Early Access — Mondoo Vulnerability Intelligence is currently in preview.

ELSA-2026-50005

UNKNOWN

ELSA-2026-50005: Unbreakable Enterprise kernel security update (IMPORTANT)

Published Jan 12, 2026

Modified 3 days ago

Fix available

Details

[5.4.17-2136.351.3.1]

fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38787139] {CVE-2025-40271}

[5.4.17-2136.351.3]

Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha) [Orabug: 38715366]
fbcon: fix integer overflow in font allocation (Samasth Norway Ananda) [Orabug: 38702507]
uek-rpm: Replace check-kabi tool with kabi (Yifei Liu) [Orabug: 38673382]
uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu) [Orabug: 38673382]

[5.4.17-2136.351.2]

uek-rpm: kabi: Remove the kabi protection for debug kernels (Yifei Liu) [Orabug: 38609548]
rds: Add smp_rmb before reading c_destroy_in_prog (Hakon Bugge) [Orabug: 38352486]
uio_hv_generic: Set event for all channels on the device (Long Li)
ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)

[5.4.17-2136.351.1]

scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [Orabug: 38630482]

Affected Packages

OracleLinux:7kernel-uek

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-container

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-container-debug

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-debug

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-debug-devel

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-devel

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-doc

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:7kernel-uek-tools

Fixed in:

0:5.4.17-2136.351.3.1.el7uek

OracleLinux:8kernel-uek

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

OracleLinux:8kernel-uek-container

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

OracleLinux:8kernel-uek-container-debug

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

OracleLinux:8kernel-uek-debug

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

OracleLinux:8kernel-uek-debug-devel

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

OracleLinux:8kernel-uek-devel

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

OracleLinux:8kernel-uek-doc

Fixed in:

0:5.4.17-2136.351.3.1.el8uek

Related

Ecosystems

OracleLinux 7 OracleLinux 8

Timeline

PublishedJan 12, 2026

ModifiedJan 12, 2026

ELSA-2026-50005 | Mondoo Vulnerability Intelligence