vulnerability

Oracle Linux: CVE-2021-26931: ELSA-2021-9051: Unbreakable Enterprise kernel security update (IMPORTANT) (Multiple Advisories)

Severity
2
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:P)
Published
Feb 17, 2021
Added
Feb 20, 2021
Modified
Dec 3, 2025

Description

An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.

Solution

oracle-linux-upgrade-kernel-uek

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.