Oracle Linux Kernel Vulnerabilities Addressed in ELSA-2026 Advisories

Oracle Linux Kernel Vulnerabilities Addressed in ELSA-2026 Advisories

First seen 18 Jun 2026, 12:57 UTC •Linuxsecurity •96% similarity •57.9

Article Content

Browse articles
ThreatCluster

On June 18, 2026, Oracle released security advisories for Oracle Linux 8 and 9, addressing multiple vulnerabilities. Key issues include a use-after-free vulnerability in the TLS encryption path (CVE-2026-31533) and a NULL pointer dereference in packet processing (CVE-2022-50073). The advisories affect both Oracle Linux 8 and 9, with CVE-2026-31533 and CVE-2026-31504 published on April 23 and April 22, respectively. Additionally, CVE-2022-50073 was published on June 18, 2025, indicating a long-standing issue. The vulnerabilities could lead to potential denial of service or data exposure, impacting users running affected kernel versions. Users are advised to update their systems to mitigate these risks. The advisories include detailed patches and updates for various kernel modules and tools.

Key Points: • Oracle Linux 8 and 9 received critical security updates on June 18, 2026. • Key vulnerabilities include CVE-2026-31533 and CVE-2022-50073, affecting network processing. • Users are urged to apply patches promptly to avoid potential exploitation.

ThreatCluster AI How this analysis works

Timeline

2025-06-18
CVE-2022-50073 published
A NULL pointer dereference vulnerability was disclosed, affecting packet processing in Oracle Linux.
Linuxsecurity
2026-04-22
CVE-2026-31504 published
A vulnerability related to fanout UAF in packet_release() was disclosed, affecting network stability.
Linuxsecurity
2026-04-23
CVE-2026-31533 published
A use-after-free vulnerability in TLS encryption was disclosed, potentially leading to data exposure.
Linuxsecurity
2026-04-24
CVE-2026-31669 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-24
CVE-2026-31657 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-09
CVE-2025-10263 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-18
Oracle Linux advisories released
Oracle released security advisories for Linux 8 and 9, addressing multiple vulnerabilities including CVE-2026-31533 and CVE-2022-50073.
Linuxsecurity

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Oracle Linux