[El-errata] ELSA-2026-500136 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-500136

http://linux.oracle.com/errata/ELSA-2026-500136.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.0.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.0.1.el8uek.src.rpm

Related CVEs:

CVE-2026-68480




Description of changes:

[5.4.17-2136.358.2.0.1]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39832992]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39832992]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Align insn bytes vertically (Borislav Petkov)  [Orabug: 39832992]
(H. Peter Anvin (Intel))  [Orabug: 39832992]
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra)  [Orabug: 39832992]
- x86: Add insn_decode_kernel() (Peter Zijlstra)  [Orabug: 39832992]
- x86/insn: Add an insn_decode() API (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Merge include files (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross)  [Orabug: 39832992]
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky)  [Orabug: 39832992]
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik)  [Orabug: 39832992]
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry)  [Orabug: 39832992]
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov)  [Orabug: 39832992]
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra)  [Orabug: 39832992]
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39832997]