[El-errata] New Ksplice updates for RHCK 9 (ELSA-2026-45192)

[Errata Announcements for Oracle Linux]

Synopsis: ELSA-2026-45192 can now be patched using Ksplice
CVEs: CVE-2025-40026 CVE-2026-46201 CVE-2026-46224 CVE-2026-52950 CVE-2026-52951 CVE-2026-52976 CVE-2026-53006 CVE-2026-63807 CVE-2026-64561 CVE-2026-64562 CVE-2026-68081

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-45192.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-45192.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running RHCK 9 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2025-40026: Kernel crash in KVM x86 subsystem.

* CVE-2026-46201, CVE-2026-46224, CVE-2026-52950, CVE-2026-52951: Use-after-free in Intel Xe2 Graphics driver.

* CVE-2026-52976: Use-after-free in Xe driver.

* CVE-2026-53006: Use-after-free in Networking driver.

* CVE-2026-63807: Kernel oops in KVM.

* CVE-2026-64561: Use-after-free in KVM shadow pages handling.

* CVE-2026-64562: Race condition in KVM.

* CVE-2026-68081: Information leak in VMX nested virtualization driver.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.