ELSA-2026-57251
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-57251
ELSA-2026-57251 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-08-20 |
Description
[6.12.0-211.49.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.49.1]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
[6.12.0-211.48.1]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttila) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_aarch64_appstream |
| kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_aarch64_baseos_latest | |
| kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_aarch64_codeready_builder | |
| kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_aarch64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.49.1.el10_2.aarch64.rpm | 0e0d302cc23f18c7b507c288e9728f725a85dd75281a84d6d6c0f1d28d1ddb4b | - | ol10_aarch64_codeready_builder | |
| kernel-headers-6.12.0-211.49.1.el10_2.aarch64.rpm | 66fbf5fa4fc8ace24a3034540c606f361d2269a59f0e6a72bbda25f4a4f144b7 | - | ol10_aarch64_appstream | |
| kernel-tools-6.12.0-211.49.1.el10_2.aarch64.rpm | c66f2880f710fe47a11dfc0b7a42ea86710ae4a238fbabd48b9d98c46f24f997 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-6.12.0-211.49.1.el10_2.aarch64.rpm | c66f2880f710fe47a11dfc0b7a42ea86710ae4a238fbabd48b9d98c46f24f997 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.49.1.el10_2.aarch64.rpm | dc9916dc4332d206e87495afdc9b2b557192835a13ef9b4d89f380f78cd596c3 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.49.1.el10_2.aarch64.rpm | dc9916dc4332d206e87495afdc9b2b557192835a13ef9b4d89f380f78cd596c3 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.49.1.el10_2.aarch64.rpm | e718d0ecb3560af2772c418c1236024efcc0c83853bc04e2bfa63546ba0be80a | - | ol10_aarch64_codeready_builder | |
| libperf-6.12.0-211.49.1.el10_2.aarch64.rpm | c2c1ce0807768ddd6bb0a748dda0046a14e52a486d02f136c8e4fee9eb17fd82 | - | ol10_aarch64_codeready_builder | |
| perf-6.12.0-211.49.1.el10_2.aarch64.rpm | 82e4be29f46261e11e42ffe17f93fcf5c7fbe80997494df65f34deee613de77b | - | ol10_aarch64_appstream | |
| python3-perf-6.12.0-211.49.1.el10_2.aarch64.rpm | 49cca294a93c37f531d6469ef19ef011ba9745772eac95526db00834be24a4e9 | - | ol10_aarch64_appstream | |
| rtla-6.12.0-211.49.1.el10_2.aarch64.rpm | 1148c2e2e2153c19ef5566b55db1c7926db41e143f16c397fcf2b746d776a849 | - | ol10_aarch64_appstream | |
| rv-6.12.0-211.49.1.el10_2.aarch64.rpm | 0e84576dc20bf68fc679bd84400112fb6c2ef4b4efac7ae3e29aea31f9d22ae0 | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_x86_64_appstream |
| kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_x86_64_codeready_builder | |
| kernel-6.12.0-211.49.1.el10_2.src.rpm | 0673a79c2e2bee6156df1dd1f8f8f5617abc12129d9453b8123366b70a78b81b | - | ol10_x86_64_u2_baseos_patch | |
| kernel-6.12.0-211.49.1.el10_2.x86_64.rpm | 298a5d935b643b86fbd4fd794fdb5505de199439aea83207c82c2c2130d732b9 | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.49.1.el10_2.x86_64.rpm | 298a5d935b643b86fbd4fd794fdb5505de199439aea83207c82c2c2130d732b9 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-abi-stablelists-6.12.0-211.49.1.el10_2.noarch.rpm | 5aeccf6a4900274ca2543838bdf0f5bb6491475b8fcb6e5f1bd6552857decd23 | - | ol10_x86_64_baseos_latest | |
| kernel-abi-stablelists-6.12.0-211.49.1.el10_2.noarch.rpm | 5aeccf6a4900274ca2543838bdf0f5bb6491475b8fcb6e5f1bd6552857decd23 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-core-6.12.0-211.49.1.el10_2.x86_64.rpm | 742dd0e360400a64b28401a768ab499bab010158017b61602b8363e376b024e7 | - | ol10_x86_64_baseos_latest | |
| kernel-core-6.12.0-211.49.1.el10_2.x86_64.rpm | 742dd0e360400a64b28401a768ab499bab010158017b61602b8363e376b024e7 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.49.1.el10_2.x86_64.rpm | 3ef819fa0499cc35e8b92f9e4575ead6b4de9ac01e80dd6faaa8f784d521a1d3 | - | ol10_x86_64_codeready_builder | |
| kernel-debug-6.12.0-211.49.1.el10_2.x86_64.rpm | 67c3fd9ab9f0685272c272aa7fe4e27c09b158664c0724d08d896b9ce3f1c089 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-6.12.0-211.49.1.el10_2.x86_64.rpm | 67c3fd9ab9f0685272c272aa7fe4e27c09b158664c0724d08d896b9ce3f1c089 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-core-6.12.0-211.49.1.el10_2.x86_64.rpm | 161fff46c071d587d8d6e6dd301972cb05dc0edf5132d245739feabc75f814a8 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-core-6.12.0-211.49.1.el10_2.x86_64.rpm | 161fff46c071d587d8d6e6dd301972cb05dc0edf5132d245739feabc75f814a8 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-devel-6.12.0-211.49.1.el10_2.x86_64.rpm | 7525ab5597865ec913511983501f8e93bc19d2f8765f9b0d91b5600e5fcde13a | - | ol10_x86_64_appstream | |
| kernel-debug-devel-matched-6.12.0-211.49.1.el10_2.x86_64.rpm | 6c78c0f965452a9aec567d517273c75b6b5202f4e4dce72b756f4a01690bd635 | - | ol10_x86_64_appstream | |
| kernel-debug-modules-6.12.0-211.49.1.el10_2.x86_64.rpm | bdcfcd75bfcadb3abad1fb82e595ec663a1ea8f96026b02cda25a7b7cd8f4edd | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-6.12.0-211.49.1.el10_2.x86_64.rpm | bdcfcd75bfcadb3abad1fb82e595ec663a1ea8f96026b02cda25a7b7cd8f4edd | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm | b09720f4e0144d0bcd78ad79812469b12ccab888fa2952836a5180b398b84f80 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm | b09720f4e0144d0bcd78ad79812469b12ccab888fa2952836a5180b398b84f80 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm | 4c5d052abf2cbdb540abfd4b86b6668808f07ad1e932793fa07273e0e64f493a | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm | 4c5d052abf2cbdb540abfd4b86b6668808f07ad1e932793fa07273e0e64f493a | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-uki-virt-6.12.0-211.49.1.el10_2.x86_64.rpm | 982cd9e0180e7986e0451c7ddcde206c9f3539cb3fbf3b91d0c8de97655ca5f3 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-uki-virt-6.12.0-211.49.1.el10_2.x86_64.rpm | 982cd9e0180e7986e0451c7ddcde206c9f3539cb3fbf3b91d0c8de97655ca5f3 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-devel-6.12.0-211.49.1.el10_2.x86_64.rpm | bb2c160f0fc329b07a3dedaea2a0ff10b04762afef9a03b2164191ae3abb5420 | - | ol10_x86_64_appstream | |
| kernel-devel-matched-6.12.0-211.49.1.el10_2.x86_64.rpm | b52cf7fd400c66d667c9d7f855676a268bd68d3994166a3fec6ce9c8daca15a7 | - | ol10_x86_64_appstream | |
| kernel-doc-6.12.0-211.49.1.el10_2.noarch.rpm | 3ecdb8a0fc6f3c758d11bffdeba26d0592c50dd7b4a86d0cb443b9c54e355146 | - | ol10_x86_64_appstream | |
| kernel-headers-6.12.0-211.49.1.el10_2.x86_64.rpm | bca42f6c7d8dee352b89370b8c59e7a9f1d7dcb61092ad75e0e2dcc26f7a236a | - | ol10_x86_64_appstream | |
| kernel-modules-6.12.0-211.49.1.el10_2.x86_64.rpm | 94875a550bdd53b55fb0a4271708fe84fe73e8d2c7cf7f41c76a5f17e9016173 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-6.12.0-211.49.1.el10_2.x86_64.rpm | 94875a550bdd53b55fb0a4271708fe84fe73e8d2c7cf7f41c76a5f17e9016173 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm | 13c65779e8246d0f1d4e9156631823a68972c914bef90079c0d4abdc5a0ded1a | - | ol10_x86_64_baseos_latest | |
| kernel-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm | 13c65779e8246d0f1d4e9156631823a68972c914bef90079c0d4abdc5a0ded1a | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm | 1d144f45709f252c887b3e041716b091c769f92946f33a6e645896eee53297c4 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm | 1d144f45709f252c887b3e041716b091c769f92946f33a6e645896eee53297c4 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-matched-6.12.0-211.49.1.el10_2.x86_64.rpm | c394ba2a5820dbb3920b3475836910d522fc4c1336d006f6dad57ebdde04bcf5 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-matched-6.12.0-211.49.1.el10_2.x86_64.rpm | c394ba2a5820dbb3920b3475836910d522fc4c1336d006f6dad57ebdde04bcf5 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-6.12.0-211.49.1.el10_2.x86_64.rpm | 20228954d8007779e4defc89e966cd1626957dfc6b04bdf6169f707725a2cce4 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-6.12.0-211.49.1.el10_2.x86_64.rpm | 20228954d8007779e4defc89e966cd1626957dfc6b04bdf6169f707725a2cce4 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.49.1.el10_2.x86_64.rpm | cad4a8891684e18e25179c4ece5914b6e660edb62e7f110200717aa15c7bd81d | - | ol10_x86_64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.49.1.el10_2.x86_64.rpm | cad4a8891684e18e25179c4ece5914b6e660edb62e7f110200717aa15c7bd81d | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.49.1.el10_2.x86_64.rpm | 0bdb4228645487169c224a8f89b27d87ecb5e00483c2d7f9e5984822b105554e | - | ol10_x86_64_codeready_builder | |
| kernel-uki-virt-6.12.0-211.49.1.el10_2.x86_64.rpm | 1836dd2b6cf1010ce38a114d4dede93785801cb143e66b8f39b73665ed7294b5 | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-6.12.0-211.49.1.el10_2.x86_64.rpm | 1836dd2b6cf1010ce38a114d4dede93785801cb143e66b8f39b73665ed7294b5 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-uki-virt-addons-6.12.0-211.49.1.el10_2.x86_64.rpm | 803dd726acb4a6c55c4d2856eddf4bd90efda5672f6a0cdbf58904c90bb264ea | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-addons-6.12.0-211.49.1.el10_2.x86_64.rpm | 803dd726acb4a6c55c4d2856eddf4bd90efda5672f6a0cdbf58904c90bb264ea | - | ol10_x86_64_u2_baseos_patch | |
| libperf-6.12.0-211.49.1.el10_2.x86_64.rpm | 5ab6c96c0f2c941b26d5b5f65b4e3a30d3669e19009813cef04f5ac736031943 | - | ol10_x86_64_codeready_builder | |
| perf-6.12.0-211.49.1.el10_2.x86_64.rpm | 8ce361fdf5e9eb045518945f335bd72a55c1cf6a509929e3990d73de0febb73d | - | ol10_x86_64_appstream | |
| python3-perf-6.12.0-211.49.1.el10_2.x86_64.rpm | 2c3e28281c2fe4ed3aeea374871df3857944be5f9ba7cbc1d22b45d0c9fe27c2 | - | ol10_x86_64_appstream | |
| rtla-6.12.0-211.49.1.el10_2.x86_64.rpm | e6d56fe321448d7ff98b8572273ed5ff96f3fa4a3c288d96294aebe001e9de46 | - | ol10_x86_64_appstream | |
| rv-6.12.0-211.49.1.el10_2.x86_64.rpm | 073762b59f5bedf8a39f6f78052b8febc393293a2313e21ec9c0485cada836f0 | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
