ELSA-2026-2721

ELSA-2026-2721 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-02-16

Description

[6.12.0-124.38.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.38.1]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}

[6.12.0-124.37.1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}

[6.12.0-124.36.1]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}

Related CVEs

CVE-2023-53034

CVE-2025-38172

CVE-2025-40064

CVE-2025-40141

CVE-2025-40269

CVE-2025-68349

CVE-2026-22998

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_aarch64_appstream
	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_aarch64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.38.1.el10_1.aarch64.rpm	86ff33901281e2955616c4df3163d96802c8c699135139a3336db18a2cd9f939	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-124.38.1.el10_1.aarch64.rpm	7456c208142687fa827114e2f70bccaa0dad1d2f01d681354b76804c55cce654	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-124.38.1.el10_1.aarch64.rpm	40e77a1b092bd039f3edf8e4243ad46281e1ea204aae35feed7ba579022e3b4e	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-124.38.1.el10_1.aarch64.rpm	40e77a1b092bd039f3edf8e4243ad46281e1ea204aae35feed7ba579022e3b4e	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.38.1.el10_1.aarch64.rpm	b0eff24b478df3cde70bab302a8b0e1052b83b17be0a6c1107ee303cecabe4a6	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-124.38.1.el10_1.aarch64.rpm	b0eff24b478df3cde70bab302a8b0e1052b83b17be0a6c1107ee303cecabe4a6	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.38.1.el10_1.aarch64.rpm	a4ae7c07f083e37875c0e21c74f5df37eea18a81ade9115bd10916a3e3e4478a	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-124.38.1.el10_1.aarch64.rpm	ad1c0e8961fd3ddf3962c1f51b9bf13886641938ee808107f22643f1e6946c7c	-	ol10_aarch64_codeready_builder
	perf-6.12.0-124.38.1.el10_1.aarch64.rpm	0bbfa9428c844f51fc631793e10ef302ee5cd35d709aab4aa6920c380c46718c	-	ol10_aarch64_appstream
	python3-perf-6.12.0-124.38.1.el10_1.aarch64.rpm	a0dfcfa983f8c26cff4b5b3ba5a0f0f75c07d000757b09d3cc20bfa6a793c033	-	ol10_aarch64_appstream
	rtla-6.12.0-124.38.1.el10_1.aarch64.rpm	525f17f131d4fb5c5f2ff6b4709d59e262cb3e8a3072a2ac7fab8fa6a93f5276	-	ol10_aarch64_appstream
	rv-6.12.0-124.38.1.el10_1.aarch64.rpm	8b04cf64e15014b271f958b11763839ba32e87d32876094a600b90a7f7faac03	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_x86_64_appstream
	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-124.38.1.el10_1.src.rpm	6de295940f8950deaf5440745a2235a457189b52420775f24eb653a5c18b8035	-	ol10_x86_64_u1_baseos_patch
	kernel-6.12.0-124.38.1.el10_1.x86_64.rpm	edb69a8630e8a659a121f9ec2e528e80cc513ad1dbb24026c395a78dacb090b9	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.38.1.el10_1.x86_64.rpm	edb69a8630e8a659a121f9ec2e528e80cc513ad1dbb24026c395a78dacb090b9	-	ol10_x86_64_u1_baseos_patch
	kernel-abi-stablelists-6.12.0-124.38.1.el10_1.noarch.rpm	d75d9ea6ccb155ae6bb7c19e214f3adfca53884879564d9760a51aff6b9a2a52	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-124.38.1.el10_1.noarch.rpm	d75d9ea6ccb155ae6bb7c19e214f3adfca53884879564d9760a51aff6b9a2a52	-	ol10_x86_64_u1_baseos_patch
	kernel-core-6.12.0-124.38.1.el10_1.x86_64.rpm	924b4195a195e281ba42f8d3673b8538e160f49fdee5ee5abd2f9f464bcb3aba	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-124.38.1.el10_1.x86_64.rpm	924b4195a195e281ba42f8d3673b8538e160f49fdee5ee5abd2f9f464bcb3aba	-	ol10_x86_64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.38.1.el10_1.x86_64.rpm	82f79bed8a904e1bb8c281ac24e204b1970fd285e71854abd25a1a2ea8454de2	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-124.38.1.el10_1.x86_64.rpm	265fd172d7b12452313a7b98d37118c9342708f8d93cb038fbe675356201d78e	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-124.38.1.el10_1.x86_64.rpm	265fd172d7b12452313a7b98d37118c9342708f8d93cb038fbe675356201d78e	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-core-6.12.0-124.38.1.el10_1.x86_64.rpm	66715de1a8009afe3cbf9d3baa884bb2e53409cb8f1f26241105983eafd4015e	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-124.38.1.el10_1.x86_64.rpm	66715de1a8009afe3cbf9d3baa884bb2e53409cb8f1f26241105983eafd4015e	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-devel-6.12.0-124.38.1.el10_1.x86_64.rpm	3033a657f255ea72427a5ae54087d8f280a35100e2b2402eb072dd7ccabf3baa	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-124.38.1.el10_1.x86_64.rpm	8a10c4e941437a9c7e620a6621b6dee0f4f2fe2e6cc2ab12c21de496594e8901	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-124.38.1.el10_1.x86_64.rpm	ae704cebdfe4532e0f3f3228a3f67e5808d1388f12f55944a34c475e8e8dc4c7	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-124.38.1.el10_1.x86_64.rpm	ae704cebdfe4532e0f3f3228a3f67e5808d1388f12f55944a34c475e8e8dc4c7	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-core-6.12.0-124.38.1.el10_1.x86_64.rpm	f9a76a896ce6c60fba6420518b81cc64058bcc3e79856b31c804d0be8f410e6c	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-124.38.1.el10_1.x86_64.rpm	f9a76a896ce6c60fba6420518b81cc64058bcc3e79856b31c804d0be8f410e6c	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-extra-6.12.0-124.38.1.el10_1.x86_64.rpm	c6c1eb8455fe1178a1afd6d9b0247d13676885219f9452f91990c50f941896a3	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-124.38.1.el10_1.x86_64.rpm	c6c1eb8455fe1178a1afd6d9b0247d13676885219f9452f91990c50f941896a3	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-uki-virt-6.12.0-124.38.1.el10_1.x86_64.rpm	10e8d674e930a3cd1eeb66f5804af29c6d7e720bb0442b938aa6eede78fcf33c	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-124.38.1.el10_1.x86_64.rpm	10e8d674e930a3cd1eeb66f5804af29c6d7e720bb0442b938aa6eede78fcf33c	-	ol10_x86_64_u1_baseos_patch
	kernel-devel-6.12.0-124.38.1.el10_1.x86_64.rpm	7a82174e313408e2e87431ba0bd6b1c97685b7aecb486cab1d4d09aad69a1aad	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-124.38.1.el10_1.x86_64.rpm	60c486e82309461e4bd8e6e7a299d03b0b2433655d197f1b16b289bd775d400d	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-124.38.1.el10_1.noarch.rpm	0b9d11853ebeddf73bb7a54b4a133ced4e35182d3f09a0f2cd54d656eecda60d	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-124.38.1.el10_1.x86_64.rpm	61d29fa158a1713d34e2ac442b946cc42889195ed95274f254c19f182426bb1e	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-124.38.1.el10_1.x86_64.rpm	7fb173da2b21807630ea78ddf724b8ebf7caf3105ae5867d7b843606c620f3d1	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-124.38.1.el10_1.x86_64.rpm	7fb173da2b21807630ea78ddf724b8ebf7caf3105ae5867d7b843606c620f3d1	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-core-6.12.0-124.38.1.el10_1.x86_64.rpm	e0214582d99a11cf1888c30d2ad6ab373026342c0885212e4ac01e9ca91872d0	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-124.38.1.el10_1.x86_64.rpm	e0214582d99a11cf1888c30d2ad6ab373026342c0885212e4ac01e9ca91872d0	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-6.12.0-124.38.1.el10_1.x86_64.rpm	7f06057d30ce8ceec92a6f44d3a0c77c8379aae589a2b3ee3d16daff741a8833	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-124.38.1.el10_1.x86_64.rpm	7f06057d30ce8ceec92a6f44d3a0c77c8379aae589a2b3ee3d16daff741a8833	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-matched-6.12.0-124.38.1.el10_1.x86_64.rpm	ce8c8f37458a1b702531a3f236813f3c3a8586a5a69c4400adc7cd3c9097c6d9	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-124.38.1.el10_1.x86_64.rpm	ce8c8f37458a1b702531a3f236813f3c3a8586a5a69c4400adc7cd3c9097c6d9	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-6.12.0-124.38.1.el10_1.x86_64.rpm	29e023ff2a4802e12e61fcf38ca6f83d3e4ef14509717f4d88bc807ceac2fe37	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-124.38.1.el10_1.x86_64.rpm	29e023ff2a4802e12e61fcf38ca6f83d3e4ef14509717f4d88bc807ceac2fe37	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.38.1.el10_1.x86_64.rpm	3ac4af6c488f5dd5cd195e2469016cb07d47925ddf50ce07faeac1e3a6473584	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-124.38.1.el10_1.x86_64.rpm	3ac4af6c488f5dd5cd195e2469016cb07d47925ddf50ce07faeac1e3a6473584	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.38.1.el10_1.x86_64.rpm	c86870ec12a59d7cb370c308042050cf087aae7dd0796fd3163ad4ec280aac21	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-124.38.1.el10_1.x86_64.rpm	bc276c6cc53fc6037be3b9a4ee795061a6b96fb6e508461926d73c9ac10bcb9e	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-124.38.1.el10_1.x86_64.rpm	bc276c6cc53fc6037be3b9a4ee795061a6b96fb6e508461926d73c9ac10bcb9e	-	ol10_x86_64_u1_baseos_patch
	kernel-uki-virt-addons-6.12.0-124.38.1.el10_1.x86_64.rpm	b270b459d7d85b1850d2ec81c0e41b2322e57a59fb9fa44c5b4ba8811dffdca3	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-124.38.1.el10_1.x86_64.rpm	b270b459d7d85b1850d2ec81c0e41b2322e57a59fb9fa44c5b4ba8811dffdca3	-	ol10_x86_64_u1_baseos_patch
	libperf-6.12.0-124.38.1.el10_1.x86_64.rpm	5b10df1207e6c8b727ad57042cd1b0a4c8410c0c3231b9780028e4841684e5b9	-	ol10_x86_64_codeready_builder
	perf-6.12.0-124.38.1.el10_1.x86_64.rpm	01de449ac8187bbe5bc40f6c217df371169e8d22e81a588e4723e467fbd69541	-	ol10_x86_64_appstream
	python3-perf-6.12.0-124.38.1.el10_1.x86_64.rpm	11b933426a94cea81cec29c9817466f62231b1c56b71253f3b1e7ecea7c7888d	-	ol10_x86_64_appstream
	rtla-6.12.0-124.38.1.el10_1.x86_64.rpm	6703c5d15e1044a30ffb031851dd3f43e93876358cc9a7085ae907be562a9578	-	ol10_x86_64_appstream
	rv-6.12.0-124.38.1.el10_1.x86_64.rpm	516e79815c5d22d1b9c202428caae2e430bb14b1d61655ff66995fc360a54598	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team