Back Linuxsecurity

Oracle Linux 7 Kernel Important Security Fix ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • June 10, 2026

[5.4.17-2136.356.4.2] - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39017592] {CVE-2025-10263} - arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland) [Orabug: 39017592] - ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky) [Orabug: 39017592] - arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland) [Orabug: 39017592] - arm64: cputype: Add C1-Premium definitions (Mark Rutland) [Orabug: 39017592] - arm64: cputype: Add C1-Ultra definitions (Mark Rutland) [Orabug: 39017592] [5.4.17-2136.356.4.1] - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463669] [5.4.17-2136.356.4] - tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147] - tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147] - tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147] [5.4.17-2136.356.3] - ptrace: s...

kernel-uek-5.4.17-2136.356.4.2.el7uek.x86_64.rpm kernel-uek-container-5.4.17-2136.356.4.2.el7uek.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.356.4.2.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.356.4.2.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.356.4.2.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.356.4.2.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.356.4.2.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.356.4.2.el7uek.x86_64.rpm

Related CVEs: CVE-2025-10263

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux Kernel Updates Address CVE-2025-10263 Vulnerability On June 10, 2026, Oracle released important kernel updates for multiple versions of Oracle Linux, addressing CVE-2025-10263, a vulnerability affecting various Arm CPUs. The updates include mitigations for TLBI errata and are applicable to Oracle Linux 7, 8, and 9. The vulnerability was published on June 9, 2026, and affects systems running kernel versions 5.4, 5.15, and 6.12. The updates were confirmed by Mark Rutland and Saeed Mirzamohammadi, who contributed to the patches. Users are urged to apply these updates promptly to mitigate potential risks. The updates include various kernel packages and modules, ensuring comprehensive coverage for affected systems. The scope of impact includes critical systems relying on Oracle Linux for operations. 9 sources 61

Extracted Entities

CVEs (1)

CVE-2025-10263

Platforms (1)

Linux