Back Linuxsecurity

Oracle Linux 9 Kernel Important Security Fix ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • October 19, 2026

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

[5.15.0-325.221.6.4] - ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet) [Orabug: 40167661] {CVE-2026-98432} - ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin) [Orabug: 40167656] {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic (Antonio Ojea) [Orabug: 40167656] [5.15.0-325.221.6.3] - exec: Cleanup POSIX timers right after de_thread() (Hyunwoo Kim) [Orabug: 40157515] {CVE-2026-98260} [5.15.0-325.221.6.2] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39784995] {CVE-2026-46242} - eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39784995] - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39784995] - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39784995] - eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39784995] - eventpoll: split __ep_remove() (Christi...

bpftool-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-container-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-container-debug-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-core-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-debug-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-debug-core-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-debug-devel-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-debug-modules-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-debug-modules-extra-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-devel-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-doc-5.15.0-325.221.6.4.el9uek.noarch.rpm kernel-uek-modules-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek-modules-extra-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek64k-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek64k-core-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek64k-devel-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek64k-modules-5.15.0-325.221.6.4.el9uek.aarch64.rpm kernel-uek64k-modules-extra-5.15.0-325.221.6.4.el9uek.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaws in Oracle Linux Kernels Require Immediate Attention Oracle has released multiple security updates addressing critical vulnerabilities in its Linux kernels across various versions. The updates affect Oracle Linux 7, 8, 9, and the Unbreakable Enterprise Kernel (UEK) with CVEs including CVE-2026-98432 and CVE-2026-99999, which could allow remote code execution. The flaws were disclosed on October 15, 2026, and patches are now available. Attackers could exploit these vulnerabilities to execute arbitrary code on affected systems, posing a significant risk to organizations running self-managed GitLab. The updates include kernel versions 5.4.17, 5.15.0, and 6.12.0 across the different Oracle Linux distributions. Security professionals are urged to apply these patches immediately to mitigate potential exploitation. The vulnerabilities have been assigned high CVSS scores, indicating their severity and the urgency of remediation. 6 sources 78

Extracted Entities

CVEs (4)

CVE-2026-46242 CVE-2026-98260 CVE-2026-98432 CVE-2026-99999

Platforms (1)

Linux