ELSA-2026-1178

ELSA-2026-1178 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-01-26

Description

[6.12.0-124.29.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.29.1]
- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]

Related CVEs

CVE-2025-38383

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_aarch64_appstream
	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_aarch64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.29.1.el10_1.aarch64.rpm	61c9ae1f8bc46f9ee3a8bdb0dde66ad70750aafec5bf1b596021ae97db802e10	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-124.29.1.el10_1.aarch64.rpm	866a9abeef0de6c6b3db33e21835879c59697feed5f2773fc36bc27bb42406aa	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-124.29.1.el10_1.aarch64.rpm	7120fa67c012e0bd4d0d3360d072fa683eaf9d49531d8ae815f7838e537b4924	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-124.29.1.el10_1.aarch64.rpm	7120fa67c012e0bd4d0d3360d072fa683eaf9d49531d8ae815f7838e537b4924	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.29.1.el10_1.aarch64.rpm	5218a97ce241f2da6c5de1009004110fe1f42c9358d043d7a9f9fa22a4a6d51b	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-124.29.1.el10_1.aarch64.rpm	5218a97ce241f2da6c5de1009004110fe1f42c9358d043d7a9f9fa22a4a6d51b	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.29.1.el10_1.aarch64.rpm	fe15f978565f9d84bf1629f6a412d87d1db9ba5aad9fa44f405bedbaa70a67a5	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-124.29.1.el10_1.aarch64.rpm	e20f2bae673240e4213ce4a05af0b0cce75bfee5f8a19d47507b8350990680c8	-	ol10_aarch64_codeready_builder
	perf-6.12.0-124.29.1.el10_1.aarch64.rpm	7f861e41ea629f3468e1696c9b9565929c74294489ad8ed72726137981e266ec	-	ol10_aarch64_appstream
	python3-perf-6.12.0-124.29.1.el10_1.aarch64.rpm	d3a9fc057d0a56d10e672c809bf9837640bc460d7c68a88cd5269e25d23d5670	-	ol10_aarch64_appstream
	rtla-6.12.0-124.29.1.el10_1.aarch64.rpm	acfb8a6a42a11386e2a5323b44689e4c0c20db1fbd59552209226491fd3649cc	-	ol10_aarch64_appstream
	rv-6.12.0-124.29.1.el10_1.aarch64.rpm	57dc12beaca29931ca6046eecd77562b4b212bb7f31774b56a9d6ff78ba36875	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_x86_64_appstream
	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-124.29.1.el10_1.src.rpm	e3b7b8920e2dd36150adaac53fd3b4da49cde30ae75cbd1b655456b4acf51b70	-	ol10_x86_64_u1_baseos_patch
	kernel-6.12.0-124.29.1.el10_1.x86_64.rpm	f156e669291913e58b513b7cb475dc479aba4d5f47693d4e4eedc1ee998762b5	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.29.1.el10_1.x86_64.rpm	f156e669291913e58b513b7cb475dc479aba4d5f47693d4e4eedc1ee998762b5	-	ol10_x86_64_u1_baseos_patch
	kernel-abi-stablelists-6.12.0-124.29.1.el10_1.noarch.rpm	e99de97ab02b5f8af0155314036f66dafaebf14930bcf7d7d7acfacd22b7bdb8	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-124.29.1.el10_1.noarch.rpm	e99de97ab02b5f8af0155314036f66dafaebf14930bcf7d7d7acfacd22b7bdb8	-	ol10_x86_64_u1_baseos_patch
	kernel-core-6.12.0-124.29.1.el10_1.x86_64.rpm	5620456541dd82f183ab0854708338d5621f17e5c5747d7709d397c78c398dbc	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-124.29.1.el10_1.x86_64.rpm	5620456541dd82f183ab0854708338d5621f17e5c5747d7709d397c78c398dbc	-	ol10_x86_64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.29.1.el10_1.x86_64.rpm	5f2a37815421a5195a64ee5939e791b4f60d0337917e44e72125b25362aab3d5	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-124.29.1.el10_1.x86_64.rpm	78882cc1f15f2ae3f0772b14f059620564d130406c641564d2a24e78eb8105c1	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-124.29.1.el10_1.x86_64.rpm	78882cc1f15f2ae3f0772b14f059620564d130406c641564d2a24e78eb8105c1	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-core-6.12.0-124.29.1.el10_1.x86_64.rpm	f23427996b2045ced19f3d2b434b59c787d2e5cbaeaa57ad9f8c187ea28bc595	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-124.29.1.el10_1.x86_64.rpm	f23427996b2045ced19f3d2b434b59c787d2e5cbaeaa57ad9f8c187ea28bc595	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-devel-6.12.0-124.29.1.el10_1.x86_64.rpm	a6257e8fa5e5e117a91d05f885b6d07f144e00e316b7f922b50555fbdbba911f	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-124.29.1.el10_1.x86_64.rpm	17f724ed1bf996a6aec37a4d90ff15763e37385bdf08e207685cd67e11e7b545	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-124.29.1.el10_1.x86_64.rpm	6492f9f7f99f1563e6154c555761e2fee51e41be220dd5767d4dc27d45281c1b	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-124.29.1.el10_1.x86_64.rpm	6492f9f7f99f1563e6154c555761e2fee51e41be220dd5767d4dc27d45281c1b	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-core-6.12.0-124.29.1.el10_1.x86_64.rpm	471a7fab61f4a525297f8f7a1bce760b95e09cc87f866f2b8025079615c3e909	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-124.29.1.el10_1.x86_64.rpm	471a7fab61f4a525297f8f7a1bce760b95e09cc87f866f2b8025079615c3e909	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-extra-6.12.0-124.29.1.el10_1.x86_64.rpm	409bc1393fb9d48461599da71beb97995ee7f345f64904b8d5f8449370644c68	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-124.29.1.el10_1.x86_64.rpm	409bc1393fb9d48461599da71beb97995ee7f345f64904b8d5f8449370644c68	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-uki-virt-6.12.0-124.29.1.el10_1.x86_64.rpm	b2ba4341f58c4dba8c791cf0235db30994d9e5a606864611a65fbf891027ff0b	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-124.29.1.el10_1.x86_64.rpm	b2ba4341f58c4dba8c791cf0235db30994d9e5a606864611a65fbf891027ff0b	-	ol10_x86_64_u1_baseos_patch
	kernel-devel-6.12.0-124.29.1.el10_1.x86_64.rpm	49c761982243b8dce8ca6a3c1aa406e0aff0bbe72491202b09523f324669aa1b	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-124.29.1.el10_1.x86_64.rpm	36ab60db0089322205fc191b18daa5e7862f38dd66d9ce0107ed082484229cda	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-124.29.1.el10_1.noarch.rpm	4b12cc8fc377cda3c66f86e5dc99a0df09032751a7e8a8745cae291e95a178e4	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-124.29.1.el10_1.x86_64.rpm	dfca11148445e5e90000a099f3c8e53fb48f51f99268fcd3db52c7088cde9bbc	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-124.29.1.el10_1.x86_64.rpm	5b11113168e7449d082930977f7d39fc5537e220727fa7e19ffa65ca037b712c	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-124.29.1.el10_1.x86_64.rpm	5b11113168e7449d082930977f7d39fc5537e220727fa7e19ffa65ca037b712c	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-core-6.12.0-124.29.1.el10_1.x86_64.rpm	3973f6d9491634856408cc671e671b48d127bc1ec61c9fe360bca64354803181	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-124.29.1.el10_1.x86_64.rpm	3973f6d9491634856408cc671e671b48d127bc1ec61c9fe360bca64354803181	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-6.12.0-124.29.1.el10_1.x86_64.rpm	25335ea0d631a5fa82a556086b1ad0878ec80dd038ec228f0032079d3560873b	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-124.29.1.el10_1.x86_64.rpm	25335ea0d631a5fa82a556086b1ad0878ec80dd038ec228f0032079d3560873b	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-matched-6.12.0-124.29.1.el10_1.x86_64.rpm	11889720167b421592342a2b59648c72efc3d720e5c20c7d7d3ef6e60a4ccfdb	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-124.29.1.el10_1.x86_64.rpm	11889720167b421592342a2b59648c72efc3d720e5c20c7d7d3ef6e60a4ccfdb	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-6.12.0-124.29.1.el10_1.x86_64.rpm	f9549c0c1f7d4c9890236849d0485575c7e9ec99e8c90a0b95aced288cbe39dd	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-124.29.1.el10_1.x86_64.rpm	f9549c0c1f7d4c9890236849d0485575c7e9ec99e8c90a0b95aced288cbe39dd	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.29.1.el10_1.x86_64.rpm	bb5713b9c6c109b40ca15d6d22ae3d135fde59894446ccff5fef7b66ad265c88	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-124.29.1.el10_1.x86_64.rpm	bb5713b9c6c109b40ca15d6d22ae3d135fde59894446ccff5fef7b66ad265c88	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.29.1.el10_1.x86_64.rpm	a9e8d31916f60f3edab0df69ddfb7866a8ab5487f552ed639ce04f29bee7a1cb	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-124.29.1.el10_1.x86_64.rpm	18c7d196e7f8d8d4f616fe169c513ee18a39463054cb224f2d765b5328b3886a	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-124.29.1.el10_1.x86_64.rpm	18c7d196e7f8d8d4f616fe169c513ee18a39463054cb224f2d765b5328b3886a	-	ol10_x86_64_u1_baseos_patch
	kernel-uki-virt-addons-6.12.0-124.29.1.el10_1.x86_64.rpm	2f7344ccbfed38825bca79b2370ec70f51c704b7a521b179b2a9726e72616898	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-124.29.1.el10_1.x86_64.rpm	2f7344ccbfed38825bca79b2370ec70f51c704b7a521b179b2a9726e72616898	-	ol10_x86_64_u1_baseos_patch
	libperf-6.12.0-124.29.1.el10_1.x86_64.rpm	a84e7467b5e556ba0a96e67e6070049a2558171044d0eb89b98cb256c2cc4e09	-	ol10_x86_64_codeready_builder
	perf-6.12.0-124.29.1.el10_1.x86_64.rpm	7114cc4711f1d8e22fb4713735402c6e85992f332d3fc3954ec6abae2fe3716e	-	ol10_x86_64_appstream
	python3-perf-6.12.0-124.29.1.el10_1.x86_64.rpm	c117b4e5a812be0579deb1011cc0b72d88077aed8a0c1e03b542c0e3648787a2	-	ol10_x86_64_appstream
	rtla-6.12.0-124.29.1.el10_1.x86_64.rpm	7d820962dbee7b952586e30822e68c1bf58505a36ea2929ba831c3028459dde1	-	ol10_x86_64_appstream
	rv-6.12.0-124.29.1.el10_1.x86_64.rpm	f767679f908ff8d40bf1401f49a770ab2c1acd4c0d2161918ee1769c86b485a6	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team