Stay Connected:

ELSA-2026-13566

ELSA-2026-13566 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-05-05

Description


[6.12.0-124.55.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.55.1]
- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]

[6.12.0-124.54.1]
- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}

[6.12.0-124.53.1]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}


Related CVEs


CVE-2026-23270
CVE-2026-31402
CVE-2026-31419
CVE-2026-31431

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_aarch64_appstream
kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_aarch64_baseos_latest
kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_aarch64_codeready_builder
kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_aarch64_u1_baseos_patch
kernel-cross-headers-6.12.0-124.55.1.el10_1.aarch64.rpm4b4a61bb76d03628fec495b3e7631fd5aeaee1e8abfc547294ee023549b9a5be-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-124.55.1.el10_1.aarch64.rpm1f5670583d8cb46f706f90d932377fb80ade7da09db1d0e473e0f4ac2952faaf-ol10_aarch64_appstream
kernel-tools-6.12.0-124.55.1.el10_1.aarch64.rpm4700dfc1ce5eedf58aeefdbd92198f34b63879b189d13fa0a4ad1752cd18dd27-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-124.55.1.el10_1.aarch64.rpm4700dfc1ce5eedf58aeefdbd92198f34b63879b189d13fa0a4ad1752cd18dd27-ol10_aarch64_u1_baseos_patch
kernel-tools-libs-6.12.0-124.55.1.el10_1.aarch64.rpma9b451c486c687613d78d2ed4c4527656b3cdb518de946bf59cd860f53773412-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-124.55.1.el10_1.aarch64.rpma9b451c486c687613d78d2ed4c4527656b3cdb518de946bf59cd860f53773412-ol10_aarch64_u1_baseos_patch
kernel-tools-libs-devel-6.12.0-124.55.1.el10_1.aarch64.rpmf9777adbe32c961cf78c34f66fbd61f271858373f595c3cd0436165b8d5a89aa-ol10_aarch64_codeready_builder
libperf-6.12.0-124.55.1.el10_1.aarch64.rpm2e6e6250ff56d7c8d8173344efc136f27f50124a00ea3ad94b7aa87cbd0bee57-ol10_aarch64_codeready_builder
perf-6.12.0-124.55.1.el10_1.aarch64.rpmb7837e2c7f017cda41a3803a5960cbb8b5e9f15ef7f7c235e557772bff1ec477-ol10_aarch64_appstream
python3-perf-6.12.0-124.55.1.el10_1.aarch64.rpm4c322f012fec83359d3913b817e5e6ea5bff4297ba2b769be56f612837020b13-ol10_aarch64_appstream
rtla-6.12.0-124.55.1.el10_1.aarch64.rpm60733baab5cb98eceb23a090b2fc4b964d18005fdf7fc24aadbc7b1850fd9039-ol10_aarch64_appstream
rv-6.12.0-124.55.1.el10_1.aarch64.rpm7e7d9b4ed4371bb2da69fb9c6b7461be923d3be2e736fede9de7042ecb4d7ba5-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_x86_64_appstream
kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_x86_64_baseos_latest
kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_x86_64_codeready_builder
kernel-6.12.0-124.55.1.el10_1.src.rpm2fadc209b9b963e1da23f371ba3f6d33f5bf5942f1e0b77fb609431ab66bde00-ol10_x86_64_u1_baseos_patch
kernel-6.12.0-124.55.1.el10_1.x86_64.rpm5dde94dff6b42cc8584b93bb13afe5d801b982c0b9860d52ff6b614bedea6924-ol10_x86_64_baseos_latest
kernel-6.12.0-124.55.1.el10_1.x86_64.rpm5dde94dff6b42cc8584b93bb13afe5d801b982c0b9860d52ff6b614bedea6924-ol10_x86_64_u1_baseos_patch
kernel-abi-stablelists-6.12.0-124.55.1.el10_1.noarch.rpm17f5eec30463031aaeb15559ba7bfbedb5bf0f968bfc0915d03b7145997fc163-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-124.55.1.el10_1.noarch.rpm17f5eec30463031aaeb15559ba7bfbedb5bf0f968bfc0915d03b7145997fc163-ol10_x86_64_u1_baseos_patch
kernel-core-6.12.0-124.55.1.el10_1.x86_64.rpme9eddb6b761de64f956f2281a11a50a7df31951f9d9b780bc324d60969db16d1-ol10_x86_64_baseos_latest
kernel-core-6.12.0-124.55.1.el10_1.x86_64.rpme9eddb6b761de64f956f2281a11a50a7df31951f9d9b780bc324d60969db16d1-ol10_x86_64_u1_baseos_patch
kernel-cross-headers-6.12.0-124.55.1.el10_1.x86_64.rpmfbf38d750cfdc628875d7f77f29077e62b690798dafe67d466f54a3daddb820d-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-124.55.1.el10_1.x86_64.rpmf8b48407a654308ad5b6fbf29f0f9660846f97c6f6e450d06b3e8c485d7bc066-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-124.55.1.el10_1.x86_64.rpmf8b48407a654308ad5b6fbf29f0f9660846f97c6f6e450d06b3e8c485d7bc066-ol10_x86_64_u1_baseos_patch
kernel-debug-core-6.12.0-124.55.1.el10_1.x86_64.rpmb9f41ba858d132c0c174a6fad5360f5fa56fb2710edf59f97ca93e8d082764d6-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-124.55.1.el10_1.x86_64.rpmb9f41ba858d132c0c174a6fad5360f5fa56fb2710edf59f97ca93e8d082764d6-ol10_x86_64_u1_baseos_patch
kernel-debug-devel-6.12.0-124.55.1.el10_1.x86_64.rpmd138979f07237b7702868dcf7463cadb9f3f2e8c384f35ca3713b97f989473ca-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-124.55.1.el10_1.x86_64.rpma65bc1064061b7fb2f6cc6978f1bb048c62457364a8e00cf71b4f4e0c2972f54-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-124.55.1.el10_1.x86_64.rpme7e4a2de06c9e58c0a64bf228e546e492e5da267c24c0f4458e189339482273a-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-124.55.1.el10_1.x86_64.rpme7e4a2de06c9e58c0a64bf228e546e492e5da267c24c0f4458e189339482273a-ol10_x86_64_u1_baseos_patch
kernel-debug-modules-core-6.12.0-124.55.1.el10_1.x86_64.rpmbd441bbbada00432840ca52a76790feec71975c74ffa391845bef5a93acb69d4-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-124.55.1.el10_1.x86_64.rpmbd441bbbada00432840ca52a76790feec71975c74ffa391845bef5a93acb69d4-ol10_x86_64_u1_baseos_patch
kernel-debug-modules-extra-6.12.0-124.55.1.el10_1.x86_64.rpm185a57da037c750331b7283ee22b9f2cc3569e8c6e95a0e7d875f94f658701b1-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-124.55.1.el10_1.x86_64.rpm185a57da037c750331b7283ee22b9f2cc3569e8c6e95a0e7d875f94f658701b1-ol10_x86_64_u1_baseos_patch
kernel-debug-uki-virt-6.12.0-124.55.1.el10_1.x86_64.rpm3e1c7e975229fccddffc6c0a9b9fe697dee13923d39d845916544b6625567d71-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-124.55.1.el10_1.x86_64.rpm3e1c7e975229fccddffc6c0a9b9fe697dee13923d39d845916544b6625567d71-ol10_x86_64_u1_baseos_patch
kernel-devel-6.12.0-124.55.1.el10_1.x86_64.rpm3e3be0a5be5224096b4ff38ee55ff86117886cf566cd1c983a572bfd3f77a2a3-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-124.55.1.el10_1.x86_64.rpmce226dd6c313324d563d65928ac017fddc7831e374e1feb8b602d1c762e43979-ol10_x86_64_appstream
kernel-doc-6.12.0-124.55.1.el10_1.noarch.rpm6d0a9b6c6b4a0697eaab62f01bb7682e5e456f18fe6258e541ffde28f4f03d9c-ol10_x86_64_appstream
kernel-headers-6.12.0-124.55.1.el10_1.x86_64.rpm87616159b35cc71159ed854197f6642870b78afcc1cbfa3c8138adcc787546e2-ol10_x86_64_appstream
kernel-modules-6.12.0-124.55.1.el10_1.x86_64.rpm1a027f18039d5d7e70aa4fe0491f0097de9ee91a7a6c30b3ae5b6d1f384b7743-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-124.55.1.el10_1.x86_64.rpm1a027f18039d5d7e70aa4fe0491f0097de9ee91a7a6c30b3ae5b6d1f384b7743-ol10_x86_64_u1_baseos_patch
kernel-modules-core-6.12.0-124.55.1.el10_1.x86_64.rpm222b1883e877bb7cc2db4c4f45192e0dc1ab9c64d8a6d7ecf6d0f6d452a6488b-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-124.55.1.el10_1.x86_64.rpm222b1883e877bb7cc2db4c4f45192e0dc1ab9c64d8a6d7ecf6d0f6d452a6488b-ol10_x86_64_u1_baseos_patch
kernel-modules-extra-6.12.0-124.55.1.el10_1.x86_64.rpmab246c064ea0111a8bde16d1d2476af16aeefed33067655acb641044fba366b2-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-124.55.1.el10_1.x86_64.rpmab246c064ea0111a8bde16d1d2476af16aeefed33067655acb641044fba366b2-ol10_x86_64_u1_baseos_patch
kernel-modules-extra-matched-6.12.0-124.55.1.el10_1.x86_64.rpma951e48ff38516661c298fa6e72c397def6c501a838e25df43ab90a3efa91d2e-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-124.55.1.el10_1.x86_64.rpma951e48ff38516661c298fa6e72c397def6c501a838e25df43ab90a3efa91d2e-ol10_x86_64_u1_baseos_patch
kernel-tools-6.12.0-124.55.1.el10_1.x86_64.rpm8888f861a971e6842414fd7fb59967981af2a009b0e87131d8e6686fa0a6493a-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-124.55.1.el10_1.x86_64.rpm8888f861a971e6842414fd7fb59967981af2a009b0e87131d8e6686fa0a6493a-ol10_x86_64_u1_baseos_patch
kernel-tools-libs-6.12.0-124.55.1.el10_1.x86_64.rpm550fc28be04d7dd504a837c91856d3e516cb8c18430fbfdce66515d16503608e-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-124.55.1.el10_1.x86_64.rpm550fc28be04d7dd504a837c91856d3e516cb8c18430fbfdce66515d16503608e-ol10_x86_64_u1_baseos_patch
kernel-tools-libs-devel-6.12.0-124.55.1.el10_1.x86_64.rpm9efa5d8bcb0dc7bc1f8692a014b504ce76f45766a3b050d058ef0f0022ec0872-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-124.55.1.el10_1.x86_64.rpm5e15de040d3256476a7d567be3d8b4e429b1db91903362bd32212f9f5a6304b2-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-124.55.1.el10_1.x86_64.rpm5e15de040d3256476a7d567be3d8b4e429b1db91903362bd32212f9f5a6304b2-ol10_x86_64_u1_baseos_patch
kernel-uki-virt-addons-6.12.0-124.55.1.el10_1.x86_64.rpmba76ad2614f96c978a79fdb9ba639f579be6547332dbebd532530557b1b3d11b-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-124.55.1.el10_1.x86_64.rpmba76ad2614f96c978a79fdb9ba639f579be6547332dbebd532530557b1b3d11b-ol10_x86_64_u1_baseos_patch
libperf-6.12.0-124.55.1.el10_1.x86_64.rpm3aed4c28a2e1ee6808d4dbadf94d8e0f3d613163c3f458fb48af1edccd7b4e9a-ol10_x86_64_codeready_builder
perf-6.12.0-124.55.1.el10_1.x86_64.rpm8fae05172d91972e420a1be6c5a311c5c0403c8daa551f1501bc9cf45858ebb9-ol10_x86_64_appstream
python3-perf-6.12.0-124.55.1.el10_1.x86_64.rpm1a2ade9f1b6d499e4d17c9fd30ea3b8097ed1a767a46250a1ae1b67c0ca114e6-ol10_x86_64_appstream
rtla-6.12.0-124.55.1.el10_1.x86_64.rpm59aeeba67ad7f92a8bccceef71f89e09528fb6fa2e8a8db4399e21bdfe052b1c-ol10_x86_64_appstream
rv-6.12.0-124.55.1.el10_1.x86_64.rpm954b49459266de5f0d711f7f2135d3120ecfd56661352d54e346f00b7e63e6af-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights