Best Of
Re: Mitigation for CVE-2026-31431
I would encourage you to raise a service request with Oracle Linux support to get an official response about the mitigation.
Re: Mitigation for CVE-2026-31431
Hi,
Generally, mitigations suggested by Red Hat are directly applicable to Oracle Linux when running the Red Hat Compatible Kernel (RHCK). However, the Unbreakable Enterprise Kernel (UEK) utilizes a substantially different codebase and contains distinct features optimized by Oracle. Therefore, Red Hat's specific workarounds or mitigations may not always apply directly to UEK, or they might have different system impacts.
To provide you with an accurate technical assessment and to check if Oracle has verified a specific mitigation for this CVE on your exact environment, we need more details. Could you please specify the OS version and the exact UEK version you are using?
Regards,
asahide
Re: Mitigation for CVE-2026-31431
Oracle Linux has shipped an urgent fix for the "copy.fail" bug, aka CVE-2026-31431. Fixed kernel versions:
UEK8: 6.12.0-201.74.2.2
UEK7: 5.15.0-319.201.4.4
UEK6: 5.4.17-2136.354.4.2
Systems should update to these kernels either by RPM plus reboot, or via Oracle Ksplice updates, ASAP.
NOTE: This bug can lead to compromise across containers running on the same host. All container hosts including Kubernetes nodes should apply the RPM, or workaround, and reboot the worker node as soon as possible. If the Ksplice update method is used on a container host (no reboot), all containers should still be restarted to ensure they are not in a compromised state.
For cases where updating the kernel and rebooting is not yet possible, there is a workaround usable immediately, and note that it will still require a reboot.
Because Oracle Linux kernels do not ship the "algif_aead" module as a separately loaded module (it's built-in to the core kernel code), you will not see it listed in "lsmod" and commands like "rmmod algif_aead" will not work. That means the publicly-circulated workaround does not work on OL, and the following procedure is needed instead:
To disable the buggy code at boot:sudo grubby --update-kernel=ALL --args=initcall_blacklist=algif_aead_init
and reboot. To revert the workaround later:sudo grubby --update-kernel=ALL --remove-args=initcall_blacklist=algif_aead_init
and reboot again. You can ensure the workaround is in place after reboot by this command:grep initcall_blacklist=algif_aead_init /proc/cmdline
which will show output if the workaround is enabled, and show nothing if it is not enabled.
The workaround should not affect most real-world workloads, as the affected module is meant for hardware cryptography acceleration in embedded systems with dedicated cryptography hardware.
Re: How to enable global attributes from wsh_new_deliveries table to shipping transactions form?
I need these global attribute 16 to 20 because it is having size 2000 char, which is required for me.
Kuldip
Re: Start Single Instance Database in target node
Hi:
[grid@wapdbdevn1 ~]$ crsctl stat res -t
Name Target State Server State details
Local Resources
ora.LISTENER.lsnr
ONLINE ONLINE wapdbdevn0 STABLE
ONLINE ONLINE wapdbdevn1 STABLE
ora.chad
ONLINE ONLINE wapdbdevn0 STABLE
ONLINE ONLINE wapdbdevn1 STABLE
ora.net1.network
ONLINE ONLINE wapdbdevn0 STABLE
ONLINE ONLINE wapdbdevn1 STABLE
ora.ons
ONLINE ONLINE wapdbdevn0 STABLE
ONLINE ONLINE wapdbdevn1 STABLE
Cluster Resources
ora.LISTENER_SCAN1.lsnr
1 ONLINE ONLINE wapdbdevn0 STABLE
ora.LISTENER_SCAN2.lsnr
1 ONLINE ONLINE wapdbdevn1 STABLE
ora.LISTENER_SCAN3.lsnr
1 ONLINE ONLINE wapdbdevn0 STABLE
ora.cvu
1 ONLINE ONLINE wapdbdevn1 STABLE
ora.qosmserver
1 ONLINE ONLINE wapdbdevn1 STABLE
ora.scan1.vip
1 ONLINE ONLINE wapdbdevn0 STABLE
ora.scan2.vip
1 ONLINE ONLINE wapdbdevn1 STABLE
ora.scan3.vip
1 ONLINE ONLINE wapdbdevn0 STABLE
ora.wap_dev.db
1 ONLINE ONLINE wapdbdevn1 Open,HOME=/u01/app/o
racle/product/19.0.0
.0/dbhome_1,STABLE
ora.wapdbdevn0.vip
1 ONLINE ONLINE wapdbdevn0 STABLE
ora.wapdbdevn1.vip
1 ONLINE ONLINE wapdbdevn1 STABLE
[grid@wapdbdevn1 ~]$ crsctl stat res ora.wap_dev.db -f
NAME=ora.wap_dev.db
TYPE=ora.database.type
ACL=owner:oracle:rwx,pgrp:oinstall:r--,other::r--,group:dba:r-x,group:dbaoper:r-x,user:grid:r-x
ACTIONS=relocate_client,group:"dba",group:"dbaoper",user:"grid",user:"oracle" status_target,group:"dba",group:"dbaoper",user:"grid",user:"oracle" listJavaServices,group:"dba",group:"dbaoper",user:"grid",user:"oracle" isPUJSDone,group:"dba",group:"dbaoper",user:"grid",user:"oracle" unmonitor,user:"grid" serviceDrain,group:"dba",group:"dbaoper",user:"grid",user:"oracle" monitor,user:"grid" startoption,group:"dba",group:"dbaoper",user:"grid",user:"oracle"
ACTION_SCRIPT=
ACTION_START_OPTION=
ACTION_TIMEOUT=600
ACTIVE_PLACEMENT=0
AGENT_FILENAME=%CRS_HOME%/bin/oraagent%CRS_EXE_SUFFIX%
ALLOW_RESTART=default
AUTO_START=restore
CARDINALITY=1
CARDINALITY_ID=0
CHECK_INTERVAL=900
CHECK_TIMEOUT=30
CLEAN_TIMEOUT=60
CLUSTER_DATABASE=false
CONFIG_VERSION=1
CSS_CRITICAL=no
DATABASE_TYPE=SINGLE
DB_UNIQUE_NAME=WAP_DEV
DEFAULT_NETNUM=
DELETE_TIMEOUT=60
DESCRIPTION=Oracle Database resource
DISABLED_REASON=
DRAIN_ID=
DRAIN_TIMEOUT=
ENABLED=1
FAILOVER_DELAY=0
FAILURE_INTERVAL=3600
FAILURE_THRESHOLD=4
GEN_AUDIT_FILE_DEST=/u01/app/oracle/admin/WAP_DEV/adump
GEN_RESTART=
GEN_RESTART@SERVERNAME(wapdbdevn0)=StartCompleted
GEN_RESTART@SERVERNAME(wapdbdevn1)=StartCompleted
GEN_START_OPTIONS=
GEN_USR_ORA_INST_NAME=
GEN_USR_ORA_INST_NAME@SERVERNAME(wapdbdevn0)=WAP_DEV
GEN_USR_ORA_INST_NAME@SERVERNAME(wapdbdevn1)=WAP_DEV
HOSTING_MEMBERS=
ID=ora.wap_dev.db
IGNORE_TARGET_ON_FAILURE=no
INSTANCE_COUNT=1
INSTANCE_FAILOVER=1
INTERMEDIATE_TIMEOUT=0
JAVA_SERVICES=
LOAD=1
LOGGING_LEVEL=1
MANAGEMENT_POLICY=AUTOMATIC
MODIFY_TIMEOUT=60
NLS_LANG=
OFFLINE_CHECK_INTERVAL=0
ONLINE_RELOCATION_TIMEOUT=0
ORACLE_HOME=/u01/app/oracle/product/19.0.0.0/dbhome_1
ORACLE_HOME_OLD=
OXR_SECTION=0
PATCH_IN_PROGRESS=false
PLACEMENT=restricted
PWFILE=+DATA/WAP_DEV/PASSWORD/orapwWAP_DEV
RANK=0
RELOCATE_ACTION=0
RELOCATE_BY_DEPENDENCY=1
RELOCATE_KIND=offline
RESOURCE_GROUP=
RESTART_ATTEMPTS=1
RESTART_DELAY=0
ROLE=PRIMARY
SCRIPT_TIMEOUT=60
SERVER_CATEGORY=
SERVER_POOLS=ora.WAP_DEV
SERVER_POOLS_PQ=
SERVER_POOLS_RF=
SERVICE_NAMES=
SPFILE=+DATA/WAP_DEV/PARAMETERFILE/spfile.785.1215090841
START_CONCURRENCY=0
START_DEPENDENCIES=weak(type:ora.listener.type,uniform:ora.ons)
START_DEPENDENCIES_RTE_INTERNAL=<xml><Cond name="isEDV">False</Cond><Cond name="ASMClientMode">True</Cond><Arg name="acfs_or_nfs" type="ResList"></Arg><Cond name="OHResExist">False</Cond><Cond name="DATABASE_TYPE">SINGLE</Cond><Arg name="acfs_and_nfs" type="ResList"></Arg></xml>
START_DEPENDENCIES_TEMPLATE=<xml>hard(<If cond="isEDV" value="True"><Then><Res>{ccmb}</Res>,</Then></If><If cond="ASMClientMode" op="neq" value="True"><Then><If cond="ASMmode" value="remote"><Then><ResList>uniform:global:{dg}</ResList>,</Then><Else><ResList>{dg}</ResList>,</Else></If></Then></If><ResList>{acfs_or_nfs}</ResList><If cond="OHResExist" value="True"><Then>,<Res>{oraclehome}</Res></Then></If>) weak(<If cond="DATABASE_TYPE" op="eql" value="RAC|RACOneNode"><Then>type:ora.listener.type,global:type:ora.scan_listener.type,uniform:ora.ons,global:ora.gns</Then><Else>type:ora.listener.type,uniform:ora.ons</Else></If>) dispersion(<If cond="DATABASE_TYPE" value="RACOneNode"><Then><If cond="DB_CENTRIC" value="False"><Then>type:ora.database.type</Then></If></Then></If>) pullup(<If cond="ASMClientMode" op="neq" value="True"><Then><If cond="MANAGEMENT_POLICY" op="neql" value="MANUAL|NORESTART"><Then><If cond="ASMmode" value="remote"><Then><ResList>global:{dg}</ResList>,</Then><Else><ResList>{dg}</ResList>,</Else></If></Then></If></Then></If><ResList>{acfs_and_nfs}</ResList><If cond="OHResExist" value="True"><Then>,<Res>{oraclehome}</Res></Then></If>)</xml>
START_TIMEOUT=600
STATE=ONLINE
STOP_CONCURRENCY=0
STOP_DEPENDENCIES=
STOP_DEPENDENCIES_RTE_INTERNAL=<xml><Cond name="ASMClientMode">True</Cond><Arg name="nfs" type="Res"></Arg><Cond name="OHResExist">False</Cond><Cond name="isEDV">False</Cond></xml>
STOP_DEPENDENCIES_TEMPLATE=<xml><If cond="ASMClientMode" op="neq" value="True"><Then><If cond="DGExist" value="True"><Then><If cond="ASMmode" value="remote"> <Then>hard(global:intermediate:ora.asm,<ResList>global:shutdown:{dg}</ResList>)</Then> <Else>hard(intermediate:ora.asm,<ResList>shutdown:{dg}</ResList>)</Else> </If></Then> </If>hard(<Res>{acfs_same_as_oh}</Res>,<ResList>intermediate:{acfs}</ResList>)</Then> <Else>hard(intermediate:<Res>{nfs}</Res>)</Else> </If><If cond="OHResExist" value="True"><Then>hard(intermediate: <Res>{oraclehome}</Res>)</Then></If><If cond="isEDV" value="True"><Then>hard(intermediate:<Res>{ccmb}</Res>)</Then></If></xml>
STOP_TIMEOUT=600
TARGET=ONLINE
TARGET_DEFAULT=default
TARGET_NAME=
TARGET_TYPE=
TYPE_VERSION=3.3
UPTIME_THRESHOLD=1h
USER_WORKLOAD=yes
USE_QOS_DATA=no
USE_STICKINESS=0
USR_ORA_DB_NAME=WAP_DEV
USR_ORA_DOMAIN=cpd0.urv.cat
USR_ORA_ENV=ORACLE_BASE=/u01/app/oracle TZ=Europe/Madrid
USR_ORA_FLAGS=
USR_ORA_INST_NAME=WAP_DEV
USR_ORA_OPEN_MODE=open
USR_ORA_OPI=false
USR_ORA_STOP_MODE=immediate
WORKLOAD_CPU=0
WORKLOAD_CPU_CAP=0
WORKLOAD_MEMORY_MAX=0
WORKLOAD_MEMORY_TARGET=0
Regards
Jordi
Re: Recent OPC update: Opening multiple projects at once. Why am I not seeing this option?
We are already in May and no update. Lol.
Re: My Oracle Support Login Issues
Hi,
I also found that I do not have access to KB167206. Since your contract is confirmed to be active, I would suggest contacting official support directly rather than using the community forum. They should be able to investigate the access issue and provide a resolution for you.
Regards,
asahide
Re: Product Certifications in the New My Oracle Support Cloud Portal
Hi Prasad,
At this time, we don’t have any confirmed plans or committed timeline to add voice search capabilities to the search bar.
Thanks,
Desiree
