Oracle Linux Kernel Security Updates Address Multiple Vulnerabilities

Oracle has released important security updates for both Oracle Linux 7 and 8, addressing multiple vulnerabilities. Key vulnerabilities include CVE-2026-64600, which was published on July 23, 2026, and has a proof of concept available. Other related CVEs include CVE-2026-43038 and CVE-2026-43499, with the latter having a public PoC since June 27, 2026. The updates affect various kernel components, including KVM and XFS, and are critical for maintaining system integrity. Users are advised to audit Linux privileges to mitigate potential exploitation. The updates are available for both x86_64 and aarch64 architectures. Immediate action is recommended to patch systems and limit exposure to these vulnerabilities.

Key Points: • Oracle Linux 7 and 8 received critical kernel security updates addressing multiple CVEs. • CVE-2026-64600 has a public proof of concept, increasing its risk of exploitation. • Users are urged to audit Linux privileges to prevent compromise and escalation.