Back Linuxsecurity

Oracle Linux 7 Kernel Update Fixes the CVE-2024

Linuxsecurity •LinuxSecurity Advisories • November 11, 2026

Critical WordPress Flaw Exploited in the Wild: Learn how to protect your site and check your core update window. ×

[5.4.17-2136.361.4.1] - iommu/amd: Force device table to maximum size (Suravee Suthikulpanit) [Orabug: 40172712] {CVE-2024-21963} - x86/microcode/AMD: Increase PATCH_MAX_SIZE for Family 1Ah (Saeed Mirzamohammadi) [Orabug: 40172712] [5.4.17-2136.361.4] - vhost-scsi: zero misaligned I/O bounce pages (Shubham Antil) [Orabug: 40193932] [5.4.17-2136.361.3] - KVM: x86: Use active memslots for the per-vCPU MMIO cache (Jinu Kim) [Orabug: 40180571] - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg) [Orabug: 39130967] {CVE-2026-23356} - rds: cong: fix race while clearing rs_cong_mask (Anand Khoje) [Orabug: 39519861] - hugetlbfs: hold trunc_rwsem during hugepage migration (Stephen Brennan) [Orabug: 39541934] - ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin) [Orabug: 40165812] {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic (Antonio Ojea) [Orabug: 40165812] - net: add inline function skb_csum_is_sctp (Xin Long...

kernel-uek-5.4.17-2136.361.4.1.el7uek.x86_64.rpm kernel-uek-container-5.4.17-2136.361.4.1.el7uek.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.361.4.1.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.361.4.1.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.361.4.1.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.361.4.1.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.361.4.1.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.361.4.1.el7uek.x86_64.rpm

Related CVEs: CVE-2024-21963

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux Kernel Updates Address Critical AMD IOMMU Vulnerabilities On November 11, 2026, Oracle released multiple kernel updates for Linux versions 7, 8, and 9 to address critical vulnerabilities affecting AMD IOMMU and Zen5 support. The updates fix issues related to the device table size and TSA microcode checks, with CVEs including CVE-2024-21963, CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004. The vulnerabilities could allow attackers to exploit memory flaws, potentially leading to unauthorized access or system crashes. Users of Oracle Linux 7, 8, and 9 are urged to apply the updates immediately to mitigate risks. The updates are available for various architectures, including x86_64 and aarch64. The vulnerabilities were disclosed in the context of ongoing security improvements for Oracle's Linux distributions. 6 sources 61

Extracted Entities

CVEs (3)

CVE-2024-21963 CVE-2026-23356 CVE-2026-99999

Platforms (1)

Linux