Oracle Linux Kernel Vulnerabilities Addressed in Recent Updates

Oracle has released important kernel updates for both Oracle Linux 7 and 8, addressing multiple vulnerabilities including CVE-2026-46333, a ptrace vulnerability. This flaw could allow attackers to manipulate process memory, potentially leading to privilege escalation. Other vulnerabilities fixed include heap overflows and use-after-free issues affecting SCSI and NFS services. The updates are critical for users of Oracle Linux 7 and 8, as they could be exploited by attackers if not patched. The vulnerabilities were disclosed between February and May 2026, with some having public proof-of-concept (PoC) code available. System administrators are urged to apply the patches immediately to mitigate risks. The updates are available for various architectures, including x86_64 and aarch64.

Key Points: • Oracle Linux 7 and 8 received critical kernel updates addressing multiple vulnerabilities. • CVE-2026-46333 allows for potential privilege escalation through ptrace manipulation. • System administrators must apply patches urgently to prevent exploitation.