ELSA-2026-49871

ELSA-2026-49871 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-06

Description

[6.12.0-211.43.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.43.1]
- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]

Related CVEs

CVE-2025-68214

CVE-2026-23199

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_aarch64_appstream
	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_aarch64_u2_baseos_patch
	kernel-cross-headers-6.12.0-211.43.1.el10_2.aarch64.rpm	d0058f092f1967ee1571bce0038c675d2007eac97619c9c724f03c5d6928c677	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-211.43.1.el10_2.aarch64.rpm	2bb3be39b23be46a73354612c98bfbfe1e7b18454693d7a10325d6306689a54d	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-211.43.1.el10_2.aarch64.rpm	2e52e0d5bffaf1adf8b91b419eae9034f60c5a0a9f886881efcd34f5dbac401c	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-211.43.1.el10_2.aarch64.rpm	2e52e0d5bffaf1adf8b91b419eae9034f60c5a0a9f886881efcd34f5dbac401c	-	ol10_aarch64_u2_baseos_patch
	kernel-tools-libs-6.12.0-211.43.1.el10_2.aarch64.rpm	dac73dbaf350f9e30ab3238c0cc1f9c1c0b0d2d6be5a6a2c8867287be55e06ef	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-211.43.1.el10_2.aarch64.rpm	dac73dbaf350f9e30ab3238c0cc1f9c1c0b0d2d6be5a6a2c8867287be55e06ef	-	ol10_aarch64_u2_baseos_patch
	kernel-tools-libs-devel-6.12.0-211.43.1.el10_2.aarch64.rpm	01644a2158ea781849c25a4e1629f6ce66983cd7bc4dd47a287003188b0ebc22	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-211.43.1.el10_2.aarch64.rpm	b405bcce0beb9272efca6ef14325e7292bbf327e5f4c00aa1301c550c4fb808d	-	ol10_aarch64_codeready_builder
	perf-6.12.0-211.43.1.el10_2.aarch64.rpm	88e790f69733166570785b6deb80233de676241f74658f4c524df2faed6df8a1	-	ol10_aarch64_appstream
	python3-perf-6.12.0-211.43.1.el10_2.aarch64.rpm	9da18fef9e1894d4323dcebfa46480e9c35b903db417d88cd4257b63eed69c38	-	ol10_aarch64_appstream
	rtla-6.12.0-211.43.1.el10_2.aarch64.rpm	7977d698ffb06fd376c8c5be0fee95bc1e4416209ad9dd3b4ad2c616f715cae6	-	ol10_aarch64_appstream
	rv-6.12.0-211.43.1.el10_2.aarch64.rpm	ad5f6d89936fa38a6091ba923a4f45ec9f62778876b4dd54007a1ff3c74053fb	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_x86_64_appstream
	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-211.43.1.el10_2.src.rpm	c3e6e9f459ce39910dfeaa5bbf2e1496efe52c5e22185a642b257d10b842df4b	-	ol10_x86_64_u2_baseos_patch
	kernel-6.12.0-211.43.1.el10_2.x86_64.rpm	018946514fd86425e3b908843158b6729ee38317b9f6a122a477981e1f51796e	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-211.43.1.el10_2.x86_64.rpm	018946514fd86425e3b908843158b6729ee38317b9f6a122a477981e1f51796e	-	ol10_x86_64_u2_baseos_patch
	kernel-abi-stablelists-6.12.0-211.43.1.el10_2.noarch.rpm	1f90a39d0e53e76363828102b89b20adcc5f0a20c808142745f006b8613f3023	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-211.43.1.el10_2.noarch.rpm	1f90a39d0e53e76363828102b89b20adcc5f0a20c808142745f006b8613f3023	-	ol10_x86_64_u2_baseos_patch
	kernel-core-6.12.0-211.43.1.el10_2.x86_64.rpm	262c18064a0ca2b7e946df63a1822452d27ddaa4ac9cf5fec8196ab6778e7e9c	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-211.43.1.el10_2.x86_64.rpm	262c18064a0ca2b7e946df63a1822452d27ddaa4ac9cf5fec8196ab6778e7e9c	-	ol10_x86_64_u2_baseos_patch
	kernel-cross-headers-6.12.0-211.43.1.el10_2.x86_64.rpm	72adf6be2e3a93b18b7578ab1748d6ead41a30608eb1ce50354e010bb5d15817	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-211.43.1.el10_2.x86_64.rpm	18898b15c9e4aefd514264ae95f5050bf795a82663ae4ebeb03bd0ae0b0ae9f1	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-211.43.1.el10_2.x86_64.rpm	18898b15c9e4aefd514264ae95f5050bf795a82663ae4ebeb03bd0ae0b0ae9f1	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-core-6.12.0-211.43.1.el10_2.x86_64.rpm	3dca022ac24f9106189d0e7d61d8dda5a05f0005219ec32968406666c22ae2d9	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-211.43.1.el10_2.x86_64.rpm	3dca022ac24f9106189d0e7d61d8dda5a05f0005219ec32968406666c22ae2d9	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-devel-6.12.0-211.43.1.el10_2.x86_64.rpm	f85403b7939d325f3c69873bfd53b7db564f3d48c6b0b91259830fec136059a5	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-211.43.1.el10_2.x86_64.rpm	7bd6a415fff30c2ed4639af1b47fce84eeecc3f97618e28cdf22f34214a4f894	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-211.43.1.el10_2.x86_64.rpm	c4f2890911c3c0795835ed1923602ae5a8a0251906c1686abac84cc952a532d0	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-211.43.1.el10_2.x86_64.rpm	c4f2890911c3c0795835ed1923602ae5a8a0251906c1686abac84cc952a532d0	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm	08f0ada69c34d3b68da7771542faa3b408635b1eeafe8455cd83dbdb86ec069e	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm	08f0ada69c34d3b68da7771542faa3b408635b1eeafe8455cd83dbdb86ec069e	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm	820a273a01aad70fcae3fff7d48be5cc6f2413906bde8cf4c01fb135694a7c26	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm	820a273a01aad70fcae3fff7d48be5cc6f2413906bde8cf4c01fb135694a7c26	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-uki-virt-6.12.0-211.43.1.el10_2.x86_64.rpm	7756f772a3fe7353eba87ab338a4c456acabd07bc4f4196ae6b4ec70c39cf7aa	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-211.43.1.el10_2.x86_64.rpm	7756f772a3fe7353eba87ab338a4c456acabd07bc4f4196ae6b4ec70c39cf7aa	-	ol10_x86_64_u2_baseos_patch
	kernel-devel-6.12.0-211.43.1.el10_2.x86_64.rpm	a817d3e5d0bf3d947a3240c2ee01c005ac204de2698da5275f8df17e00536e15	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-211.43.1.el10_2.x86_64.rpm	27b2aa593d8e338de772570a91e842799b575470016dac684866d371fd9d780e	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-211.43.1.el10_2.noarch.rpm	1d9dffc6f6cc26b8579e8af5a5471ecc9000c58b8258afef806c794fc4bb3268	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-211.43.1.el10_2.x86_64.rpm	312a29cfd433ce43f32329c8f9f57c571f1e0586d8f8fcb55c3f9c6db76a8254	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-211.43.1.el10_2.x86_64.rpm	c18ee04d51255cc4eb4df907cec648e3d424c42e58ae55d3b97d2b3db131513b	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-211.43.1.el10_2.x86_64.rpm	c18ee04d51255cc4eb4df907cec648e3d424c42e58ae55d3b97d2b3db131513b	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm	3c9b0a050928a0d2ccc7ef0228ba8dba02ae844f77d1ca296c6daf9648c51ece	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm	3c9b0a050928a0d2ccc7ef0228ba8dba02ae844f77d1ca296c6daf9648c51ece	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm	d95b9f2c450252539cb2f0fcb85e924e1e8a64c271fc1d592b95f1d2ad5bf01e	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm	d95b9f2c450252539cb2f0fcb85e924e1e8a64c271fc1d592b95f1d2ad5bf01e	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-extra-matched-6.12.0-211.43.1.el10_2.x86_64.rpm	c6f2132cbc127bafd6e1d9e744ffc684fb4df979a87ccf89ad86df94505d6488	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-211.43.1.el10_2.x86_64.rpm	c6f2132cbc127bafd6e1d9e744ffc684fb4df979a87ccf89ad86df94505d6488	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-6.12.0-211.43.1.el10_2.x86_64.rpm	6971521e92e6b7319a7f03d17ae45ef4b35f9fe0aa8273eaf4d6fe6d2b6ffa1b	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-211.43.1.el10_2.x86_64.rpm	6971521e92e6b7319a7f03d17ae45ef4b35f9fe0aa8273eaf4d6fe6d2b6ffa1b	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-libs-6.12.0-211.43.1.el10_2.x86_64.rpm	ea5072e2a9965325b9a5c9063754f0a1650d8f1b1c710f7c4b0159d3a1ff23fd	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-211.43.1.el10_2.x86_64.rpm	ea5072e2a9965325b9a5c9063754f0a1650d8f1b1c710f7c4b0159d3a1ff23fd	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-libs-devel-6.12.0-211.43.1.el10_2.x86_64.rpm	533b0a0a09640649f7549b6147f1b886c4606b5258f13dd368cc7e0e5556e259	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-211.43.1.el10_2.x86_64.rpm	d160cb61325b01f3e35da41615ead3eb765c0c2c006f094815fb958898c42dde	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-211.43.1.el10_2.x86_64.rpm	d160cb61325b01f3e35da41615ead3eb765c0c2c006f094815fb958898c42dde	-	ol10_x86_64_u2_baseos_patch
	kernel-uki-virt-addons-6.12.0-211.43.1.el10_2.x86_64.rpm	343221c6b5452a96b20264eefaa7a5cb5320b6516f61f2361766dc98ab0c2937	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-211.43.1.el10_2.x86_64.rpm	343221c6b5452a96b20264eefaa7a5cb5320b6516f61f2361766dc98ab0c2937	-	ol10_x86_64_u2_baseos_patch
	libperf-6.12.0-211.43.1.el10_2.x86_64.rpm	3441a24548bf230ed7d68fe446e46cbd47d5b9b665752413e1fa6f0358a6d24a	-	ol10_x86_64_codeready_builder
	perf-6.12.0-211.43.1.el10_2.x86_64.rpm	cf4ec3e57a5c215742780c46b45fce8ca678b9784d15b6d089469e1deb586288	-	ol10_x86_64_appstream
	python3-perf-6.12.0-211.43.1.el10_2.x86_64.rpm	eff2e6a85ab4bf88c64354dda657a9ac7bef5907f2361068536dbe3c78ffc3e8	-	ol10_x86_64_appstream
	rtla-6.12.0-211.43.1.el10_2.x86_64.rpm	7df252bda3155e7779316a27b12c67f5bf97a6365693b8e03e6236f09c6c70e5	-	ol10_x86_64_appstream
	rv-6.12.0-211.43.1.el10_2.x86_64.rpm	edf48f3f6b0894630ac7f400dae4d1e9e03078b086f5ef74c6922f5b33b1c074	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team