Back Linuxsecurity

Oracle Linux 8 Kernel Important Threat Fixes ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • August 4, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

[5.4.17-2136.358.2] - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [Orabug: 39776792] {CVE-2026-64600} - net: Work around Marvell NIC TX stalls (Venkat Venkatsubra) [Orabug: 39765820] [5.4.17-2136.358.1] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673871] - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39673871] - KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon) [Orabug: 39673871] - KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson) [Orabug: 39673871] - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [Orabug: 39673871] - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu) [Orabug: 39673871] - KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini) [Orabug: 39673871] - KVM: x86/mmu: Check PDPTRs befo...

kernel-uek-5.4.17-2136.358.2.el8uek.x86_64.rpm kernel-uek-container-5.4.17-2136.358.2.el8uek.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.358.2.el8uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.358.2.el8uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.358.2.el8uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.358.2.el8uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.358.2.el8uek.noarch.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux Kernel ptrace Vulnerability CVE-2026-46333 Disclosed Oracle has disclosed a critical security vulnerability in the ptrace functionality of its Linux kernels, identified as CVE-2026-46333. This vulnerability affects multiple versions of Oracle Linux, including Oracle Linux 8, 9, and the Unbreakable Enterprise Kernel (UEK). The flaw allows unauthorized access to process memory, which could potentially be exploited to gain elevated privileges. The vulnerability was published on May 15, 2026, with a proof of concept (PoC) available as of May 16, 2026. Users are advised to apply the latest patches immediately to mitigate risks. The affected kernel versions include 6.12.0-202.76.4.3 and 5.15.0-320.202.8.4 for Oracle Linux 9 and 8, respectively. The issue has been confirmed by Oracle and is being treated with urgency due to its potential impact on system security. 364 sources 74

Extracted Entities

CVEs (5)

CVE-2026-43038 CVE-2026-43499 CVE-2026-46043 CVE-2026-46331 CVE-2026-64600

Platforms (3)

KVM Linux Oracle Linux