Stay Connected:

ELSA-2026-2282

ELSA-2026-2282 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-02-09

Description


[6.12.0-124.35.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.35.1]
- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}

[6.12.0-124.34.1]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]

[6.12.0-124.33.1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}

[6.12.0-124.32.1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}


Related CVEs


CVE-2025-38403
CVE-2025-38415
CVE-2025-38730
CVE-2025-39933
CVE-2025-40133
CVE-2025-40304
CVE-2025-40322
CVE-2025-68811

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_aarch64_appstream
kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_aarch64_baseos_latest
kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_aarch64_codeready_builder
kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_aarch64_u1_baseos_patch
kernel-cross-headers-6.12.0-124.35.1.el10_1.aarch64.rpm3f39ebf5cb41fcdcfa1e4a9b3e9f09f2f4b47ef799c14420aa0ac6c575746678-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-124.35.1.el10_1.aarch64.rpmc0d38bbb3b9e9a662d1d047dd1b91cf9a07affc15c883b51535302e1d5cc106c-ol10_aarch64_appstream
kernel-tools-6.12.0-124.35.1.el10_1.aarch64.rpm97f20a4ceb7a687f9ff633e761bf54373c5798f46edf2499d839e349ae58ea89-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-124.35.1.el10_1.aarch64.rpm97f20a4ceb7a687f9ff633e761bf54373c5798f46edf2499d839e349ae58ea89-ol10_aarch64_u1_baseos_patch
kernel-tools-libs-6.12.0-124.35.1.el10_1.aarch64.rpm7f54a2ba1556f0845fc87ea30ccbba47b8593c1978f231e8fd0936222a1d93a8-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-124.35.1.el10_1.aarch64.rpm7f54a2ba1556f0845fc87ea30ccbba47b8593c1978f231e8fd0936222a1d93a8-ol10_aarch64_u1_baseos_patch
kernel-tools-libs-devel-6.12.0-124.35.1.el10_1.aarch64.rpm758db93f730fbf57826f6f7c2cadc7c20ea613e5b0986a0da0be3f4c134be490-ol10_aarch64_codeready_builder
libperf-6.12.0-124.35.1.el10_1.aarch64.rpm6af10698a9071c68567ff86358d49d3ee8d8379e8270bb36d17d4297b8877dc2-ol10_aarch64_codeready_builder
perf-6.12.0-124.35.1.el10_1.aarch64.rpmda715a29dafae1708a21d8274bfd14b15f886927970d8bc63508c96051e75d0c-ol10_aarch64_appstream
python3-perf-6.12.0-124.35.1.el10_1.aarch64.rpmf22f8902e5ec11302e65a7746cff57ec12977194f3a8c06e13e7d819d212c59d-ol10_aarch64_appstream
rtla-6.12.0-124.35.1.el10_1.aarch64.rpm35038f724e5e856a1309080ddd47a1f3c982bde690e2f5ba47d1f30224a683cf-ol10_aarch64_appstream
rv-6.12.0-124.35.1.el10_1.aarch64.rpme0727c4ad7d4ea5895957c08797668e0e76f88bc6641ab5c5ead028c2bff9d0f-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_x86_64_appstream
kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_x86_64_baseos_latest
kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_x86_64_codeready_builder
kernel-6.12.0-124.35.1.el10_1.src.rpma256c88ee76b5ca02ddfb9a7312a90613014f502aad0b21066c0c07ef7dfadc6-ol10_x86_64_u1_baseos_patch
kernel-6.12.0-124.35.1.el10_1.x86_64.rpmdb02dc19ae27ca765c5555e543b5708ea39c692d5c2565eada168ab4dd5831ed-ol10_x86_64_baseos_latest
kernel-6.12.0-124.35.1.el10_1.x86_64.rpmdb02dc19ae27ca765c5555e543b5708ea39c692d5c2565eada168ab4dd5831ed-ol10_x86_64_u1_baseos_patch
kernel-abi-stablelists-6.12.0-124.35.1.el10_1.noarch.rpm85d082f47409090f5998fa5d380234f02c288612c716b3471401baea04674f79-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-124.35.1.el10_1.noarch.rpm85d082f47409090f5998fa5d380234f02c288612c716b3471401baea04674f79-ol10_x86_64_u1_baseos_patch
kernel-core-6.12.0-124.35.1.el10_1.x86_64.rpm12c02f4414a23930c37a8cbd182e12cca11b9b254ef88bb7b8acecbe15ac29a6-ol10_x86_64_baseos_latest
kernel-core-6.12.0-124.35.1.el10_1.x86_64.rpm12c02f4414a23930c37a8cbd182e12cca11b9b254ef88bb7b8acecbe15ac29a6-ol10_x86_64_u1_baseos_patch
kernel-cross-headers-6.12.0-124.35.1.el10_1.x86_64.rpme09a8dfe1fd15d75d99d794c93a7d26d98074a5be5234134d7a32e9b92f12868-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-124.35.1.el10_1.x86_64.rpmb2fae77eef8e78525d499eb064d9851d186f6fb8488c09e28397995fe84e1040-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-124.35.1.el10_1.x86_64.rpmb2fae77eef8e78525d499eb064d9851d186f6fb8488c09e28397995fe84e1040-ol10_x86_64_u1_baseos_patch
kernel-debug-core-6.12.0-124.35.1.el10_1.x86_64.rpm216587976bd015bc13840af83c57bdfb5fd59c6af29744f077e487e3650467f1-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-124.35.1.el10_1.x86_64.rpm216587976bd015bc13840af83c57bdfb5fd59c6af29744f077e487e3650467f1-ol10_x86_64_u1_baseos_patch
kernel-debug-devel-6.12.0-124.35.1.el10_1.x86_64.rpmda137f384319e5f43141ef40db2466cc5ec20f59943e3821a3606b3b4f0038ff-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-124.35.1.el10_1.x86_64.rpm8b27ba1615d4735a5d5471d79232586a93f8b040f2f39b4d34adb39d9c2bdbca-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-124.35.1.el10_1.x86_64.rpma959bf7d713fda0dffd8706d068b73ba85c22c1090134a9fcb70fef6354009e8-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-124.35.1.el10_1.x86_64.rpma959bf7d713fda0dffd8706d068b73ba85c22c1090134a9fcb70fef6354009e8-ol10_x86_64_u1_baseos_patch
kernel-debug-modules-core-6.12.0-124.35.1.el10_1.x86_64.rpmd53d0e12afa763e965e9161e53f0ae06569b6927742a9e2a9c4d53f844d0f05b-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-124.35.1.el10_1.x86_64.rpmd53d0e12afa763e965e9161e53f0ae06569b6927742a9e2a9c4d53f844d0f05b-ol10_x86_64_u1_baseos_patch
kernel-debug-modules-extra-6.12.0-124.35.1.el10_1.x86_64.rpm7228bea34a8f971d069f1759286e21be97cdf27ab10028f80dc25726816bdc00-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-124.35.1.el10_1.x86_64.rpm7228bea34a8f971d069f1759286e21be97cdf27ab10028f80dc25726816bdc00-ol10_x86_64_u1_baseos_patch
kernel-debug-uki-virt-6.12.0-124.35.1.el10_1.x86_64.rpm88da7c8bfa24af908a016176b54e5eb26dcc561b0395ca5b988c5f275385dc0c-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-124.35.1.el10_1.x86_64.rpm88da7c8bfa24af908a016176b54e5eb26dcc561b0395ca5b988c5f275385dc0c-ol10_x86_64_u1_baseos_patch
kernel-devel-6.12.0-124.35.1.el10_1.x86_64.rpmdcf3c3ae1d821ed5bf2aa274f3755bdae0d13ff11656fa03d1d1f560d85bf026-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-124.35.1.el10_1.x86_64.rpm4ea3241e75d456251283a3a0d650861c273c49aabed75a8b9e2018799144bd38-ol10_x86_64_appstream
kernel-doc-6.12.0-124.35.1.el10_1.noarch.rpmb4ff021b24466f5f32a4963e543361df067bc29bf85c18c74727baee406158b3-ol10_x86_64_appstream
kernel-headers-6.12.0-124.35.1.el10_1.x86_64.rpmde892db47ff06fd61d7e08878948079a389bdaad09cde8fc075e2eec34e084b0-ol10_x86_64_appstream
kernel-modules-6.12.0-124.35.1.el10_1.x86_64.rpmd1688447e0b78144a6e55d41845c14e7c6ac7d6fb0a034f610041c447706a942-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-124.35.1.el10_1.x86_64.rpmd1688447e0b78144a6e55d41845c14e7c6ac7d6fb0a034f610041c447706a942-ol10_x86_64_u1_baseos_patch
kernel-modules-core-6.12.0-124.35.1.el10_1.x86_64.rpmbde727aaa3b7c69a1e29c29807add149d7f4fa9d2475fe1740e8a561c07b87c9-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-124.35.1.el10_1.x86_64.rpmbde727aaa3b7c69a1e29c29807add149d7f4fa9d2475fe1740e8a561c07b87c9-ol10_x86_64_u1_baseos_patch
kernel-modules-extra-6.12.0-124.35.1.el10_1.x86_64.rpmc19bf36f467db008b5a563294bb13c55f7f838098caa68c21c69c2c9d4ff89ab-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-124.35.1.el10_1.x86_64.rpmc19bf36f467db008b5a563294bb13c55f7f838098caa68c21c69c2c9d4ff89ab-ol10_x86_64_u1_baseos_patch
kernel-modules-extra-matched-6.12.0-124.35.1.el10_1.x86_64.rpm9be6bdbe20238558f9c7bb8d3ad3ec753bbc363e61b34983bd1bd9689ae34e62-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-124.35.1.el10_1.x86_64.rpm9be6bdbe20238558f9c7bb8d3ad3ec753bbc363e61b34983bd1bd9689ae34e62-ol10_x86_64_u1_baseos_patch
kernel-tools-6.12.0-124.35.1.el10_1.x86_64.rpm020752022b17a6265ad14ef81e4356c5cdcab0cead14b3fdf03b85c01fe6f7e5-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-124.35.1.el10_1.x86_64.rpm020752022b17a6265ad14ef81e4356c5cdcab0cead14b3fdf03b85c01fe6f7e5-ol10_x86_64_u1_baseos_patch
kernel-tools-libs-6.12.0-124.35.1.el10_1.x86_64.rpm11dd9d1e630cb2abc3d77bc3b2d684f923720af9b85d70d7eab0df990bb42557-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-124.35.1.el10_1.x86_64.rpm11dd9d1e630cb2abc3d77bc3b2d684f923720af9b85d70d7eab0df990bb42557-ol10_x86_64_u1_baseos_patch
kernel-tools-libs-devel-6.12.0-124.35.1.el10_1.x86_64.rpmca05b88d7323b335d64046ddfe4633d7ef9c1309243946035c4f6a0b7b3b2b52-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-124.35.1.el10_1.x86_64.rpm8591fc207d98a1ba98cb2de142657375f7b1a1aa79ee86e6c1019b6d277acab4-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-124.35.1.el10_1.x86_64.rpm8591fc207d98a1ba98cb2de142657375f7b1a1aa79ee86e6c1019b6d277acab4-ol10_x86_64_u1_baseos_patch
kernel-uki-virt-addons-6.12.0-124.35.1.el10_1.x86_64.rpm9f1debc143227fed0792a1f3945812a8736456d4254227575d4ebc148af0264d-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-124.35.1.el10_1.x86_64.rpm9f1debc143227fed0792a1f3945812a8736456d4254227575d4ebc148af0264d-ol10_x86_64_u1_baseos_patch
libperf-6.12.0-124.35.1.el10_1.x86_64.rpm6909ddb8607896562efaf2943631dd40a7380752febc183d406a98b09bb77f72-ol10_x86_64_codeready_builder
perf-6.12.0-124.35.1.el10_1.x86_64.rpm3485523d1a1ac7808b2e97c58df2840dddbb7b94df01011f6f26a333be804e67-ol10_x86_64_appstream
python3-perf-6.12.0-124.35.1.el10_1.x86_64.rpmc86e22bc757e09ea80cbed45f6165e8fa02444f8ec2f0b3a90b1035b2717d96e-ol10_x86_64_appstream
rtla-6.12.0-124.35.1.el10_1.x86_64.rpme7cb44fa46a780b88c0d0a1fd1b43fb14951a460f9db4dd269c582985cb707c8-ol10_x86_64_appstream
rv-6.12.0-124.35.1.el10_1.x86_64.rpm72d73292cc0601148a109290eea2c8d9e03baebbe48b1bb233249bb857ae352b-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights