Detections
Analytics

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500150)

medium Nessus Plugin ID 334160

Synopsis

The remote Oracle Linux host is missing one or more security updates.

Description

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500150 advisory.

 - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39844812] {CVE-2026-68480}
 - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson) [Orabug: 39844799] {CVE-2026-64561}
 - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [Orabug: 39816011] {CVE-2026-64531}
 - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [Orabug: 39262397] {CVE-2026-31663}
 - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim) [Orabug: 39531622] {CVE-2026-46316}
 - ipv6: account for fraggap on the paged allocation path (Wongi Lee) [Orabug: 39686467] {CVE-2026-53362}
 - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug:
 39673856,39686459] {CVE-2026-53359}
 - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug:
 39567285,39668752] {CVE-2026-46331}
 - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet) [Orabug: 39567285] {CVE-2026-46331}
 - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - eventpoll: split __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
 - md: fix array_state=clear sysfs deadlock (Yu Kuai) [Orabug: 39190489,39668924] {CVE-2026-53125}
 - md: avoid repeated calls to del_gendisk (Xiao Ni) [Orabug: 39190489,39668918] {CVE-2025-68373}
 - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug:
 39619387,39639984,39656679] {CVE-2026-52943}
 - net/mlx5: Fix crash when moving to switchdev mode (Patrisious Haddad) [Orabug: 38667152,39344020] {CVE-2026-43467}
 - net/mlx5: Fix double unregister of HCA_PORTS component (Gerd Bayer) [Orabug: 38667152,39590860] {CVE-2025-68790}
 - net/mlx5: Fix IPsec cleanup over MPV device (Patrisious Haddad) [Orabug: 38667152,38730559] {CVE-2025-40238}
 - net/mlx5: HWS, fix complex rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152,39590850] {CVE-2025-39768}
 - macsec: sync features on RTM_NEWLINK (Stanislav Fomichev) [Orabug: 38667152,39590858] {CVE-2025-39874}
 - net: dev_ioctl: take ops lock in hwtstamp lower paths (Carolina Jubran) [Orabug: 38667152,39590854] {CVE-2025-39908}
 - team: replace team lock with rtnl lock (Stanislav Fomichev) [Orabug: 38667152,39590857] {CVE-2025-39733}
 - net: prevent a NULL deref in rtnl_create_link() (Eric Dumazet) [Orabug: 38667152,39590851] {CVE-2025-38271}
 - virtio-pci: Fix result size returned for the admin command completion (Israel Rukshin) [Orabug:
 38667152,39590859] {CVE-2025-38314}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://linux.oracle.com/errata/ELSA-2026-500150.html

Plugin Details

Severity: Medium

ID: 334160

File Name: oraclelinux_ELSA-2026-500150.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 8/10/2026

Updated: 8/10/2026

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9

Percentile: 99.75

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-53125

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:oracle:linux:10, cpe:/o:oracle:linux:9, p-cpe:/a:oracle:linux:kernel-uek-core, p-cpe:/a:oracle:linux:kernel-uek-debug-core, p-cpe:/a:oracle:linux:kernel-uek-debug-devel, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-core, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-deprecated, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-desktop, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-extra-netfilter, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-extra, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-usb, p-cpe:/a:oracle:linux:kernel-uek-debug-modules-wireless, p-cpe:/a:oracle:linux:kernel-uek-debug-modules, p-cpe:/a:oracle:linux:kernel-uek-debug, p-cpe:/a:oracle:linux:kernel-uek-devel, p-cpe:/a:oracle:linux:kernel-uek-doc, p-cpe:/a:oracle:linux:kernel-uek-modules-core, p-cpe:/a:oracle:linux:kernel-uek-modules-deprecated, p-cpe:/a:oracle:linux:kernel-uek-modules-desktop, p-cpe:/a:oracle:linux:kernel-uek-modules-extra-netfilter, p-cpe:/a:oracle:linux:kernel-uek-modules-extra, p-cpe:/a:oracle:linux:kernel-uek-modules-usb, p-cpe:/a:oracle:linux:kernel-uek-modules-wireless, p-cpe:/a:oracle:linux:kernel-uek-modules, p-cpe:/a:oracle:linux:kernel-uek-tools, p-cpe:/a:oracle:linux:kernel-uek64k-core, p-cpe:/a:oracle:linux:kernel-uek64k-devel, p-cpe:/a:oracle:linux:kernel-uek64k-modules-core, p-cpe:/a:oracle:linux:kernel-uek64k-modules-deprecated, p-cpe:/a:oracle:linux:kernel-uek64k-modules-desktop, p-cpe:/a:oracle:linux:kernel-uek64k-modules-extra-netfilter, p-cpe:/a:oracle:linux:kernel-uek64k-modules-extra, p-cpe:/a:oracle:linux:kernel-uek64k-modules-usb, p-cpe:/a:oracle:linux:kernel-uek64k-modules-wireless, p-cpe:/a:oracle:linux:kernel-uek64k-modules, p-cpe:/a:oracle:linux:kernel-uek64k, p-cpe:/a:oracle:linux:kernel-uek

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/8/2026

Vulnerability Publication Date: 7/10/2025

Reference Information

CVE: CVE-2025-38271, CVE-2025-38314, CVE-2025-39733, CVE-2025-39768, CVE-2025-39874, CVE-2025-39908, CVE-2025-40238, CVE-2025-68373, CVE-2025-68790, CVE-2026-31663, CVE-2026-43467, CVE-2026-46242, CVE-2026-46316, CVE-2026-46331, CVE-2026-52943, CVE-2026-53125, CVE-2026-53359, CVE-2026-53362, CVE-2026-64531, CVE-2026-64561, CVE-2026-68480