Back Linuxsecurity

Oracle Linux 9 Kernel Important Security Advisory ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • July 6, 2026

[5.15.0-322.203.3.2] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson) [Orabug: 39673886] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673886] - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39673886] - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [Orabug: 39673886] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini) [Orabug: 39673886] - KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini) [Orabug: 39673886] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack) [Orabug: 39673886] - KVM: x86/mmu: Use a bool for direct (David Matlack) [Orabug: 39673886] - net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [Orabug: 39668793] - net/sched: fix pedit partial COW leading to page cache corruptio...

bpftool-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-core-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-debug-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-debug-core-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-debug-devel-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-debug-modules-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-debug-modules-extra-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-devel-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-doc-5.15.0-322.203.3.2.el9uek.noarch.rpm kernel-uek-modules-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-modules-extra-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-container-5.15.0-322.203.3.2.el9uek.x86_64.rpm kernel-uek-container-debug-5.15.0-322.203.3.2.el9uek.x86_64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux Kernel Vulnerabilities Lead to Important Security Advisories On July 6, 2026, Oracle released multiple important security advisories for its Linux kernel across various versions, including Oracle Linux 7, 8, and 9. The advisories address critical vulnerabilities in the kernel that could allow for exploitation via shadow paging use-after-free flaws. Specifically, CVE-2026-31657, CVE-2026-46331, CVE-2026-43037, and CVE-2026-52943 are highlighted, with some having public proof-of-concept (PoC) exploits available. The vulnerabilities affect multiple kernel versions, with updates available for users to mitigate risks. Security professionals are urged to apply patches immediately to protect their systems from potential exploitation. The advisories emphasize the importance of updating to the latest kernel versions to prevent attacks leveraging these vulnerabilities. 9 sources 71

Extracted Entities

Oracle Linux 9 Kernel Important Security Advisory ELSA-2026

The full story

Extracted Entities

CVEs (5)

CWE Weaknesses (1)

IP Addresses (1)

Platforms (2)