Oracle Errata System Oracle Linux 5.11 2026-10-16T01:19:50 Oracle Linux 10 Oracle Linux 9 [6.12.0-207.111.5.3] - mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (Hyunwoo Kim) [Orabug: 40157478] {CVE-2026-89754} - exec: Cleanup POSIX timers right after de_thread() (Hyunwoo Kim) [Orabug: 40157474] {CVE-2026-98260} [6.12.0-207.111.5.2] - PCI: Fix BAR resize for devices on a root bus (Liz Fong-Jones) - PCI: Fix Resizable BAR restore order (Ilpo Jarvinen) - dpll: use exact lookup for reference sync pin id (Ivan Vecera) - Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (Hui Peng) - ocfs2: make ocfs2_calc_xattr_init() return void (Joseph Qi) - selinux: recheck intermediate backing files on mprotect() (Karl Mehltretter) - selinux: preserve user SID across nested backing files (Karl Mehltretter) - ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (Sasha Levin) - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (ThangNN99) - Bluetooth: hci_core: Print number of packets in conn->data_q (Luiz Augusto von Dentz) - drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (Dmitry Baryshkov) - ALSA: bcd2000: Fix race between rawmidi and disconnect (Takashi Iwai) - Revert 'hwmon: (emc1403) Rely on subsystem locking' (Sasha Levin) - Revert 'hwmon: (emc1403) Drop hysteresis for low limit temperature' (Sasha Levin) - landlock: Fix use-after-free of the source's parent directory (Norbert Szetei) [Orabug: 40132006] {CVE-2026-97594} - landlock: Clarify documentation for the IOCTL access right (Gunther Noack) [Orabug: 40132006] - xfrm: Fix dev use-after-free in xfrm async resumption (Dong Chenchen) [Orabug: 40131990] {CVE-2026-72463} - xfrm: Refactor xfrm_input lock to reduce contention with RSS (Jianbo Liu) [Orabug: 40131990] - pidfd: hold exec_update_lock around namespace ioctl (Chen Linxuan) [Orabug: 40131986] {CVE-2026-89766} - ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() (Eric Dumazet) [Orabug: 40131835] {CVE-2026-98101} - ipv6: mcast: Don't hold RTNL for MCAST_ socket options. (Kuniyuki Iwashima) [Orabug: 40131835] - ipv6: mcast: Don't hold RTNL for IPV6_DROP_MEMBERSHIP and MCAST_LEAVE_GROUP. (Kuniyuki Iwashima) [Orabug: 40131835] - ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP. (Kuniyuki Iwashima) [Orabug: 40131835] - ipv6: mcast: Use in6_dev_get() in ipv6_dev_mc_dec(). (Kuniyuki Iwashima) [Orabug: 40131835] - net: cpsw: Execute ndo_set_rx_mode callback in a work queue (Kevin Hao) [Orabug: 40131835] - net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue (Kevin Hao) [Orabug: 40131835] IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-72463 CVE-2026-89754 CVE-2026-89766 CVE-2026-97594 CVE-2026-98101 CVE-2026-98260 cpe:/a:oracle:linux:9::UEKR8 cpe:/a:oracle:linux:10::UEKR8