[El-errata] New Ksplice updates for RHCK 10 (ELSA-2026-19074)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Sun Aug 30 08:12:26 UTC 2026 

Synopsis: ELSA-2026-19074 can now be patched using Ksplice
CVEs: CVE-2025-23163 CVE-2025-37921 CVE-2025-38018 CVE-2025-38075 CVE-2025-38111 CVE-2025-38181 CVE-2025-38222 CVE-2025-38305 CVE-2025-38310 CVE-2025-38342 CVE-2025-38387 CVE-2025-38399 CVE-2025-38445 CVE-2025-38461 CVE-2025-38466 CVE-2025-38473 CVE-2025-38494 CVE-2025-38495 CVE-2025-38509 CVE-2025-38512 CVE-2025-38587 CVE-2025-38588 CVE-2025-38590 CVE-2025-38616 CVE-2025-38617 CVE-2025-38618 CVE-2025-38622 CVE-2025-38685 CVE-2025-38688 CVE-2025-38728 CVE-2025-38732 CVE-2025-39703 CVE-2025-39782 CVE-2025-39791 CVE-2025-39823 CVE-2025-39855 CVE-2025-39860 CVE-2025-39866 CVE-2025-39922 CVE-2025-39926 CVE-2025-39963 CVE-2025-39977 CVE-2025-40018 CVE-2025-40026 CVE-2025-40038 CVE-2025-40080 CVE-2025-40129 CVE-2025-40153 CVE-2025-40159 CVE-2025-40173 CVE-2025-40187 CVE-2025-40206 CVE-2025-40212 CVE-2025-40231 CVE-2025-40273 CVE-2025-40280 CVE-2025-40281 CVE-2025-40297 CVE-2025-68182 CVE-2025-68215 CVE-2025-68295 CVE-2025-68764 CVE-2025-68775 CVE-2025-68776 CVE-2025-68813 CVE-2025-71068 CVE-2025-71120 CVE-2025-71131 CVE-2026-22979 CVE-2026-23050 CVE-2026-23053 CVE-2026-23111 CVE-2026-23173 CVE-2026-23216 CVE-2026-23243 CVE-2026-43304

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-19074.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-19074.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running RHCK 10 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2025-23163: Deadlock in 802.1Q/802.1ad VLAN Support.

* CVE-2025-37921: Deadlock in Virtual eXtensible Local Area Network (VXLAN) driver.

* CVE-2025-38018: Null pointer dereference in Transport Layer Security driver.

* CVE-2025-38075: Null pointer dereference in iSCSI Target Mode Stack driver.

* CVE-2025-38111: Out-of-bounds memory usage in MDIO bus driver.

* CVE-2025-38181: NULL pointer dereference in NetLabel subsystem.

* CVE-2025-38222: Integer overflow in ext4 filesystem.

* CVE-2025-38305: Deadlock in Precision Time Protocol (PTP) driver.

* CVE-2025-38310: Out-of-bounds memory access in IPv6 Segment Routing Header encapsulation driver.

* CVE-2025-38342: Out-of-bounds memory access in software node component.

* CVE-2025-38387: Null pointer dereference in Mellanox MLX5 InfiniBand driver.

* CVE-2025-38399: Null pointer dereference in Generic Target Core Mod (TCM) and ConfigFS Infrastructure driver.

* CVE-2025-38445: Kernel panic in RAID-1 (mirroring) mode driver.

* CVE-2025-38461: Denial-of-service in Virtual Socket protocol driver.

* CVE-2025-38466: Overly permissive privilege checks in Kernel performance events and counters driver.

* CVE-2025-38473: Null pointer dereference in Bluetooth subsystem.

* CVE-2025-38494, CVE-2025-38495: Out-of-bounds memory access in HID bus driver.

* CVE-2025-38509: Kernel assertion failure in Generic IEEE 802.11 Networking Stack (mac80211) driver.

* CVE-2025-38512: Missing check for A-MSDU attacks in Wireless driver.

* CVE-2025-38587: Infinite loop in IPV6 subsystem.

* CVE-2025-38588: Infinite loop in IPV6 subsystem.

* CVE-2025-38590: Kernel oops in Mellanox devices driver.

* CVE-2025-38616: Out-of-bounds memory access in TLS networking stack.

* CVE-2025-38617: Racing in raw-packet protocol stack.

* CVE-2025-38618: Use-after-free in Virtual Socket protocol driver.

* CVE-2025-38622: Kernel oops in UDP networking stack.

* CVE-2025-38685: Out-of-bounds memory access in frame buffer device driver.

* CVE-2025-38688: Out-of-bounds memory access in Generic IOMMU driver.

* CVE-2025-38728: Out-of-bounds memory access in SMB/CIFS client driver.

* CVE-2025-38732: Memory leak in Netfilter packet rejection driver.

* CVE-2025-39703: Kernel panic in High-availability Seamless Redundancy (HSR & PRP) driver.

* CVE-2025-39782: Soft lockup in JBD2 filesystem.

* CVE-2025-39791: Deadlock in Crypt target driver.

* CVE-2025-39823: Out-of-bounds access in the KVM subsystem.

* CVE-2025-39855: Null pointer dereference in Intel(R) Ethernet Connection E800 Series driver.

* CVE-2025-39860: Use-after-free in Bluetooth subsystem.

* CVE-2025-39866: Use-after-free in writeback filesystem logic.

* CVE-2025-39922: Use-after-free in Intel(R) 10GbE PCI Express adapters driver.

* CVE-2025-39926: Undefined behavior in Generic Netlink Family driver.

* CVE-2025-39963: Reference counting error in IO uring driver.

* CVE-2025-39977: Use-after-free in futex driver.

* CVE-2025-40018: Use-after-free in IP virtual server (FTP) driver.

* CVE-2025-40026: Kernel crash in KVM x86 subsystem.

* CVE-2025-40038: Kernel assertion failure in KVM.

* CVE-2025-40080: Undefined behavior in Network block device driver.

* CVE-2025-40129: Null pointer dereference in SUNRPC_GSS.

* CVE-2025-40153: Soft lockup in HugeTLB filesystem.

* CVE-2025-40159: Integer overflow in XDP sockets driver.

* CVE-2025-40173: Use-after-free in IPv6 networking stack.

* CVE-2025-40187: Null pointer dereference in SCTP Protocol driver.

* CVE-2025-40206: Kernel crash in Netfilter driver.

* CVE-2025-40212: Reference count leak in NFS server driver.

* CVE-2025-40231: Deadlock in Virtual Socket protocol driver.

* CVE-2025-40273: Kernel oops in NFS server for NFS version 4 driver.

* CVE-2025-40280: Use-after-free in TIPC Protocol driver.

* CVE-2025-40281: Out-of-bounds memory access in SCTP Protocol driver.

* CVE-2025-40297: Use-after-free in 802.1d Ethernet Bridging driver.

* CVE-2025-68182: Use-after-free in Intel Wireless WiFi MLD Firmware driver.

* CVE-2025-68215: Kernel oops in PTP clock driver.

* CVE-2025-68295: Memory leak in SMB/CIFS client driver.

* CVE-2025-68764: Insufficient privilege checks in NFS client driver.

* CVE-2025-68775: Use-after-free in Generic netlink handshake service.

* CVE-2025-68776: Null pointer dereference in High-availability Seamless Redundancy (HSR & PRP) driver.

* CVE-2025-68813: Null pointer dereference in IP virtual server driver.

* CVE-2025-71068: Out-of-bounds memory access in RPC-over-RDMA transport driver.

* CVE-2025-71120: Null pointer dereference in SunRPC GSS.

* CVE-2025-71131: Use-after-free in Sequence Number IV Generator driver.

* CVE-2026-22979: Memory leak in TCP/IP networking driver.

* CVE-2026-23050: Deadlock in NFS client driver.

* CVE-2026-23053: Deadlock in NFS client driver.

* CVE-2026-23111: Use-after-free in Netfilter driver.

* CVE-2026-23173: Null pointer dereference in MLX5 TC classifier action driver.

* CVE-2026-23216: Use-after-free in SCSI Target Mode Stack driver.

* CVE-2026-23243: Out-of-bounds memory access in InfiniBand driver.

* CVE-2026-43304: Out-of-bounds memory access in Ceph core library driver.

* Logic error in Transport Layer Security driver.

* Use of uninitialized memory in Transport Layer Security driver.

* Note: Oracle has determined some CVEs are not applicable.

The kernel is not affected by the following CVEs
since the code under consideration is not compiled.

CVE-2024-47408, CVE-2024-48875, CVE-2024-49568, CVE-2024-49571,
CVE-2024-50051, CVE-2024-53161, CVE-2024-53186, CVE-2024-55639,
CVE-2024-56573, CVE-2024-56581, CVE-2024-56626, CVE-2024-56627,
CVE-2024-56640, CVE-2024-56641, CVE-2024-56679, CVE-2024-56707,
CVE-2024-56718, CVE-2024-56725, CVE-2024-56726, CVE-2024-56727,
CVE-2024-56728, CVE-2024-56758, CVE-2024-56759, CVE-2024-56774,
CVE-2024-57791, CVE-2024-57806, CVE-2024-57852, CVE-2024-57895,
CVE-2024-57896, CVE-2024-57923, CVE-2024-57925, CVE-2024-57975,
CVE-2024-57985, CVE-2024-58084, CVE-2024-58087, CVE-2025-21658,
CVE-2025-21660, CVE-2025-21748, CVE-2025-21754, CVE-2025-21793,
CVE-2025-21942, CVE-2025-21944, CVE-2025-21945, CVE-2025-21946,
CVE-2025-21947, CVE-2025-21967, CVE-2025-21994, CVE-2025-21998,
CVE-2025-22033, CVE-2025-22037, CVE-2025-22038, CVE-2025-22039,
CVE-2025-22040, CVE-2025-22041, CVE-2025-22042, CVE-2025-22043,
CVE-2025-22067, CVE-2025-22074, CVE-2025-22095, CVE-2025-22115,
CVE-2025-23140, CVE-2025-37775, CVE-2025-37776, CVE-2025-37778,
CVE-2025-37801, CVE-2025-37802, CVE-2025-37827, CVE-2025-37846,
CVE-2025-37851, CVE-2025-37899, CVE-2025-37924, CVE-2025-37931,
CVE-2025-37947, CVE-2025-37952, CVE-2025-37956, CVE-2025-37962,
CVE-2025-38005, CVE-2025-38043, CVE-2025-38059, CVE-2025-38069,
CVE-2025-38081, CVE-2025-38092, CVE-2025-38138, CVE-2025-38155,
CVE-2025-38156, CVE-2025-38158, CVE-2025-38168, CVE-2025-38169,
CVE-2025-38170, CVE-2025-38191, CVE-2025-38260, CVE-2025-38269,
CVE-2025-38275, CVE-2025-38278, CVE-2025-38281, CVE-2025-38283,
CVE-2025-38295, CVE-2025-38316, CVE-2025-38317, CVE-2025-38318,
CVE-2025-38320, CVE-2025-38326, CVE-2025-38336, CVE-2025-38343,
CVE-2025-38365, CVE-2025-38376, CVE-2025-38381, CVE-2025-38382,
CVE-2025-38390, CVE-2025-38428, CVE-2025-38429, CVE-2025-38437,
CVE-2025-38469, CVE-2025-38475, CVE-2025-38479, CVE-2025-38489,
CVE-2025-38501, CVE-2025-38503, CVE-2025-38507, CVE-2025-38535,
CVE-2025-38555, CVE-2025-38561, CVE-2025-38562, CVE-2025-38575,
CVE-2025-38576, CVE-2025-38581, CVE-2025-38586, CVE-2025-38599,
CVE-2025-38610, CVE-2025-38625, CVE-2025-38630, CVE-2025-38648,
CVE-2025-38662, CVE-2025-38670, CVE-2025-38734, CVE-2025-39676,
CVE-2025-39692, CVE-2025-39720, CVE-2025-39736, CVE-2025-39737,
CVE-2025-39738, CVE-2025-39739, CVE-2025-39783, CVE-2025-39796,
CVE-2025-39801, CVE-2025-39836, CVE-2025-39857, CVE-2025-39869,
CVE-2025-39884, CVE-2025-39904, CVE-2025-39923, CVE-2025-39935,
CVE-2025-39937, CVE-2025-39938, CVE-2025-39939, CVE-2025-39944,
CVE-2025-39952, CVE-2025-39958, CVE-2025-39978, CVE-2025-40013,
CVE-2025-40045, CVE-2025-40076, CVE-2025-40081, CVE-2025-40084,
CVE-2025-40100, CVE-2025-40101, CVE-2025-40102, CVE-2025-40117,
CVE-2025-40155, CVE-2025-40209, CVE-2025-40235, CVE-2025-40262,
CVE-2025-40263, CVE-2025-40266, CVE-2025-40282, CVE-2025-40285,
CVE-2025-40286, CVE-2025-40303, CVE-2025-40317, CVE-2025-40353,
CVE-2025-68217, CVE-2025-68222, CVE-2025-68246, CVE-2025-68263,
CVE-2025-68344, CVE-2025-68346, CVE-2025-68347, CVE-2025-68743,
CVE-2025-68747, CVE-2025-68748, CVE-2025-68753, CVE-2025-68757,
CVE-2025-68786, CVE-2025-68806, CVE-2025-68809, CVE-2025-68817,
CVE-2025-71119, CVE-2025-71150, CVE-2025-71153, CVE-2025-71204,
CVE-2025-71220, CVE-2025-71223, CVE-2026-23070, CVE-2026-43416,
CVE-2026-45904, CVE-2025-38639, CVE-2025-21753, CVE-2025-37856,
CVE-2025-38326, CVE-2025-38620, CVE-2025-39919, CVE-2025-68778,
CVE-2025-40352, CVE-2025-37801, CVE-2025-68817, CVE-2026-23045,
CVE-2025-21947, CVE-2025-39759, CVE-2025-40013, CVE-2025-38243,
CVE-2024-58089, CVE-2026-23042, CVE-2025-40175, CVE-2025-37842,
CVE-2025-39921, CVE-2025-39893, CVE-2025-68746, CVE-2026-23202,
CVE-2025-22037, CVE-2025-37926, CVE-2025-21879, CVE-2025-40039,
CVE-2025-40090, CVE-2025-37746, CVE-2025-37896, CVE-2025-38398,
CVE-2025-37777, CVE-2025-38325, CVE-2025-68246, CVE-2025-40066,
CVE-2025-38388, CVE-2025-39943, CVE-2025-39942, CVE-2026-23207,
CVE-2025-40184, CVE-2025-21955, CVE-2025-71081, CVE-2025-37947,
CVE-2025-21679, CVE-2025-68205, CVE-2025-40087, CVE-2025-40205


SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.

More information about the El-errata mailing list