Skip to content
Oracle Linux Kernel Vulnerabilities Addressed in ELSA-2026 Advisories

Oracle Linux Kernel Vulnerabilities Addressed in ELSA-2026 Advisories

First seen 18 Jun 2026, 12:57 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 19, 2026 at 12:27 UTC
  • •Oracle Linux 8 and 9 received critical security updates on June 18, 2026.
  • •Key vulnerabilities include CVE-2026-31533 and CVE-2022-50073, affecting network processing.
  • •Users are urged to apply patches promptly to avoid potential exploitation.

On June 18, 2026, Oracle released security advisories for Oracle Linux 8 and 9, addressing multiple vulnerabilities. Key issues include a use-after-free vulnerability in the TLS encryption path (CVE-2026-31533) and a NULL pointer dereference in packet processing (CVE-2022-50073). The advisories affect both Oracle Linux 8 and 9, with CVE-2026-31533 and CVE-2026-31504 published on April 23 and April 22, respectively. Additionally, CVE-2022-50073 was published on June 18, 2025, indicating a long-standing issue. The vulnerabilities could lead to potential denial of service or data exposure, impacting users running affected kernel versions. Users are advised to update their systems to mitigate these risks. The advisories include detailed patches and updates for various kernel modules and tools.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 95d ago How this analysis works

Timeline

2025-06-18
CVE-2022-50073 published
A NULL pointer dereference vulnerability was disclosed, affecting packet processing in Oracle Linux.
Linuxsecurity
2026-04-22
CVE-2026-31504 published
A vulnerability related to fanout UAF in packet_release() was disclosed, affecting network stability.
Linuxsecurity
2026-04-23
CVE-2026-31533 published
A use-after-free vulnerability in TLS encryption was disclosed, potentially leading to data exposure.
Linuxsecurity
2026-04-24
CVE-2026-31669 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-24
CVE-2026-31657 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-09
CVE-2025-10263 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-18
Oracle Linux advisories released
Oracle released security advisories for Linux 8 and 9, addressing multiple vulnerabilities including CVE-2026-31533 and CVE-2022-50073.
Linuxsecurity

More articles in this cluster (4)

Following this threat?

Track CVE-2022-50073 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3