ELSA-2026-0786

ELSA-2026-0786 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-01-20

Description

[6.12.0-124.28.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.28.1]
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}

Related CVEs

CVE-2025-68285

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_aarch64_appstream
	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_aarch64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.28.1.el10_1.aarch64.rpm	b9f92a349cb57180120d5ebf7ee0a37ff87e402ab4e5d0b50648ef0083f51a59	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-124.28.1.el10_1.aarch64.rpm	8149ba3376d7be832d455c82fa87e181221e783f1735b3f2744fbf59342561c5	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-124.28.1.el10_1.aarch64.rpm	484be90a9042e13222b8e1a41e8375447795f22aa1177015beda69d3c191745a	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-124.28.1.el10_1.aarch64.rpm	484be90a9042e13222b8e1a41e8375447795f22aa1177015beda69d3c191745a	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.28.1.el10_1.aarch64.rpm	15775525cd29bf5c2ae51442e69a650fa979c4a0edf8be80fa9b79dd12e1e2d4	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-124.28.1.el10_1.aarch64.rpm	15775525cd29bf5c2ae51442e69a650fa979c4a0edf8be80fa9b79dd12e1e2d4	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.28.1.el10_1.aarch64.rpm	1e7c350302f05b3172268d21dd175c52b03b82e88cfae0a4bc6685973e0c2691	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-124.28.1.el10_1.aarch64.rpm	f510620ed4925af0e4c7cf960b85aebb2837072fc6bcc3bcb104ebbe020e709e	-	ol10_aarch64_codeready_builder
	perf-6.12.0-124.28.1.el10_1.aarch64.rpm	a3fa26d75e7a479bc3bf9523451aaf7a417a8458235c1b509a988120fa50c0cc	-	ol10_aarch64_appstream
	python3-perf-6.12.0-124.28.1.el10_1.aarch64.rpm	f72f623c99aba10bae61a6e8a69d6150177316a1b62b81664616c49860a7e295	-	ol10_aarch64_appstream
	rtla-6.12.0-124.28.1.el10_1.aarch64.rpm	c3348fc18ac673277a196bd4d72b2329a243f4db212dd4373166f7796547cd27	-	ol10_aarch64_appstream
	rv-6.12.0-124.28.1.el10_1.aarch64.rpm	e7f0620291b8d180567d4e9d3b689cfa12c262b00b6b4413cdd89c4eae4ae1d0	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_x86_64_appstream
	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-124.28.1.el10_1.src.rpm	6f759de31777e664de2887d27094196846da4839e3aff5934006ab982bd05191	-	ol10_x86_64_u1_baseos_patch
	kernel-6.12.0-124.28.1.el10_1.x86_64.rpm	585880c720978d360bcd5e896522a3d628cde27c75836b33e3f6b4a27f7f2208	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.28.1.el10_1.x86_64.rpm	585880c720978d360bcd5e896522a3d628cde27c75836b33e3f6b4a27f7f2208	-	ol10_x86_64_u1_baseos_patch
	kernel-abi-stablelists-6.12.0-124.28.1.el10_1.noarch.rpm	60df0cb6991ca1f8e1f63ca123a7b83bb43765abdc7e14d69ecce87096e83784	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-124.28.1.el10_1.noarch.rpm	60df0cb6991ca1f8e1f63ca123a7b83bb43765abdc7e14d69ecce87096e83784	-	ol10_x86_64_u1_baseos_patch
	kernel-core-6.12.0-124.28.1.el10_1.x86_64.rpm	906c2f5848697907ab61d8edbed7a047424a83f80941c990e63d1d400d1d9d08	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-124.28.1.el10_1.x86_64.rpm	906c2f5848697907ab61d8edbed7a047424a83f80941c990e63d1d400d1d9d08	-	ol10_x86_64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.28.1.el10_1.x86_64.rpm	d007b429b67efb88a81a66727dbc223ea952c4e4e4210ea8466078059813074e	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-124.28.1.el10_1.x86_64.rpm	aaa10f033583b34411df8c8f6107a998c63698bb61b2acde2cecdb0a63a5bd1b	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-124.28.1.el10_1.x86_64.rpm	aaa10f033583b34411df8c8f6107a998c63698bb61b2acde2cecdb0a63a5bd1b	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-core-6.12.0-124.28.1.el10_1.x86_64.rpm	a8fa0b5a844b9a93de7dc35eafa35da49279c0f51aadb2817a35a09e4fa6eb31	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-124.28.1.el10_1.x86_64.rpm	a8fa0b5a844b9a93de7dc35eafa35da49279c0f51aadb2817a35a09e4fa6eb31	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-devel-6.12.0-124.28.1.el10_1.x86_64.rpm	c1928357128187fd06b1dcef6508a47f345e7454fb5fc3333daff26d30f87407	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-124.28.1.el10_1.x86_64.rpm	7a4c158e5f47907881771bfcf87b929d82d39593e6e1002e2fe1b34df31eeeb1	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-124.28.1.el10_1.x86_64.rpm	211d9beaf397ced05235f7a2fdc0c8e9fa0cc58d99fd8ddd8e96bf862f6ba2ef	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-124.28.1.el10_1.x86_64.rpm	211d9beaf397ced05235f7a2fdc0c8e9fa0cc58d99fd8ddd8e96bf862f6ba2ef	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-core-6.12.0-124.28.1.el10_1.x86_64.rpm	89ecb31ad01fad8bb0192296e7c0f76ef4e6d72577e5998ba21e0356c10c33b4	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-124.28.1.el10_1.x86_64.rpm	89ecb31ad01fad8bb0192296e7c0f76ef4e6d72577e5998ba21e0356c10c33b4	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-extra-6.12.0-124.28.1.el10_1.x86_64.rpm	69740dd9a676d4b6cc910edc95c14cbea1dc3bcaf8be46be736bc39278b4c75e	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-124.28.1.el10_1.x86_64.rpm	69740dd9a676d4b6cc910edc95c14cbea1dc3bcaf8be46be736bc39278b4c75e	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-uki-virt-6.12.0-124.28.1.el10_1.x86_64.rpm	43adc27c761d44a606c5ef0d3dd8038fbbd6c78435e53e4ac034b582c2bdab75	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-124.28.1.el10_1.x86_64.rpm	43adc27c761d44a606c5ef0d3dd8038fbbd6c78435e53e4ac034b582c2bdab75	-	ol10_x86_64_u1_baseos_patch
	kernel-devel-6.12.0-124.28.1.el10_1.x86_64.rpm	fbc4a60123a46e45da7e663faf2505ba693c72e7228538e5cda9d0b903dfe017	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-124.28.1.el10_1.x86_64.rpm	24c1be3c40edd9f5bdf51d4dddb1ca83f4bbaa3c0e722f65653700e444677b8d	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-124.28.1.el10_1.noarch.rpm	0b3478970217efbb08752e1844b629d00a7c9603c507ff8f069f3c36bbf4513c	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-124.28.1.el10_1.x86_64.rpm	ead468f4180b53051d115687dee6a878483cfe275d6bb649acaaef4e5c7cc5a8	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-124.28.1.el10_1.x86_64.rpm	0efe6ddf108fec53bde0b4b13cd4aa2ba1966690069973cdbed89b737c53a452	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-124.28.1.el10_1.x86_64.rpm	0efe6ddf108fec53bde0b4b13cd4aa2ba1966690069973cdbed89b737c53a452	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-core-6.12.0-124.28.1.el10_1.x86_64.rpm	c671939a491e8d6c0261ca36acd70767c7fb251c6c3337ca99767ad91be18e68	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-124.28.1.el10_1.x86_64.rpm	c671939a491e8d6c0261ca36acd70767c7fb251c6c3337ca99767ad91be18e68	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-6.12.0-124.28.1.el10_1.x86_64.rpm	1292b9323093b340a575e67c12ff9301dd7424a33db9a695292a305322ef05b7	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-124.28.1.el10_1.x86_64.rpm	1292b9323093b340a575e67c12ff9301dd7424a33db9a695292a305322ef05b7	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-matched-6.12.0-124.28.1.el10_1.x86_64.rpm	022f116548aebe68592142b0f37a9b2f97cfb017aa9b02ea60f1bbb0100a3420	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-124.28.1.el10_1.x86_64.rpm	022f116548aebe68592142b0f37a9b2f97cfb017aa9b02ea60f1bbb0100a3420	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-6.12.0-124.28.1.el10_1.x86_64.rpm	74212d8f9c421ab05cec439456726ab5b1ddb7dafc88bdd3035658541eb150ea	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-124.28.1.el10_1.x86_64.rpm	74212d8f9c421ab05cec439456726ab5b1ddb7dafc88bdd3035658541eb150ea	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.28.1.el10_1.x86_64.rpm	edc81bf090613edb10da32afd91f4287bc37243f19bb80570f43ba52845f5575	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-124.28.1.el10_1.x86_64.rpm	edc81bf090613edb10da32afd91f4287bc37243f19bb80570f43ba52845f5575	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.28.1.el10_1.x86_64.rpm	85eb9f48e1ecb9d03973b3512827d6a4adb51ab98bb87ea709d901af2bb01776	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-124.28.1.el10_1.x86_64.rpm	b4716ced5f924a9dcd88cf6021595af65f6e13b01437b484245428da0f086273	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-124.28.1.el10_1.x86_64.rpm	b4716ced5f924a9dcd88cf6021595af65f6e13b01437b484245428da0f086273	-	ol10_x86_64_u1_baseos_patch
	kernel-uki-virt-addons-6.12.0-124.28.1.el10_1.x86_64.rpm	6d7180d1207ee224a84236605cf98061f4036c28f9b8df68ac29cdca2595fa98	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-124.28.1.el10_1.x86_64.rpm	6d7180d1207ee224a84236605cf98061f4036c28f9b8df68ac29cdca2595fa98	-	ol10_x86_64_u1_baseos_patch
	libperf-6.12.0-124.28.1.el10_1.x86_64.rpm	e76cd5469d71ecd3ef45cac49425093e23bbcefdbc194a35c07362a31455b18a	-	ol10_x86_64_codeready_builder
	perf-6.12.0-124.28.1.el10_1.x86_64.rpm	043a1ebbb489bd8dc70cad8556a10627f70f9f352f10795bd18afbe08180c040	-	ol10_x86_64_appstream
	python3-perf-6.12.0-124.28.1.el10_1.x86_64.rpm	98405c55e29fdc44504fe0e47d68c4fdaf7b3141a9fa1d59a3ae88a2c8e5adf8	-	ol10_x86_64_appstream
	rtla-6.12.0-124.28.1.el10_1.x86_64.rpm	9ed4252cfc83daa90605ce8dbd805f7e5636cb870d5523a9363cba8302eb178e	-	ol10_x86_64_appstream
	rv-6.12.0-124.28.1.el10_1.x86_64.rpm	0322a7f43d2277d1edeb9a569d4c24001c841afd68a3cd2862c9eeef039f33e8	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team