Skip to content
Critical Oracle Linux Kernel Vulnerabilities Expose Admin Control Risks

Critical Oracle Linux Kernel Vulnerabilities Expose Admin Control Risks

First seen 14 Sep 2026, 12:22 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 15, 2026 at 11:56 UTC
  • •Chained vulnerabilities in Oracle Linux allow admin control.
  • •Patches released for Oracle Linux 8 and 9; immediate updates recommended.
  • •Affected versions include kernel 4.18.0-553.162.1 and 5.14.0-687.46.1.

Multiple vulnerabilities in Oracle Linux kernels (versions 4.18 and 5.14) have been identified, allowing attackers to gain administrative control through chained exploits. The vulnerabilities are linked to CVE-2026-46015 and CVE-2025-38004, with patches released for Oracle Linux 8 and 9. Affected systems include Oracle Linux 8 and 9, with specific kernel versions being 4.18.0-553.162.1 and 5.14.0-687.46.1. The vulnerabilities were disclosed recently, with the potential for exploitation confirmed. Administrators are urged to update their systems immediately to mitigate risks. The updates include disabling UKI signing and updating Oracle Linux certificates. The situation is critical due to the potential for mass exploitation if not addressed promptly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 52d ago How this analysis works

Timeline

2025-06-08
CVE-2025-38004 published
A vulnerability allowing admin control was disclosed, affecting Oracle Linux.
Linuxsecurity
2026-05-27
CVE-2026-46015 published
A critical kernel vulnerability was disclosed, enabling potential admin access.
Linuxsecurity

More articles in this cluster (4)

Following this threat?

Track CVE-2025-38004 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (54)

1 / 3