ELSA-2026-1690
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-1690
ELSA-2026-1690 - kernel security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-02-02 |
Description
[6.12.0-124.31.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-124.31.1]
- i40e: support generic devlink param 'max_mac_per_vf' (Mohammad Heib) [RHEL-121647]
- devlink: Add new 'max_mac_per_vf' generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
[6.12.0-124.30.1]
- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_aarch64_appstream |
| kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_aarch64_baseos_latest | |
| kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_aarch64_codeready_builder | |
| kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_aarch64_u1_baseos_patch | |
| kernel-cross-headers-6.12.0-124.31.1.el10_1.aarch64.rpm | 99e864433b5ef91d61fbc0ffdf72f0df15189a69cf69ea7fa1484eafeadb18b3 | - | ol10_aarch64_codeready_builder | |
| kernel-headers-6.12.0-124.31.1.el10_1.aarch64.rpm | d7ecb95b3d2a006a9ed8b62606d3363c30139eb4390c0412489c18c4cdba3501 | - | ol10_aarch64_appstream | |
| kernel-tools-6.12.0-124.31.1.el10_1.aarch64.rpm | c1b26624f12b2d2fc3177b387830a2f3bc063df7021e45ef82f94f74f6fe88a5 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-6.12.0-124.31.1.el10_1.aarch64.rpm | c1b26624f12b2d2fc3177b387830a2f3bc063df7021e45ef82f94f74f6fe88a5 | - | ol10_aarch64_u1_baseos_patch | |
| kernel-tools-libs-6.12.0-124.31.1.el10_1.aarch64.rpm | 3e1af28c937fe8d31410a71b1417f17cf7436e59cf1ebd1d014be735391b4229 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-libs-6.12.0-124.31.1.el10_1.aarch64.rpm | 3e1af28c937fe8d31410a71b1417f17cf7436e59cf1ebd1d014be735391b4229 | - | ol10_aarch64_u1_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-124.31.1.el10_1.aarch64.rpm | 368947b990a0f534dbd28b27351836c54709031e02be06751af08d312c3e4ebd | - | ol10_aarch64_codeready_builder | |
| libperf-6.12.0-124.31.1.el10_1.aarch64.rpm | c077506ba260f84a7dafee77b3c66b96304690dbf93c67226658b3cad3f6a048 | - | ol10_aarch64_codeready_builder | |
| perf-6.12.0-124.31.1.el10_1.aarch64.rpm | 123e9d3f7c486b9a21e361e2686b3cf312bf226fb9a3a825bd53b49c1e2b66e5 | - | ol10_aarch64_appstream | |
| python3-perf-6.12.0-124.31.1.el10_1.aarch64.rpm | ad167f5a3cfd3d8a64fdb75ce925e51ff26498d269161af3687a60fd60ee2990 | - | ol10_aarch64_appstream | |
| rtla-6.12.0-124.31.1.el10_1.aarch64.rpm | f46d75f1a8b73bb4bbf6a5d1d738ffabaf0ef8e16f8c5a5cbf48e1b00b7446d6 | - | ol10_aarch64_appstream | |
| rv-6.12.0-124.31.1.el10_1.aarch64.rpm | 2eb2aefaf180128a9977e8c79c51fccce7bb2e09780fc75c5c4cad682568cf89 | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_x86_64_appstream |
| kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_x86_64_codeready_builder | |
| kernel-6.12.0-124.31.1.el10_1.src.rpm | 189e6648ea8e91f50c6a57989cdbbae2e337553375cfe436422e3bdc14e40f5d | - | ol10_x86_64_u1_baseos_patch | |
| kernel-6.12.0-124.31.1.el10_1.x86_64.rpm | 14ae4db0a9171fc8aaacf1f792099602c48deab5f68cb418c5c31436788cc4ca | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-124.31.1.el10_1.x86_64.rpm | 14ae4db0a9171fc8aaacf1f792099602c48deab5f68cb418c5c31436788cc4ca | - | ol10_x86_64_u1_baseos_patch | |
| kernel-abi-stablelists-6.12.0-124.31.1.el10_1.noarch.rpm | cfd2c7d4a3de182e47ebb395be5aaa7a39a867bcc45115fb1779d6cc4cc48958 | - | ol10_x86_64_baseos_latest | |
| kernel-abi-stablelists-6.12.0-124.31.1.el10_1.noarch.rpm | cfd2c7d4a3de182e47ebb395be5aaa7a39a867bcc45115fb1779d6cc4cc48958 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-core-6.12.0-124.31.1.el10_1.x86_64.rpm | 97ec26c959e119d61d6f385ebc45e3b8243827c3d0c73044d9f722b4b80afae1 | - | ol10_x86_64_baseos_latest | |
| kernel-core-6.12.0-124.31.1.el10_1.x86_64.rpm | 97ec26c959e119d61d6f385ebc45e3b8243827c3d0c73044d9f722b4b80afae1 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-cross-headers-6.12.0-124.31.1.el10_1.x86_64.rpm | 9723f94ea67964c5c4aea81a4c764dfbfc2cdea1413cd83b013e3041075d32ff | - | ol10_x86_64_codeready_builder | |
| kernel-debug-6.12.0-124.31.1.el10_1.x86_64.rpm | 723411dc548ee723abfcd06dc04d948812273036615bf3d1cd5a5b432c349cc9 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-6.12.0-124.31.1.el10_1.x86_64.rpm | 723411dc548ee723abfcd06dc04d948812273036615bf3d1cd5a5b432c349cc9 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-debug-core-6.12.0-124.31.1.el10_1.x86_64.rpm | 1c71cc67bef133ff58c3c77507f6cccd1c34d9c25191066d8e2ddd7cb2dc1853 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-core-6.12.0-124.31.1.el10_1.x86_64.rpm | 1c71cc67bef133ff58c3c77507f6cccd1c34d9c25191066d8e2ddd7cb2dc1853 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-debug-devel-6.12.0-124.31.1.el10_1.x86_64.rpm | 8ed9e37f58a419e6b820e1ef52b6a782c27a524eca42c0a50d51f290f5a08454 | - | ol10_x86_64_appstream | |
| kernel-debug-devel-matched-6.12.0-124.31.1.el10_1.x86_64.rpm | a402bf4dc50cffe077cac01c1b676a0a0cd5e4c00eb92d07a86194b028852963 | - | ol10_x86_64_appstream | |
| kernel-debug-modules-6.12.0-124.31.1.el10_1.x86_64.rpm | db7bffcfe1ff804af3f7938bdb496e0560d50059c6de6be4c5c4faece69da3b9 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-6.12.0-124.31.1.el10_1.x86_64.rpm | db7bffcfe1ff804af3f7938bdb496e0560d50059c6de6be4c5c4faece69da3b9 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-debug-modules-core-6.12.0-124.31.1.el10_1.x86_64.rpm | 031ab40d1d2d12d0d13f8fd3b555318d9b4a3659e415646fbdc2ae09911d1cfb | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-core-6.12.0-124.31.1.el10_1.x86_64.rpm | 031ab40d1d2d12d0d13f8fd3b555318d9b4a3659e415646fbdc2ae09911d1cfb | - | ol10_x86_64_u1_baseos_patch | |
| kernel-debug-modules-extra-6.12.0-124.31.1.el10_1.x86_64.rpm | d06a6b455b7660ec5aa77959e77f9bf5c3032007dff62f6a7e8775f41a04445a | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-extra-6.12.0-124.31.1.el10_1.x86_64.rpm | d06a6b455b7660ec5aa77959e77f9bf5c3032007dff62f6a7e8775f41a04445a | - | ol10_x86_64_u1_baseos_patch | |
| kernel-debug-uki-virt-6.12.0-124.31.1.el10_1.x86_64.rpm | 9912d2cf9fa4f6285f3fc01ef9ee3bca507cc5575f7698a3d2a00698e470e9c5 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-uki-virt-6.12.0-124.31.1.el10_1.x86_64.rpm | 9912d2cf9fa4f6285f3fc01ef9ee3bca507cc5575f7698a3d2a00698e470e9c5 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-devel-6.12.0-124.31.1.el10_1.x86_64.rpm | 134dc44837d87dbd4727cbe69214e7dae7cd0f8410558dad62fa557524f2b888 | - | ol10_x86_64_appstream | |
| kernel-devel-matched-6.12.0-124.31.1.el10_1.x86_64.rpm | 3d14aadbded6fc6c5e6aece4e1a1ae26d211ac7182c2f8df35b617d73d357503 | - | ol10_x86_64_appstream | |
| kernel-doc-6.12.0-124.31.1.el10_1.noarch.rpm | a8d3a0aa78f8421231348ec52db2f6b51c461f37e639f7e508acfd139452ce81 | - | ol10_x86_64_appstream | |
| kernel-headers-6.12.0-124.31.1.el10_1.x86_64.rpm | f2458c031e09b3f7fc5b52346f6d4aba7a83cb48d728e49602d74e61847527f4 | - | ol10_x86_64_appstream | |
| kernel-modules-6.12.0-124.31.1.el10_1.x86_64.rpm | 48d4e80fec4cf8410ac6ff613ee9c5becf450182dfc6f39e3c9506078a6cdb9b | - | ol10_x86_64_baseos_latest | |
| kernel-modules-6.12.0-124.31.1.el10_1.x86_64.rpm | 48d4e80fec4cf8410ac6ff613ee9c5becf450182dfc6f39e3c9506078a6cdb9b | - | ol10_x86_64_u1_baseos_patch | |
| kernel-modules-core-6.12.0-124.31.1.el10_1.x86_64.rpm | dcffbe34484dd1da89655a8091bbef2880a5e7a2c8e9e6ecf4cdd17af384df8e | - | ol10_x86_64_baseos_latest | |
| kernel-modules-core-6.12.0-124.31.1.el10_1.x86_64.rpm | dcffbe34484dd1da89655a8091bbef2880a5e7a2c8e9e6ecf4cdd17af384df8e | - | ol10_x86_64_u1_baseos_patch | |
| kernel-modules-extra-6.12.0-124.31.1.el10_1.x86_64.rpm | 5f45ff6f498373a95c2e71cad0e3219fb56cd25a8e9cec8f6d90f27041d02ee6 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-6.12.0-124.31.1.el10_1.x86_64.rpm | 5f45ff6f498373a95c2e71cad0e3219fb56cd25a8e9cec8f6d90f27041d02ee6 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-modules-extra-matched-6.12.0-124.31.1.el10_1.x86_64.rpm | 4cd36d5310f4175caed74d8bcaaad1e5ea278c93a18e931505f813cfe1bac94f | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-matched-6.12.0-124.31.1.el10_1.x86_64.rpm | 4cd36d5310f4175caed74d8bcaaad1e5ea278c93a18e931505f813cfe1bac94f | - | ol10_x86_64_u1_baseos_patch | |
| kernel-tools-6.12.0-124.31.1.el10_1.x86_64.rpm | ab66ff8c81bc6a133d39f5ccf5dc3d14992c1c62aaf979bc1ab15c4d5ad735f9 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-6.12.0-124.31.1.el10_1.x86_64.rpm | ab66ff8c81bc6a133d39f5ccf5dc3d14992c1c62aaf979bc1ab15c4d5ad735f9 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-tools-libs-6.12.0-124.31.1.el10_1.x86_64.rpm | fe938fda04ab83a3a0cc57d1124f473c1e1063e0541c1a45028575f507127556 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-libs-6.12.0-124.31.1.el10_1.x86_64.rpm | fe938fda04ab83a3a0cc57d1124f473c1e1063e0541c1a45028575f507127556 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-124.31.1.el10_1.x86_64.rpm | 18256626d4cdfbc7deae3e438a2a9ba094cb0d9f69b230c8c701239987ec4883 | - | ol10_x86_64_codeready_builder | |
| kernel-uki-virt-6.12.0-124.31.1.el10_1.x86_64.rpm | e99aa0414628880ddc3d7e032f33c7808e40283e3ddca1d1af87a40829dbdd19 | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-6.12.0-124.31.1.el10_1.x86_64.rpm | e99aa0414628880ddc3d7e032f33c7808e40283e3ddca1d1af87a40829dbdd19 | - | ol10_x86_64_u1_baseos_patch | |
| kernel-uki-virt-addons-6.12.0-124.31.1.el10_1.x86_64.rpm | 935bacc502c7d7a676be39a205ddb611fb16bb30359d75a86cb2a9de465fd1be | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-addons-6.12.0-124.31.1.el10_1.x86_64.rpm | 935bacc502c7d7a676be39a205ddb611fb16bb30359d75a86cb2a9de465fd1be | - | ol10_x86_64_u1_baseos_patch | |
| libperf-6.12.0-124.31.1.el10_1.x86_64.rpm | 481324a9087b376d030a5b98aaa8d0834482cd4bb2d46ca7b4e6dd86fb30f822 | - | ol10_x86_64_codeready_builder | |
| perf-6.12.0-124.31.1.el10_1.x86_64.rpm | 9a7a75b5b65000e1614cd13d88fb412da2cae5c57c964da8b1b4203f62cfcad9 | - | ol10_x86_64_appstream | |
| python3-perf-6.12.0-124.31.1.el10_1.x86_64.rpm | b7c7852acbe99a8d8465f08a67d7744b4b15b93003d9bea1a3e56f5747f3bf45 | - | ol10_x86_64_appstream | |
| rtla-6.12.0-124.31.1.el10_1.x86_64.rpm | 76917b525f1de66c3b8022c8995308362a6447b7c21ba6d70266442189892382 | - | ol10_x86_64_appstream | |
| rv-6.12.0-124.31.1.el10_1.x86_64.rpm | cbdb008a10a2f4b275f6d9a34d70609c36f47ec6137e454ee533fa2230b8b385 | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
