Stay Connected:

ELSA-2026-19074

ELSA-2026-19074 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-08

Description


[6.12.0-211.7.3.el10_2.OL10]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.7.3.el10_2]
- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}

[6.12.0-211.7.2.el10_2]
- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172542]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172542]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172542]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172542]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172542] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172542] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172542]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172542] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172542] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172542]


Related CVEs


CVE-2026-23060
CVE-2026-31431
CVE-2026-31677
CVE-2026-43284

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_aarch64_appstream
kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_aarch64_baseos_latest
kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_aarch64_codeready_builder
kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_aarch64_u2_baseos_base
kernel-cross-headers-6.12.0-211.7.3.el10_2.aarch64.rpmc5b8a3d66df6d0b9d2cf16ab5eaf6b843715df78768bd9782f737b7eb9d0e133-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-211.7.3.el10_2.aarch64.rpm0b07b87730d7e476fbbd0aa09d52935a726b8a0bdce6f14638839a9778755b69-ol10_aarch64_appstream
kernel-tools-6.12.0-211.7.3.el10_2.aarch64.rpm92d72bb5e82e603bfed16b7e3afddb094c72771d9c0fecdb3cc2bf5564c0d05c-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-211.7.3.el10_2.aarch64.rpm92d72bb5e82e603bfed16b7e3afddb094c72771d9c0fecdb3cc2bf5564c0d05c-ol10_aarch64_u2_baseos_base
kernel-tools-libs-6.12.0-211.7.3.el10_2.aarch64.rpm411ce156fdf43f785779aaa974e4dffe20f35361b1f39dbb04d19a5c85006d98-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-211.7.3.el10_2.aarch64.rpm411ce156fdf43f785779aaa974e4dffe20f35361b1f39dbb04d19a5c85006d98-ol10_aarch64_u2_baseos_base
kernel-tools-libs-devel-6.12.0-211.7.3.el10_2.aarch64.rpmc13e91f75a9c0b6c34e974074a6b6924f2e68a27b9e9ae724ee2f13df390cd97-ol10_aarch64_codeready_builder
libperf-6.12.0-211.7.3.el10_2.aarch64.rpm6a63dfbe2890f3e4ebb630acae224c9030bccb5bd2ac2f3eb5dae35511278db6-ol10_aarch64_codeready_builder
perf-6.12.0-211.7.3.el10_2.aarch64.rpm6dcaf467b33e68544cd4423aba608a96cbe43b0f89f43aee007c3341a5521e1b-ol10_aarch64_appstream
python3-perf-6.12.0-211.7.3.el10_2.aarch64.rpm2c0c6bdbecd9136edea176f26c3a7c26e639cf6ae03eec292d6f79edb7ad4bb0-ol10_aarch64_appstream
rtla-6.12.0-211.7.3.el10_2.aarch64.rpm1ddda54d7790dd0cf83b2f28576151fe9658fe0b48b19c9ee15f35582e8f9184-ol10_aarch64_appstream
rv-6.12.0-211.7.3.el10_2.aarch64.rpme648c9c7f1b9e8d4613ee56e912f1f9a12300d196eb72b42e087368b32a4f4be-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_x86_64_appstream
kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_x86_64_baseos_latest
kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_x86_64_codeready_builder
kernel-6.12.0-211.7.3.el10_2.src.rpm29efc1884f49e24f9ec92dfe001db9994c6f3259d3829182c71a8de18caad512-ol10_x86_64_u2_baseos_base
kernel-6.12.0-211.7.3.el10_2.x86_64.rpm226d4e2699c0bff3552c725959cba37f7ff904baa0abe2a5aff05c6393592c54-ol10_x86_64_baseos_latest
kernel-6.12.0-211.7.3.el10_2.x86_64.rpm226d4e2699c0bff3552c725959cba37f7ff904baa0abe2a5aff05c6393592c54-ol10_x86_64_u2_baseos_base
kernel-abi-stablelists-6.12.0-211.7.3.el10_2.noarch.rpm64b5d5920ac6f661674a6bfbd045f2b8a8179957d102258088a41fe234b25a21-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-211.7.3.el10_2.noarch.rpm64b5d5920ac6f661674a6bfbd045f2b8a8179957d102258088a41fe234b25a21-ol10_x86_64_u2_baseos_base
kernel-core-6.12.0-211.7.3.el10_2.x86_64.rpmea0412f5107e285617ee0671df75c738c71ba9e9d731421bfdd1ecdd8ebc7cbc-ol10_x86_64_baseos_latest
kernel-core-6.12.0-211.7.3.el10_2.x86_64.rpmea0412f5107e285617ee0671df75c738c71ba9e9d731421bfdd1ecdd8ebc7cbc-ol10_x86_64_u2_baseos_base
kernel-cross-headers-6.12.0-211.7.3.el10_2.x86_64.rpmf6fa3c67064a2d44ba0152f1d4fb70736afa84d5da590085f1bda735a0a0c4b7-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-211.7.3.el10_2.x86_64.rpm41db7cb08c24d3956021a4edaacf59c2b48e6d326c91f33d472586bab861eb4b-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-211.7.3.el10_2.x86_64.rpm41db7cb08c24d3956021a4edaacf59c2b48e6d326c91f33d472586bab861eb4b-ol10_x86_64_u2_baseos_base
kernel-debug-core-6.12.0-211.7.3.el10_2.x86_64.rpmfc68e2fd77f6efd5fec3929aa487df5d55ba8b6ca1430f810f8b8e025b9247da-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-211.7.3.el10_2.x86_64.rpmfc68e2fd77f6efd5fec3929aa487df5d55ba8b6ca1430f810f8b8e025b9247da-ol10_x86_64_u2_baseos_base
kernel-debug-devel-6.12.0-211.7.3.el10_2.x86_64.rpm3df936cd95c2db6cafde3918af3ef2b84b325541b842eeef58989ad292d5efb5-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-211.7.3.el10_2.x86_64.rpmc5f952e8b131913e4b1cdfd5400f0aa214dad8c846049f66206da7dbda3b824d-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-211.7.3.el10_2.x86_64.rpmc9501585a68321d24f44841f3aa3d6352be72c6174e88ab88f31976cb4a1b8cc-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-211.7.3.el10_2.x86_64.rpmc9501585a68321d24f44841f3aa3d6352be72c6174e88ab88f31976cb4a1b8cc-ol10_x86_64_u2_baseos_base
kernel-debug-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpmcbeb1bb8b906a20e9b619523581e61abe21018be24ec8462284f67bd350c26da-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpmcbeb1bb8b906a20e9b619523581e61abe21018be24ec8462284f67bd350c26da-ol10_x86_64_u2_baseos_base
kernel-debug-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpmb766195a0391af34f0ecd45f8ceb8597ae8d21997f8b0df37d54cf576a2fab63-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpmb766195a0391af34f0ecd45f8ceb8597ae8d21997f8b0df37d54cf576a2fab63-ol10_x86_64_u2_baseos_base
kernel-debug-uki-virt-6.12.0-211.7.3.el10_2.x86_64.rpm23e9bb29946361e276ab75e947d085cd0ccfc3397fe33d4b7c4319e3dfc47e12-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-211.7.3.el10_2.x86_64.rpm23e9bb29946361e276ab75e947d085cd0ccfc3397fe33d4b7c4319e3dfc47e12-ol10_x86_64_u2_baseos_base
kernel-devel-6.12.0-211.7.3.el10_2.x86_64.rpme9b1d9d15c864774745f3233f87a6d2c6f1e3924c2fb908ed5aa49681bb423f8-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-211.7.3.el10_2.x86_64.rpm5f569342e0f5a39ebc43a8ddea8dcee62eeddde2e48d3c857409b3aca72f57f0-ol10_x86_64_appstream
kernel-doc-6.12.0-211.7.3.el10_2.noarch.rpm253ea2a7b03163343f53c72418b0a4ec57ed88ec39a15774af7f3995843a671c-ol10_x86_64_appstream
kernel-headers-6.12.0-211.7.3.el10_2.x86_64.rpm725a250ad8c0b79a4a0860fe14309e21e384c87d52a9503095ba07600f807089-ol10_x86_64_appstream
kernel-modules-6.12.0-211.7.3.el10_2.x86_64.rpm7f5b4e41909d8f812c4c5d29d125ff6ad883b94993d3b947189acfad077e1704-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-211.7.3.el10_2.x86_64.rpm7f5b4e41909d8f812c4c5d29d125ff6ad883b94993d3b947189acfad077e1704-ol10_x86_64_u2_baseos_base
kernel-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpme5607832375a3abd735e735b2a62056998036fb40d5a31f6c384b423725dbae9-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpme5607832375a3abd735e735b2a62056998036fb40d5a31f6c384b423725dbae9-ol10_x86_64_u2_baseos_base
kernel-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpm81c9e3094de083c5564c1d71c5723416b974a99459c2ef6e1e5931be80d4439a-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpm81c9e3094de083c5564c1d71c5723416b974a99459c2ef6e1e5931be80d4439a-ol10_x86_64_u2_baseos_base
kernel-modules-extra-matched-6.12.0-211.7.3.el10_2.x86_64.rpmdd3f90fe1afadb3923eecc91ee4f02d310281c9c74ab25737866c2f207459912-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-211.7.3.el10_2.x86_64.rpmdd3f90fe1afadb3923eecc91ee4f02d310281c9c74ab25737866c2f207459912-ol10_x86_64_u2_baseos_base
kernel-tools-6.12.0-211.7.3.el10_2.x86_64.rpm03695fd4ca3bff3c556863e28c6d4ec8ce78b436feb5572e08a717203c9685dd-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-211.7.3.el10_2.x86_64.rpm03695fd4ca3bff3c556863e28c6d4ec8ce78b436feb5572e08a717203c9685dd-ol10_x86_64_u2_baseos_base
kernel-tools-libs-6.12.0-211.7.3.el10_2.x86_64.rpm6855d058795faf5a6289640b1a3c885ee83a9ff434bf1044dc3cf616255ea8a3-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-211.7.3.el10_2.x86_64.rpm6855d058795faf5a6289640b1a3c885ee83a9ff434bf1044dc3cf616255ea8a3-ol10_x86_64_u2_baseos_base
kernel-tools-libs-devel-6.12.0-211.7.3.el10_2.x86_64.rpm9e7a08de0df325a973971bf5f265efe2d07d96a1694d119c3ee6d4170089f648-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-211.7.3.el10_2.x86_64.rpm96f1e1ff0038f7af099d1cd6fffad280b51e65b9350a41372375873c1f14acf1-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-211.7.3.el10_2.x86_64.rpm96f1e1ff0038f7af099d1cd6fffad280b51e65b9350a41372375873c1f14acf1-ol10_x86_64_u2_baseos_base
kernel-uki-virt-addons-6.12.0-211.7.3.el10_2.x86_64.rpm927b3c6f9bcccf601864c6c2f7d92201ae044de85ce65b3f14e0a6037a2f916c-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-211.7.3.el10_2.x86_64.rpm927b3c6f9bcccf601864c6c2f7d92201ae044de85ce65b3f14e0a6037a2f916c-ol10_x86_64_u2_baseos_base
libperf-6.12.0-211.7.3.el10_2.x86_64.rpm3aefc9e5b2d1a02c2d60ffef4bc3f9bb2960dabc6df6cbe9f5a5aa176a5cddcd-ol10_x86_64_codeready_builder
perf-6.12.0-211.7.3.el10_2.x86_64.rpma82104e4863ad1ef341e28f72b8ab678103d6b3eef2ca9d2f13839b9c4545fc3-ol10_x86_64_appstream
python3-perf-6.12.0-211.7.3.el10_2.x86_64.rpm44ac65d1b2b486c672683efef68e00a9708b8cacf764d1a95433c23bfe52fef5-ol10_x86_64_appstream
rtla-6.12.0-211.7.3.el10_2.x86_64.rpm5c521e8b8b00befd21b8abb5718ac429b581288adf368d171dd05eeefdb9df5a-ol10_x86_64_appstream
rv-6.12.0-211.7.3.el10_2.x86_64.rpm5fcf18d7c61a47002ce412380087baa9afe5b66babbba063f2fd3217a9e6e61b-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights