Oracle Errata System Oracle Linux 5.11 2026-05-02T15:05:30 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.354.4.2] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39292250] - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39292250] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39292250] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39292250] - crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39292250] - crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39292250] - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39292250] - crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39292250] {CVE-2026-31431} - crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39292250] - crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [Orabug: 39292250] - x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant) [Orabug: 39292236] [5.4.17-2136.354.4.1] - Revert 'rds: Drop rds conn in connect worker if not in down state.' (Alok Tiwari) [Orabug: 39200399] [5.4.17-2136.354.4] - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001} - macvlan: Use 'hash' iterators to simplify code (Christophe JAILLET) [Orabug: 38887731] - macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510] - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209} [5.4.17-2136.354.3] - io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 39064937] {CVE-2025-68814} - rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39045035] [5.4.17-2136.354.2] - ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38916908] - jbd2: store more accurate errno in superblock (Wengang Wang) [Orabug: 38916908] - ext4: save the error code which triggered an (Wengang Wang) [Orabug: 38916908] [5.4.17-2136.354.1] - genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask (Imran Khan) [Orabug: 39001911] - rds: Add state field to RDS trace logs. (Rohit Nair) [Orabug: 38870347] [5.4.17-2136.353.3] - xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 38934000] - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 38934000,39004270] {CVE-2025-40256} - Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca) [Orabug: 38934000] - Revert 'IB/mlx5: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520] - Revert 'IB/core: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520] - Revert 'ib/core: add SET_DEVICE_OP call for clear_hw_stats()' (Sharath Srinivasan) [Orabug: 38923520] - fs: proc: inode: delay put_pid() by RCU (Stephen Brennan) [Orabug: 38766812] [5.4.17-2136.353.2] - Revert 'perf/x86: Always store regs->ip in perf_callchain_kernel()' (Jiri Olsa) [Orabug: 38893604] - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) [Orabug: 38730493,39016501] {CVE-2025-40215} [5.4.17-2136.352.5] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38879907,38884602,39004445] {CVE-2025-40022} [5.4.17-2136.352.4] - arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner) [Orabug: 38821197] IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-31431 cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7:9:UEKR6_ELS