Stay Connected:

ELSA-2026-47017

ELSA-2026-47017 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-30

Description


[6.12.0-211.40.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.40.1]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}


Related CVEs


CVE-2026-46086
CVE-2026-52993
CVE-2026-53006
CVE-2026-53281

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_aarch64_appstream
kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_aarch64_baseos_latest
kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_aarch64_codeready_builder
kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_aarch64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.40.1.el10_2.aarch64.rpme1d9c7f354e743afdf650479481c6fc409a4cb4fae5c2e901ef4e679e8eaa1a6-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-211.40.1.el10_2.aarch64.rpmdb493b1e2fd810e8ff18fd2c069602d3e08938d95013d52562f01d14f7fd0038-ol10_aarch64_appstream
kernel-tools-6.12.0-211.40.1.el10_2.aarch64.rpm4bc8dd9c2ffbcb8420a8c2ce629c4db7038495a73c32d78e8267610553a3634b-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-211.40.1.el10_2.aarch64.rpm4bc8dd9c2ffbcb8420a8c2ce629c4db7038495a73c32d78e8267610553a3634b-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.40.1.el10_2.aarch64.rpm2a85c9feab5139a96379d3bf5d9cff9c92eb3a4f798162716912f4f19c0820b8-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-211.40.1.el10_2.aarch64.rpm2a85c9feab5139a96379d3bf5d9cff9c92eb3a4f798162716912f4f19c0820b8-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.40.1.el10_2.aarch64.rpmb35e9e1aa2ce3fb63c90c0305546e4cc11c2ceff9010ba7d70dbcc19406686c8-ol10_aarch64_codeready_builder
libperf-6.12.0-211.40.1.el10_2.aarch64.rpm70a38a7d0336c1d48c1e7590fc4e506220f40626f96c187f3ca3179b194a918f-ol10_aarch64_codeready_builder
perf-6.12.0-211.40.1.el10_2.aarch64.rpm431c1175cde4e1d982bdb851a5b3fc0d7424bdad64713110c194c39f62e5fe9e-ol10_aarch64_appstream
python3-perf-6.12.0-211.40.1.el10_2.aarch64.rpm43c6989e771c271456e9bb8b8e673ab633e310b3bcbd33c9cb36167501ad90e7-ol10_aarch64_appstream
rtla-6.12.0-211.40.1.el10_2.aarch64.rpm049a64096fcf5533a0054e1797480d126f15c6e926d044677a12531d05ff9a28-ol10_aarch64_appstream
rv-6.12.0-211.40.1.el10_2.aarch64.rpme61d02d0d7800665be2c82a6808d0d4ba4d62f4b87ba62329bc7d0d4d995d43f-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_x86_64_appstream
kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_x86_64_baseos_latest
kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_x86_64_codeready_builder
kernel-6.12.0-211.40.1.el10_2.src.rpm288c158a65e2130bff57493fe4133c6dbe5901a6110053705636e078917c3cad-ol10_x86_64_u2_baseos_patch
kernel-6.12.0-211.40.1.el10_2.x86_64.rpm6ac106c0b2ead6a6c871187bfffd928489ad1c9b86467db73239d21d9dc4a013-ol10_x86_64_baseos_latest
kernel-6.12.0-211.40.1.el10_2.x86_64.rpm6ac106c0b2ead6a6c871187bfffd928489ad1c9b86467db73239d21d9dc4a013-ol10_x86_64_u2_baseos_patch
kernel-abi-stablelists-6.12.0-211.40.1.el10_2.noarch.rpmb0582dd8ecb15f334c37294e6b1b98a764986d8b9e7494c68e69d62548b40aaf-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-211.40.1.el10_2.noarch.rpmb0582dd8ecb15f334c37294e6b1b98a764986d8b9e7494c68e69d62548b40aaf-ol10_x86_64_u2_baseos_patch
kernel-core-6.12.0-211.40.1.el10_2.x86_64.rpm5be4d0d66745cc6193d5407968c9e0963de68261f08d13e9ff5fe63e46756826-ol10_x86_64_baseos_latest
kernel-core-6.12.0-211.40.1.el10_2.x86_64.rpm5be4d0d66745cc6193d5407968c9e0963de68261f08d13e9ff5fe63e46756826-ol10_x86_64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.40.1.el10_2.x86_64.rpm3f5b41cb528e4cf7142aa02da93d2b85b3c911651a53665522b2bf91d0edd86c-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-211.40.1.el10_2.x86_64.rpm0bd9087e506479fb9b3d7d6f49dab6ef3861092e378d0739e4c95ba3c010cf8d-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-211.40.1.el10_2.x86_64.rpm0bd9087e506479fb9b3d7d6f49dab6ef3861092e378d0739e4c95ba3c010cf8d-ol10_x86_64_u2_baseos_patch
kernel-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpma4a8cf947a6f2b382f1bd83e07c7eda604fc38aff8b72efc730472134740b7ed-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpma4a8cf947a6f2b382f1bd83e07c7eda604fc38aff8b72efc730472134740b7ed-ol10_x86_64_u2_baseos_patch
kernel-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm395f60b0d6232cbc1027b87b11d4a214d3ad369ad90503dfa2449a8e3c2a7b04-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-211.40.1.el10_2.x86_64.rpmd5972ea2b86a1943a70900cc2d7698252571cf29c9a4293d6b52c531a86d6328-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm451fdf4f8094f91787e3ac83c2cde896cfde1f7bd472820f535d964b6e31d640-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm451fdf4f8094f91787e3ac83c2cde896cfde1f7bd472820f535d964b6e31d640-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm0001219b091737e02f6972d14cd7ae7f360766598b928ef07122e16f7309d11a-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm0001219b091737e02f6972d14cd7ae7f360766598b928ef07122e16f7309d11a-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpmf32c627225153995c267a4d20d0b76242052ec4fd8f7cb99385d5df90558caec-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpmf32c627225153995c267a4d20d0b76242052ec4fd8f7cb99385d5df90558caec-ol10_x86_64_u2_baseos_patch
kernel-debug-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpme758a320a1f56f7d5e40e5cc8897426233e03ae85ac82b2e704e90e47d48e829-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpme758a320a1f56f7d5e40e5cc8897426233e03ae85ac82b2e704e90e47d48e829-ol10_x86_64_u2_baseos_patch
kernel-devel-6.12.0-211.40.1.el10_2.x86_64.rpm5f5f6bad69aa79e01fabf213e851f5035053945f496cbf027aa322ea2064dc5a-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-211.40.1.el10_2.x86_64.rpm7db56e146c666ff20a730d3e6d8039ea01f2443637c6b7a9843b6df123aed32d-ol10_x86_64_appstream
kernel-doc-6.12.0-211.40.1.el10_2.noarch.rpmff0163bfb9461336593a3240611ee87e26d10f3a0b54edcea5a7d6f52c491afc-ol10_x86_64_appstream
kernel-headers-6.12.0-211.40.1.el10_2.x86_64.rpm1d6acba0d45f9328a58cdd4b21e324cc0917400b2fa590dce187ed9c838b8889-ol10_x86_64_appstream
kernel-modules-6.12.0-211.40.1.el10_2.x86_64.rpmddf9e2d4553c2a35c5bd0011bc84a952d3da20f52cccdcd7e3e7333a9489fb86-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-211.40.1.el10_2.x86_64.rpmddf9e2d4553c2a35c5bd0011bc84a952d3da20f52cccdcd7e3e7333a9489fb86-ol10_x86_64_u2_baseos_patch
kernel-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpmeee85bc783e3da9df8d61f07eb80793f7c9e60ddbde7e426f6ad5492716e2360-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpmeee85bc783e3da9df8d61f07eb80793f7c9e60ddbde7e426f6ad5492716e2360-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpmc1ed15d7ee8a7ca134c3e2a31ec3d44725194f65a03d5a0bf790fdaabeaa6ec5-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpmc1ed15d7ee8a7ca134c3e2a31ec3d44725194f65a03d5a0bf790fdaabeaa6ec5-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-matched-6.12.0-211.40.1.el10_2.x86_64.rpmd92622a2b380975b8bcacbf7ff010f3bd8a7294ddacc26d3655610f1d02f91b3-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-211.40.1.el10_2.x86_64.rpmd92622a2b380975b8bcacbf7ff010f3bd8a7294ddacc26d3655610f1d02f91b3-ol10_x86_64_u2_baseos_patch
kernel-tools-6.12.0-211.40.1.el10_2.x86_64.rpm9c0a37c724bcf43b3c81332f8754968e14751669cfc7b06e8bfe0e99e31342f5-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-211.40.1.el10_2.x86_64.rpm9c0a37c724bcf43b3c81332f8754968e14751669cfc7b06e8bfe0e99e31342f5-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.40.1.el10_2.x86_64.rpmaa9acca7f0b1f19adb1bbccef8a0e3a49d00c2870e80b161ed8b813970754417-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-211.40.1.el10_2.x86_64.rpmaa9acca7f0b1f19adb1bbccef8a0e3a49d00c2870e80b161ed8b813970754417-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.40.1.el10_2.x86_64.rpmfb51f5900964062e1581432b2c45e3718f674fb9a3312bb9dfe6d723f48a039e-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpm26630c97bb24707ef1f8383f94068c0e051947d5678ef3e211aba96b4fbb31f7-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpm26630c97bb24707ef1f8383f94068c0e051947d5678ef3e211aba96b4fbb31f7-ol10_x86_64_u2_baseos_patch
kernel-uki-virt-addons-6.12.0-211.40.1.el10_2.x86_64.rpm1a233d4361bd929a7d6501489f5b09f2e1283343b98b557df5bf3de2dc079874-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-211.40.1.el10_2.x86_64.rpm1a233d4361bd929a7d6501489f5b09f2e1283343b98b557df5bf3de2dc079874-ol10_x86_64_u2_baseos_patch
libperf-6.12.0-211.40.1.el10_2.x86_64.rpm38f058abe9da591e1cd8db1877cb8f9d674944214b6eb2c888d6ff69745955ca-ol10_x86_64_codeready_builder
perf-6.12.0-211.40.1.el10_2.x86_64.rpm070cb27ed0a9c640b70d6758b5ca8096b49b9994a8b7dcb1889198e59f394e40-ol10_x86_64_appstream
python3-perf-6.12.0-211.40.1.el10_2.x86_64.rpm5223260ab8d44f23facf4ddb8fadb7fbc1d4da919862cfab0e37dd7a7d9963e6-ol10_x86_64_appstream
rtla-6.12.0-211.40.1.el10_2.x86_64.rpm61823ae3e7c32f3bc5bef1cbc21276d78f2a2297ac9a74dac412145e2e5949e8-ol10_x86_64_appstream
rv-6.12.0-211.40.1.el10_2.x86_64.rpmf65d6bb38773707f3b4b28f34f5106ef5124f448ae90325b28d9e67b3801180c-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights