[El-errata] ELSA-2026-50234 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-50234

http://linux.oracle.com/errata/ELSA-2026-50234.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.354.4.1.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.354.4.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.354.4.1.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.354.4.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.354.4.1.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.354.4.1.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.354.4.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.354.4.1.el8uek.src.rpm

Related CVEs:

CVE-2025-68814
CVE-2026-23001
CVE-2026-23209




Description of changes:

[5.4.17-2136.354.4.1]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Alok Tiwari)  [Orabug: 39200399]

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet)  [Orabug: 38887731]  {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe JAILLET)  [Orabug: 38887731]
- macvlan: Add nodst option to macvlan type source (Jethro Beekman)  [Orabug: 38887731]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet)  [Orabug: 38970510]
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet)  [Orabug: 38970510]  {CVE-2026-23209}

[5.4.17-2136.354.3]
- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh)  [Orabug: 39064937]  {CVE-2025-68814}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39045035]

[5.4.17-2136.354.2]
- ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38916908]
- jbd2: store more accurate errno in superblock (Wengang Wang) [Orabug: 38916908]
- ext4: save the error code which triggered an (Wengang Wang) [Orabug: 38916908]

[5.4.17-2136.354.1]
- genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask (Imran Khan) [Orabug: 39001911]
- rds: Add state field to RDS trace logs. (Rohit Nair) [Orabug: 38870347]