ELSA-2026-4012

ELSA-2026-4012 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-03-10

Description

[6.12.0-124.43.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.43.1]
- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttila) [RHEL-122272] {CVE-2025-38703}

[6.12.0-124.42.1]
- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]

[6.12.0-124.41.1]
- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}

Related CVEs

CVE-2025-38106

CVE-2025-38141

CVE-2025-38703

CVE-2025-39760

CVE-2025-39818

CVE-2025-40249

CVE-2025-71085

CVE-2026-23001

CVE-2026-23097

CVE-2026-23156

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_aarch64_appstream
	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_aarch64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.43.1.el10_1.aarch64.rpm	f36ed1c447efaf53e9972473f13188b75777b470a4026cdc6860808e7638f2ae	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-124.43.1.el10_1.aarch64.rpm	38a5602d14f900d811acc830b25ce985ee71e166547a38b8693cac41ae72cbf7	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-124.43.1.el10_1.aarch64.rpm	6891f26943d76f20bfb244e69994d2f83bc2028a65326f03f6843f6b6c11ba82	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-124.43.1.el10_1.aarch64.rpm	6891f26943d76f20bfb244e69994d2f83bc2028a65326f03f6843f6b6c11ba82	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.43.1.el10_1.aarch64.rpm	2e58d235a6e832f804000aa85d793b14c65ed3f76ab3733de6e95c3ed0af6a3d	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-124.43.1.el10_1.aarch64.rpm	2e58d235a6e832f804000aa85d793b14c65ed3f76ab3733de6e95c3ed0af6a3d	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.43.1.el10_1.aarch64.rpm	e9301a777ad2568b667e8fc4e3327f8d4dc7ccf8451ea2fe60c82bedce65a3c8	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-124.43.1.el10_1.aarch64.rpm	6676afde62c26ce554674207e26fb4c20fc2bfef1b30d1f98c9a3d6e1893028f	-	ol10_aarch64_codeready_builder
	perf-6.12.0-124.43.1.el10_1.aarch64.rpm	f32eaa9cf71b0aceec59ff09b257394477d6ba07d38344354016bc77d9f9ea42	-	ol10_aarch64_appstream
	python3-perf-6.12.0-124.43.1.el10_1.aarch64.rpm	e8f3c47144f1cbd24f3045ad36021efae268112ae835323a3df9475419852c9f	-	ol10_aarch64_appstream
	rtla-6.12.0-124.43.1.el10_1.aarch64.rpm	fa46d5777db724a24d531a5ddb75bf329102fca45bf52958f7910785f2eb2b81	-	ol10_aarch64_appstream
	rv-6.12.0-124.43.1.el10_1.aarch64.rpm	3ffe59bd04abccca9f40466c698cd61eef8dbc098722cb7ce0dcc7e0bf8d3bfa	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_x86_64_appstream
	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-124.43.1.el10_1.src.rpm	4a0b9b263319faf3d6c56d3c01492d6ca080d00a432a2d3aa9f0194883db0c43	-	ol10_x86_64_u1_baseos_patch
	kernel-6.12.0-124.43.1.el10_1.x86_64.rpm	a5d19626ac45bd2882f5882328eda1f18a6cb05d7a5b3ec360997db13b0c9a26	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.43.1.el10_1.x86_64.rpm	a5d19626ac45bd2882f5882328eda1f18a6cb05d7a5b3ec360997db13b0c9a26	-	ol10_x86_64_u1_baseos_patch
	kernel-abi-stablelists-6.12.0-124.43.1.el10_1.noarch.rpm	74b5e703f434c38314f88b53f0465efa2c16c53e0fcd6bf8b70d01fa25e60630	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-124.43.1.el10_1.noarch.rpm	74b5e703f434c38314f88b53f0465efa2c16c53e0fcd6bf8b70d01fa25e60630	-	ol10_x86_64_u1_baseos_patch
	kernel-core-6.12.0-124.43.1.el10_1.x86_64.rpm	9cfd72b8d659da132fc39bfdccc24430d08c3c740fb7540eec4048a5a62b3df0	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-124.43.1.el10_1.x86_64.rpm	9cfd72b8d659da132fc39bfdccc24430d08c3c740fb7540eec4048a5a62b3df0	-	ol10_x86_64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.43.1.el10_1.x86_64.rpm	4a029d20d42117b41da4681dfac577cd459edab5ee00e99b7fa897c25a501584	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-124.43.1.el10_1.x86_64.rpm	9f6a1833b4fc77ab9ee1325a802cfe46612b379c8102527cc2e78b135176fc80	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-124.43.1.el10_1.x86_64.rpm	9f6a1833b4fc77ab9ee1325a802cfe46612b379c8102527cc2e78b135176fc80	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-core-6.12.0-124.43.1.el10_1.x86_64.rpm	ba8af21e9a16848a2a280465dc7fce63e3e4df4734a189259fafd7f663c0175c	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-124.43.1.el10_1.x86_64.rpm	ba8af21e9a16848a2a280465dc7fce63e3e4df4734a189259fafd7f663c0175c	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-devel-6.12.0-124.43.1.el10_1.x86_64.rpm	0ef68b4e64e93028ccafeea805c1b861d061b5d6788c1d5112eb312506117539	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-124.43.1.el10_1.x86_64.rpm	6c5e31253d2ea5a3a466b3afadf8ef11172d13c3751c7f0aa4145a8415cb3e25	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-124.43.1.el10_1.x86_64.rpm	3acda1e27f6488cece97f34f9873bd342a438edd34d9b0fd86720f989dd750b2	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-124.43.1.el10_1.x86_64.rpm	3acda1e27f6488cece97f34f9873bd342a438edd34d9b0fd86720f989dd750b2	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-core-6.12.0-124.43.1.el10_1.x86_64.rpm	271cde8b56d29436c91a892ac14b65461680efccd86ed76a20e0e87aedebf531	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-124.43.1.el10_1.x86_64.rpm	271cde8b56d29436c91a892ac14b65461680efccd86ed76a20e0e87aedebf531	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-extra-6.12.0-124.43.1.el10_1.x86_64.rpm	f2fe5a93ead631d3dd843969f932b8accace514afc010089e3318184530eae49	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-124.43.1.el10_1.x86_64.rpm	f2fe5a93ead631d3dd843969f932b8accace514afc010089e3318184530eae49	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-uki-virt-6.12.0-124.43.1.el10_1.x86_64.rpm	b1ebed28bd4fa3846bdb986bc703c5df04630815ce2f13ef36d9ba648f5235cb	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-124.43.1.el10_1.x86_64.rpm	b1ebed28bd4fa3846bdb986bc703c5df04630815ce2f13ef36d9ba648f5235cb	-	ol10_x86_64_u1_baseos_patch
	kernel-devel-6.12.0-124.43.1.el10_1.x86_64.rpm	0527a077504351e883bb5ac271dff78838fdfc7fd0dc6a49d849ca0b27a34237	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-124.43.1.el10_1.x86_64.rpm	beee8c79ba5f6f66fb0fd8e1c2d75cfa5e9f993737f2f801261d7e4caa9224c8	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-124.43.1.el10_1.noarch.rpm	46e2758f2e76fc71c96ffe12370127d6f40d61126a8e0c8563171eb2e191805f	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-124.43.1.el10_1.x86_64.rpm	7e49c67168908cef83e73c7d065d65baba12203a478244d64df197ae45f6b184	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-124.43.1.el10_1.x86_64.rpm	6fe87762a41c8de829104a61ee92d72a087954ec9d1a0d00883788997221b99e	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-124.43.1.el10_1.x86_64.rpm	6fe87762a41c8de829104a61ee92d72a087954ec9d1a0d00883788997221b99e	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-core-6.12.0-124.43.1.el10_1.x86_64.rpm	3445816c6efe4b449a1913bad194eca24436166b5a512b16469428da09022e30	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-124.43.1.el10_1.x86_64.rpm	3445816c6efe4b449a1913bad194eca24436166b5a512b16469428da09022e30	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-6.12.0-124.43.1.el10_1.x86_64.rpm	e7d29a11d40b0620f0df80c7bcdbeb3cf72b236bf075b87cd548040d4c8b7f85	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-124.43.1.el10_1.x86_64.rpm	e7d29a11d40b0620f0df80c7bcdbeb3cf72b236bf075b87cd548040d4c8b7f85	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-matched-6.12.0-124.43.1.el10_1.x86_64.rpm	2f964333f982affae8ef193bfdd90c8b4f45225ac7d70e6d9840d9bc68fbc73c	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-124.43.1.el10_1.x86_64.rpm	2f964333f982affae8ef193bfdd90c8b4f45225ac7d70e6d9840d9bc68fbc73c	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-6.12.0-124.43.1.el10_1.x86_64.rpm	ed30124084d7c166807dfa7f89125fc2b41c791cdbd027ad238a90ab2663dcf9	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-124.43.1.el10_1.x86_64.rpm	ed30124084d7c166807dfa7f89125fc2b41c791cdbd027ad238a90ab2663dcf9	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.43.1.el10_1.x86_64.rpm	275d2cef6484a68986b5c38b0e80b31bfb4f26256475959ed4c3bcedad58b379	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-124.43.1.el10_1.x86_64.rpm	275d2cef6484a68986b5c38b0e80b31bfb4f26256475959ed4c3bcedad58b379	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.43.1.el10_1.x86_64.rpm	0c37b212ea870e4947b2b608dacecb10e8c431ad1ac81a128a163a50ebea0c13	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-124.43.1.el10_1.x86_64.rpm	dd984e43fb51780b74181c7b3ebfa311d390300430868ceb8131df73b7f21341	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-124.43.1.el10_1.x86_64.rpm	dd984e43fb51780b74181c7b3ebfa311d390300430868ceb8131df73b7f21341	-	ol10_x86_64_u1_baseos_patch
	kernel-uki-virt-addons-6.12.0-124.43.1.el10_1.x86_64.rpm	1f7d02d2942f4169bbe8e8ccd1d6a489103fe76efe910079995f843ae8797567	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-124.43.1.el10_1.x86_64.rpm	1f7d02d2942f4169bbe8e8ccd1d6a489103fe76efe910079995f843ae8797567	-	ol10_x86_64_u1_baseos_patch
	libperf-6.12.0-124.43.1.el10_1.x86_64.rpm	81504951ae858eb0967f995f32952b9a58b4cf3612a54501f4472d8c2654d013	-	ol10_x86_64_codeready_builder
	perf-6.12.0-124.43.1.el10_1.x86_64.rpm	7fa0d544efd7a961279ec5ee15e62c05ba6fc3d5bbe6aba5ae78181072350197	-	ol10_x86_64_appstream
	python3-perf-6.12.0-124.43.1.el10_1.x86_64.rpm	77d182cbf72cb4fda037bd368687b35c4c6776b5820f44002c39cb615cf1986c	-	ol10_x86_64_appstream
	rtla-6.12.0-124.43.1.el10_1.x86_64.rpm	480fc360cd024a78f08a26a0acc65ed302780f43018f29b41d5868199e4d2a15	-	ol10_x86_64_appstream
	rv-6.12.0-124.43.1.el10_1.x86_64.rpm	d87e7d1f82d1b3196bc69d12b7c3f2e6e2eabeae8f57b516adb8f3eab6a07c54	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team