Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Oracle Linux 9 ELSA-2026-50133 Kernel Important Buffer Overflow Risk

oracle
Calendar Grey March 9, 2026
Oracle Linux Logo Esm H88
Oracle Linux 9 sec update addresses important kernel issues, including potential buffer overflow and remote access concerns.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[5.15.0-317.197.5.2] - xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 39016261] - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 39016261] - Revert "xfrm: destroy xfrm_state synchronously on net exit path" (Sabrina Dubroca) [Orabug: 39016261] - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [Orabug: 39016219] {CVE-2025-40149} - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala) [Orabug: 39016219] [5.15.0-317.197.5.1] - Revert "net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn" (Vijayendra Suman) [Orabug: 38961010] - Revert "net/rds: expand kref coverage to rds_notifier->n_conn" (Sharath Srinivasan) [Orabug: 38961010] [5.15.0-317.197.5] - KVM: x86: conditionally clear masterclock request for uek=exadata (Dongli Zhang) [Orabug: 38801641] - Partial backport of "KVM: x86: Fix software TSC upsc...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory buffer overflow remote access important kernel Oracle Linux

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-317.197.5.2.el9uek.src.rpm

x86_64

aarch64

bpftool-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-container-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-container-debug-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-core-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-debug-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-debug-core-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-debug-devel-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-debug-modules-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-debug-modules-extra-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-devel-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-doc-5.15.0-317.197.5.2.el9uek.noarch.rpm kernel-uek-modules-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek-modules-extra-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek64k-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek64k-core-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek64k-devel-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek64k-modules-5.15.0-317.197.5.2.el9uek.aarch64.rpm kernel-uek64k-modules-extra-5.15.0-317.197.5.2.el9uek.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2025-40149 CVE-2025-40256

Topics%20covered

Topics Covered

security advisory buffer overflow remote access important kernel Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here