Linuxsecurity Oracle Linux Kernel Updates Address Critical AMD IOMMU Vulnerabilities
Article Content
- •Oracle released critical kernel updates for Linux 7, 8, and 9 on November 11, 2026.
- •Vulnerabilities include CVE-2024-21963, CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004.
- •Affected users are urged to apply patches immediately to prevent exploitation.
On November 11, 2026, Oracle released multiple kernel updates for Linux versions 7, 8, and 9 to address critical vulnerabilities affecting AMD IOMMU and Zen5 support. The updates fix issues related to the device table size and TSA microcode checks, with CVEs including CVE-2024-21963, CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004. The vulnerabilities could allow attackers to exploit memory flaws, potentially leading to unauthorized access or system crashes. Users of Oracle Linux 7, 8, and 9 are urged to apply the updates immediately to mitigate risks. The updates are available for various architectures, including x86_64 and aarch64. The vulnerabilities were disclosed in the context of ongoing security improvements for Oracle's Linux distributions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track CVE-2024-21963 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of Oracle Linux are affected?
What should I do to protect my systems?
Are these vulnerabilities actively exploited?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…