Back Linuxsecurity

Oracle Linux 7 Kernel Important Security Advisories ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • October 19, 2026

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

[5.4.17-2136.360.3.1] - ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet) [Orabug: 40167664] {CVE-2026-98432} - ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin) [Orabug: 40167666] {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic (Antonio Ojea) [Orabug: 40167666] - net: add inline function skb_csum_is_sctp (Xin Long) [Orabug: 40167666] - vhost: reset the vring metadata cache on vring reconfiguration (Jun Yang) [Orabug: 40166458] {CVE-2026-74580} [5.4.17-2136.360.3] - IB/mlx4: delete allocated id_map_entry while sending REJ (Praveen Kumar Kannoju) [Orabug: 39999072] - net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40020673] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (Asim Viladi Oglu Manizada) [Orabug: 39982188] {CVE-2026-80844} - inet: frags: strip GSO state from fragments before reassembly (Xinyang Ge) [Orabug: 39972532] {CVE-2026-80590} - sctp: pr...

kernel-uek-5.4.17-2136.360.3.1.el7uek.x86_64.rpm kernel-uek-container-5.4.17-2136.360.3.1.el7uek.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.360.3.1.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.360.3.1.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.360.3.1.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.360.3.1.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.360.3.1.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.360.3.1.el7uek.x86_64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaws in Oracle Linux Kernels Require Immediate Attention Oracle has released multiple security updates addressing critical vulnerabilities in its Linux kernels across various versions. The updates affect Oracle Linux 7, 8, 9, and the Unbreakable Enterprise Kernel (UEK) with CVEs including CVE-2026-98432 and CVE-2026-99999, which could allow remote code execution. The flaws were disclosed on October 15, 2026, and patches are now available. Attackers could exploit these vulnerabilities to execute arbitrary code on affected systems, posing a significant risk to organizations running self-managed GitLab. The updates include kernel versions 5.4.17, 5.15.0, and 6.12.0 across the different Oracle Linux distributions. Security professionals are urged to apply these patches immediately to mitigate potential exploitation. The vulnerabilities have been assigned high CVSS scores, indicating their severity and the urgency of remediation. 6 sources 78

Extracted Entities

Oracle Linux 7 Kernel Important Security Advisories ELSA-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (6)

Platforms (1)