[El-errata] ELSA-2026-50142 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-50142

http://linux.oracle.com/errata/ELSA-2026-50142.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.353.3.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.353.3.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.353.3.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.353.3.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.353.3.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.353.3.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.353.3.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.353.3.el8uek.src.rpm

Related CVEs:

CVE-2025-40215




Description of changes:

[5.4.17-2136.353.3]
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca)  [Orabug: 38934000]
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca)  [Orabug: 38934000]
- Revert "xfrm: destroy xfrm_state synchronously on net exit path" (Sabrina Dubroca)  [Orabug: 38934000]
- Revert "IB/mlx5: Implement clear counters" (Sharath Srinivasan)  [Orabug: 38923520]
- Revert "IB/core: Implement clear counters" (Sharath Srinivasan)  [Orabug: 38923520]
- Revert "ib/core: add SET_DEVICE_OP call for clear_hw_stats()" (Sharath Srinivasan)  [Orabug: 38923520]
- fs: proc: inode: delay put_pid() by RCU (Stephen Brennan)  [Orabug: 38766812]

[5.4.17-2136.353.2]
- Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" (Jiri Olsa)  [Orabug: 38893604]
- xfrm: delete x->tunnel as we delete x (Sabrina Dubroca)  [Orabug: 38730493]  {CVE-2025-40215}