oracle_linux ELSA-2026-500587: ELSA-2026-500587: Unbreakable Enterprise kernel security update (IMPORTANT)

oracle_linux ELSA-2026-500589: ELSA-2026-500589: Unbreakable Enterprise kernel security update (IMPORTANT)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500589 advisory.

    - iommu/amd: Force device table to maximum size (Suravee Suthikulpanit)  [Orabug: 40172712]     {CVE-2024-21963}
    - drbd: fix 'LOGIC BUG' in drbd_al_begin_io_nonblock() (Lars Ellenberg)  [Orabug: 39130967]     {CVE-2026-23356}
    - ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin)  [Orabug: 40165812]     {CVE-2026-99999}
    - ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet)  [Orabug: 40165790]     {CVE-2026-98432}
    - vhost: reset the vring metadata cache on vring reconfiguration (Jun Yang)  [Orabug: 39917526]     {CVE-2026-74580}
    - net: tun: bound receive headroom (Asim Viladi Oglu Manizada)  [Orabug: 40020673]  {CVE-2026-81000}
    - xfrm: ah6: validate routing header segments_left (Asim Viladi Oglu Manizada)  [Orabug: 39982188]     {CVE-2026-80844}
    - inet: frags: strip GSO state from fragments before reassembly (Xinyang Ge)  [Orabug: 39972532]     {CVE-2026-80590}
    - sctp: prevent peer transport count overflow (Asim Viladi Oglu Manizada)  [Orabug: 39886843]     {CVE-2026-74469}
    - pppoe: reload header pointer after dev_hard_header() (Asim Viladi Oglu Manizada)  [Orabug: 39859408]     {CVE-2026-68121}
    - crypto: ecc - Fix carry overflow in vli multiplication (Anastasia Tishchenko) [Orabug: 39785911]     {CVE-2026-64313}
    - crypto: pcrypt - restore callback for non-parallel fallback (Ruijie Li) [Orabug: 39785907]     {CVE-2026-64312}
    - crypto: drbg - Fix returning success on failure in CTR_DRBG (Eric Biggers) [Orabug: 39785894]     {CVE-2026-64306}
    - KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug:
    39273524] {CVE-2026-31588}
    - xfrm: clear trailing padding in build_polexpire() (Yasuaki Torimaru) [Orabug: 39262403] {CVE-2026-31664}
    - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko) [Orabug: 39262395] {CVE-2026-31662}
    - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Moller)     [Orabug: 39167519] {CVE-2026-23457}
    - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [Orabug: 39167511]     {CVE-2026-23455}
    - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov) [Orabug: 39784513,39853776]     {CVE-2026-68480}
    - x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner) [Orabug:
    39784513] {CVE-2026-68480}
    - x86/alternative: Support relocations in alternatives (Peter Zijlstra) [Orabug: 39784513]     {CVE-2026-68480}
    - x86/alternative: Make debug-alternative selective (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternatives: Add alt_instr.flags (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
    - x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov) [Orabug: 39784513]     {CVE-2026-68480}
    - x86/alternative: Align insn bytes vertically (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}     (H Peter Anvin) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternatives: Optimize optimize_nops() (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
    - x86: Add insn_decode_kernel() (Peter Zijlstra) [Orabug: 39784513] {CVE-2026-68480}
    - x86/insn: Add an insn_decode() API (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross) [Orabug: 39784513]     {CVE-2026-68480}
    - x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternative: Merge include files (Juergen Gross) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross) [Orabug:
    39784513] {CVE-2026-68480}
    - x86/insn: Support big endian cross-compiles (Martin Schwidefsky) [Orabug: 39784513] {CVE-2026-68480}
    - x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik) [Orabug: 39784513]     {CVE-2026-68480}
    - tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo) [Orabug:
    39784513] {CVE-2026-68480}
    - perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik) [Orabug: 39784513]     {CVE-2026-68480}
    - objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik) [Orabug: 39784513] {CVE-2026-68480}
    - objtool: Make relocation in alternative handling arch dependent (Julien Thierry) [Orabug: 39784513]     {CVE-2026-68480}
    - x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov) [Orabug: 39784513] {CVE-2026-68480}
    - tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de     Melo) [Orabug: 39784513] {CVE-2026-68480}
    - x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [Orabug: 39784513]     {CVE-2026-68480}
    - tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug:
    39784513] {CVE-2026-68480}
    - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug:
    39558751,39919265] {CVE-2026-74684}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500587 advisory.

    - iommu/amd: Force device table to maximum size (Suravee Suthikulpanit)  [Orabug: 40172716]     {CVE-2024-21963}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500588 advisory.

    - Fix TSA microcode check for ZEN5 (Dave Kleikamp)  [Orabug: 40172717]  {CVE-2024-36350} {CVE-2024-36357}     {CVE-2026-0004}
    - Fix Zen5 TSA (Borislav Petkov (AMD))  [Orabug: 40172717]  {CVE-2024-36350} {CVE-2024-36357}     {CVE-2026-0004}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500590 advisory.

    - Fix TSA microcode check for ZEN5 (Dave Kleikamp)  [Orabug: 40172717]  {CVE-2024-36350} {CVE-2024-36357}     {CVE-2026-0004}
    - Fix Zen5 TSA (Borislav Petkov (AMD))  [Orabug: 40172717]  {CVE-2024-36350} {CVE-2024-36357}     {CVE-2026-0004}
    - iommu/amd: Force device table to maximum size (Suravee Suthikulpanit)  [Orabug: 40172717]     {CVE-2024-21963}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
378502	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500589)	Nessus	Oracle Linux Local Security Checks	Local	high
378501	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500587)	Nessus	Oracle Linux Local Security Checks	Local	medium
378194	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500588)	Nessus	Oracle Linux Local Security Checks	Local	medium
378193	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500590)	Nessus	Oracle Linux Local Security Checks	Local	medium

Detections

Analytics

CVE-2024-21963

high

Tenable Plugins

Coming Soon

high

medium

medium

medium