Back Linuxsecurity

Oracle Linux 8 ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

[5.4.17-2136.359.3] - Partial revert of "x86/alternatives: Optimize optimize_nops()" (Harshit Mogalapalli) [Orabug: 39866546] - Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli) [Orabug: 39866546] - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39784513] {CVE-2026-68480} - x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner) [Orabug: 39784513] - x86/alternative: Support relocations in alternatives (Peter Zijlstra) [Orabug: 39784513] - x86/alternative: Make debug-alternative selective (Peter Zijlstra) [Orabug: 39784513] - x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD)) [Orabug: 39784513] - x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra) [Orabug: 39784513] - x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov) [Orabug: 39784513] - x86/alternative: Align insn bytes vertically (Borislav Petkov) [Orabug: 39784513] (H. Peter A...

kernel-uek-5.4.17-2136.359.3.el8uek.aarch64.rpm kernel-uek-debug-5.4.17-2136.359.3.el8uek.aarch64.rpm kernel-uek-debug-devel-5.4.17-2136.359.3.el8uek.aarch64.rpm kernel-uek-devel-5.4.17-2136.359.3.el8uek.aarch64.rpm kernel-uek-doc-5.4.17-2136.359.3.el8uek.noarch.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for Oracle Linux Kernels Address Multiple CVEs On September 3, 2026, Oracle released important security updates for Oracle Linux 7 and 8, addressing several vulnerabilities. The updates include patches for CVE-2026-31598, CVE-2026-46116, CVE-2026-52995, and CVE-2026-68480. CVE-2026-31598, published on April 24, 2026, is particularly critical and affects multiple kernel versions. CVE-2026-68480, published on August 6, 2026, also poses significant risks. Users are advised to apply the patches immediately to mitigate potential exploitation. The vulnerabilities could allow for various attack vectors, including privilege escalation and denial of service. Affected systems include Oracle Linux 7 and 8, with specific kernel versions detailed in the advisories. The updates are available for both x86_64 and aarch64 architectures. 9 sources 58

Extracted Entities

CVEs (4)

CVE-2026-31598 CVE-2026-46116 CVE-2026-52995 CVE-2026-68480

Platforms (1)

Oracle Linux