.0-204.92.4.3] - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [Orabug: 39727259] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Jianbo Liu) [Orabug: 39727259] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim) [Orabug: 39727258] {CVE-2026-46316} - ipv6: account for fraggap on the paged allocation path (Wongi Lee) [Orabug: 39727239] {CVE-2026-53362} IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-31663 CVE-2026-46316 CVE-2026-53362 cpe:/a:oracle:linux:9::UEKR8 cpe:/a:oracle:linux:10::UEKR8