[El-errata] ELSA-2026-500385 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-500385

http://linux.oracle.com/errata/ELSA-2026-500385.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-325.221.6.2.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-325.221.6.2.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-325.221.6.2.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-325.221.6.2.el9uek.src.rpm

Related CVEs:

CVE-2026-46242
CVE-2026-89560
CVE-2026-97419
CVE-2026-97438
CVE-2026-97964
CVE-2026-97998
CVE-2026-98023
CVE-2026-98078
CVE-2026-98096




Description of changes:

[5.15.0-325.221.6.2]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner)  [Orabug: 39784995]  {CVE-2026-46242}
- eventpoll: move epi_fget() up (Christian Brauner)  [Orabug: 39784995]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner)  [Orabug: 39784995]
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner)  [Orabug: 39784995]
- eventpoll: kill __ep_remove() (Christian Brauner)  [Orabug: 39784995]
- eventpoll: split __ep_remove() (Christian Brauner)  [Orabug: 39784995]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner)  [Orabug: 39784995]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds)  [Orabug: 39784995]
- file: add fput() cleanup helper (Christian Brauner)  [Orabug: 39784995]
- landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (Günther Noack)  [Orabug: 40021203]  {CVE-2026-89560}
- ppp_synctty: ensure a writeable skb header (Qingfang Deng)  [Orabug: 40079220]  {CVE-2026-97964}
- netfilter: nfnetlink_log: cope with concurrent instance destruction (Florian Westphal)  [Orabug: 40079360]  {CVE-2026-97998}
- vxlan: reject dynamic fdb entries that reference a nexthop id (Seungwon Bae)  [Orabug: 40079448]  {CVE-2026-98023}
- ipvs: fix reversed sequence option serialization (Kyle Zeng)  [Orabug: 40079626]  {CVE-2026-98078}
- ipv6: sr: restore network header before routing and forwarding (Eric Dumazet)  [Orabug: 40079700]  {CVE-2026-98096}
- hsr: broadcast netlink notifications in the device's net namespace (Maoyi Xie)  [Orabug: 40073495]  {CVE-2026-97419}
- fs/ntfs3: validate index entry key bounds (ZhengYuan Huang)  [Orabug: 40073603]  {CVE-2026-97438}