Back Linuxsecurity

Oracle Linux 8 Kernel Update Addresses Multiple Memory Flaws

Linuxsecurity •LinuxSecurity Advisories • November 11, 2026

Critical WordPress Flaw Exploited in the Wild: Learn how to protect your site and check your core update window. ×

[5.15.0-326.224.5.0.1] - Fix TSA microcode check for ZEN5 (Dave Kleikamp) [Orabug: 40172717] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004} - Fix Zen5 TSA (Borislav Petkov (AMD)) [Orabug: 40172717] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004} - iommu/amd: Force device table to maximum size (Suravee Suthikulpanit) [Orabug: 40172717] {CVE-2024-21963} [5.15.0-326.224.5] - LTS version: v5.15.224 (Samasth Norway Ananda) - signal: don't retarget shared signals in a dying thread group (Christian Brauner) - io-wq: order the exit bit against worker creation task work (Christian Brauner) - keys/trusted_keys: return immediately after TPM unseal failure (Srish Srinivasan) - KEYS: trusted: Fix blob allocation size in tpm2_key_decode() (Stefano Garzarella) - KEYS: Fix key_reject_and_link() race with keyring restriction (Adrian Martinez) - keys: Protect the read method check against type removal (Cen Zhang) - keys: Protect the type name while describing a key (Cen Zhang) - keys: Ch...

bpftool-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-core-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-debug-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-debug-core-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-debug-devel-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-debug-modules-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-debug-modules-extra-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-devel-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-doc-5.15.0-326.224.5.0.1.el8uek.noarch.rpm kernel-uek-modules-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-modules-extra-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-container-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm kernel-uek-container-debug-5.15.0-326.224.5.0.1.el8uek.x86_64.rpm

bpftool-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-core-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-debug-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-debug-core-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-debug-devel-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-debug-modules-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-debug-modules-extra-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-devel-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-doc-5.15.0-326.224.5.0.1.el8uek.noarch.rpm kernel-uek-modules-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-modules-extra-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-container-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm kernel-uek-container-debug-5.15.0-326.224.5.0.1.el8uek.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux Kernel Updates Address Critical AMD IOMMU Vulnerabilities On November 11, 2026, Oracle released multiple kernel updates for Linux versions 7, 8, and 9 to address critical vulnerabilities affecting AMD IOMMU and Zen5 support. The updates fix issues related to the device table size and TSA microcode checks, with CVEs including CVE-2024-21963, CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004. The vulnerabilities could allow attackers to exploit memory flaws, potentially leading to unauthorized access or system crashes. Users of Oracle Linux 7, 8, and 9 are urged to apply the updates immediately to mitigate risks. The updates are available for various architectures, including x86_64 and aarch64. The vulnerabilities were disclosed in the context of ongoing security improvements for Oracle's Linux distributions. 6 sources 61

Extracted Entities

CVEs (4)

CVE-2024-21963 CVE-2024-36350 CVE-2024-36357 CVE-2026-0004