[El-errata] ELSA-2026-50319 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-50319

http://linux.oracle.com/errata/ELSA-2026-50319.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-203.76.7.5.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.5.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-203.76.7.5.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-doc-6.12.0-203.76.7.5.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-203.76.7.5.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-203.76.7.5.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-203.76.7.5.el9uek.src.rpm

Related CVEs:

CVE-2026-23272
CVE-2026-31419
CVE-2026-31504
CVE-2026-31533
CVE-2026-31657
CVE-2026-31669
CVE-2026-43037
CVE-2026-43074
CVE-2026-43499
CVE-2026-46116




Description of changes:

[6.12.0-203.76.7.5]
- uek-rpm: avoid final module link in early FIPS symvers pass (Sherry Yang)  [Orabug: 39563330]
- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso)  [Orabug: 39562729]  {CVE-2026-23272}

[6.12.0-203.76.7.4]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei)  [Orabug: 39556377]  {CVE-2026-31419}
- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini)  [Orabug: 39556391]  {CVE-2026-43074}
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39556388]  {CVE-2026-31657}
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)  [Orabug: 39556386]  {CVE-2026-31533}
- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)  [Orabug: 39556381]  {CVE-2026-31669}
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39556380]  {CVE-2026-31504}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39556379]  {CVE-2026-43499}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek)  [Orabug: 39556375]  {CVE-2026-46116}
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39556341]  {CVE-2026-43037}