ELSA-2026-42919

ELSA-2026-42919 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-22

Description

[6.12.0-211.37.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.37.1]
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}

[6.12.0-211.36.1]
- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf('%*pbl') (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
(Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}

[6.12.0-211.35.1]
- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]

Related CVEs

CVE-2025-71113

CVE-2025-71147

CVE-2026-23168

CVE-2026-31530

CVE-2026-46116

CVE-2026-46150

CVE-2026-46215

CVE-2026-52950

CVE-2026-52976

CVE-2026-53009

CVE-2026-53071

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_aarch64_appstream
	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_aarch64_u2_baseos_patch
	kernel-cross-headers-6.12.0-211.37.1.el10_2.aarch64.rpm	fc2a6d44a613dd1646ddc65f02183ab8c40b06073bc4f20c76b4fb9fdd82291b	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-211.37.1.el10_2.aarch64.rpm	0c7b377bfeb1a0cd547def2171775771a98c8cf72ec2a8ea6bc1c7e8f4428724	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-211.37.1.el10_2.aarch64.rpm	f9f658b8dda0b035980496632b8a5fba04b014c477527b4448c0e06b647ebc2f	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-211.37.1.el10_2.aarch64.rpm	f9f658b8dda0b035980496632b8a5fba04b014c477527b4448c0e06b647ebc2f	-	ol10_aarch64_u2_baseos_patch
	kernel-tools-libs-6.12.0-211.37.1.el10_2.aarch64.rpm	991fcda98064b9eb63e4647e2928116970645ac53f7fbd307ae5e9bf7a05570e	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-211.37.1.el10_2.aarch64.rpm	991fcda98064b9eb63e4647e2928116970645ac53f7fbd307ae5e9bf7a05570e	-	ol10_aarch64_u2_baseos_patch
	kernel-tools-libs-devel-6.12.0-211.37.1.el10_2.aarch64.rpm	40981eda51b95f0954f278d92ba661ade5059dda631524552fb1915ae09c5775	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-211.37.1.el10_2.aarch64.rpm	910cf0de52d4dadf41b7b1aaef11496314974ee7ee9bc26bf951ebad026f7154	-	ol10_aarch64_codeready_builder
	perf-6.12.0-211.37.1.el10_2.aarch64.rpm	40b8ec3dffcbabc6f52bacc54d7461f2c8bcb950caec96f738577fd1e1b93976	-	ol10_aarch64_appstream
	python3-perf-6.12.0-211.37.1.el10_2.aarch64.rpm	49a6b6936302917a7408d1302b4e5ef0567e9c5f3c56af56f2e7d0f53e1bb01b	-	ol10_aarch64_appstream
	rtla-6.12.0-211.37.1.el10_2.aarch64.rpm	50aa0c50b84f8cade7270a2a908c8f43b46e89f2fcb3e154ff491115e71e9733	-	ol10_aarch64_appstream
	rv-6.12.0-211.37.1.el10_2.aarch64.rpm	b20d0aa7bc4c644f13f9dfb9f4a2bbd930cc117e21b7ec446ff970facbe3943f	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_x86_64_appstream
	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-211.37.1.el10_2.src.rpm	f44a88ac20fe641c5d025c80d7b86aeae54eb0b4fd572f289812beb51ff69f9e	-	ol10_x86_64_u2_baseos_patch
	kernel-6.12.0-211.37.1.el10_2.x86_64.rpm	2832e28ceb01df0057ec8dcf2a0819227cdc7240c1aedf327e112b8b43b67934	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-211.37.1.el10_2.x86_64.rpm	2832e28ceb01df0057ec8dcf2a0819227cdc7240c1aedf327e112b8b43b67934	-	ol10_x86_64_u2_baseos_patch
	kernel-abi-stablelists-6.12.0-211.37.1.el10_2.noarch.rpm	f260bf553ca01eb78b101b71378dbc9f5379f433a1aa0cc9e23427f6d1088baa	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-211.37.1.el10_2.noarch.rpm	f260bf553ca01eb78b101b71378dbc9f5379f433a1aa0cc9e23427f6d1088baa	-	ol10_x86_64_u2_baseos_patch
	kernel-core-6.12.0-211.37.1.el10_2.x86_64.rpm	c77810e696c59b22216c27bb333237317fa36ced6be4f572ea5af044fcbe3452	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-211.37.1.el10_2.x86_64.rpm	c77810e696c59b22216c27bb333237317fa36ced6be4f572ea5af044fcbe3452	-	ol10_x86_64_u2_baseos_patch
	kernel-cross-headers-6.12.0-211.37.1.el10_2.x86_64.rpm	3e7b1669192c8c508af828331f382352ef167dc68814fab9ba9045162484a7d7	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-211.37.1.el10_2.x86_64.rpm	81f3d84209a9c022f5235d34ea604cd3cb1464cd053703c270a122114d7f1e26	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-211.37.1.el10_2.x86_64.rpm	81f3d84209a9c022f5235d34ea604cd3cb1464cd053703c270a122114d7f1e26	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-core-6.12.0-211.37.1.el10_2.x86_64.rpm	80ceecc108a397e5e02bf2c57dd33383a268f35d8d6fdef3e333b6e1d73e97d8	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-211.37.1.el10_2.x86_64.rpm	80ceecc108a397e5e02bf2c57dd33383a268f35d8d6fdef3e333b6e1d73e97d8	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-devel-6.12.0-211.37.1.el10_2.x86_64.rpm	92e4099b1aa01f15adb9a264105c7b9a88952aadc1703e6f7bd1a34acb5678d6	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-211.37.1.el10_2.x86_64.rpm	5f7ad73ada56809eafc9fb3cb708a8ac7cee9ab213132d39dd53d1a31817e540	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-211.37.1.el10_2.x86_64.rpm	0f94c18531f3ee37a6ef2caf368fa1566b934d7e7711c2a70fd1a4b728f2ec10	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-211.37.1.el10_2.x86_64.rpm	0f94c18531f3ee37a6ef2caf368fa1566b934d7e7711c2a70fd1a4b728f2ec10	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm	f32793542a7874f40d471299e845c28dc8417c7e87af4bc4289feafce66bfecd	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm	f32793542a7874f40d471299e845c28dc8417c7e87af4bc4289feafce66bfecd	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm	502f2d3b80de227afe286d44b1ae4e1d8d03f791f3f010e69a36c24b4c5ba8fb	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm	502f2d3b80de227afe286d44b1ae4e1d8d03f791f3f010e69a36c24b4c5ba8fb	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-uki-virt-6.12.0-211.37.1.el10_2.x86_64.rpm	d9b94576c2c9b9416816a2472cd1fb522c9547ee9c3fa5a244d629bded042800	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-211.37.1.el10_2.x86_64.rpm	d9b94576c2c9b9416816a2472cd1fb522c9547ee9c3fa5a244d629bded042800	-	ol10_x86_64_u2_baseos_patch
	kernel-devel-6.12.0-211.37.1.el10_2.x86_64.rpm	4d359549693731382c48dc5b70e4d988ec1fd99abea81cc6bf278f9a015b9fd5	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-211.37.1.el10_2.x86_64.rpm	0deb4d26ca1ee9c1ddbd59f853a2c955aa392297df1e8d932e589ae1eec33dcf	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-211.37.1.el10_2.noarch.rpm	f52b4994a9895cc595b5f821c0eb4a3909c102fa8f251410674d33a67d26dffa	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-211.37.1.el10_2.x86_64.rpm	c8ab3e65545fcf7510b0b822df336839306e087f60119e8a0f7bc31738700648	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-211.37.1.el10_2.x86_64.rpm	32f1184017e7855c569eb205ddfa0937c2dec26772b62001fc9c31070da1aac4	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-211.37.1.el10_2.x86_64.rpm	32f1184017e7855c569eb205ddfa0937c2dec26772b62001fc9c31070da1aac4	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm	4cb45bfd9d0256c6e1cc7b543554b61a56e6ed838559c032c35b5c16e18e7fe0	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm	4cb45bfd9d0256c6e1cc7b543554b61a56e6ed838559c032c35b5c16e18e7fe0	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm	18ecb3206bd9b5ae6825ccdbdd18facf0c4ef25b9d99db68a247b5691782a55e	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm	18ecb3206bd9b5ae6825ccdbdd18facf0c4ef25b9d99db68a247b5691782a55e	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-extra-matched-6.12.0-211.37.1.el10_2.x86_64.rpm	f1c2eafdbb26fcc5ed6b7ffba384f8934ecb80d3c6164e05c12f4392a8d480f4	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-211.37.1.el10_2.x86_64.rpm	f1c2eafdbb26fcc5ed6b7ffba384f8934ecb80d3c6164e05c12f4392a8d480f4	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-6.12.0-211.37.1.el10_2.x86_64.rpm	1e28b0b55a91ea51a42e434166a7002f4f9fba390d292bc0f0fffaaf149c454c	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-211.37.1.el10_2.x86_64.rpm	1e28b0b55a91ea51a42e434166a7002f4f9fba390d292bc0f0fffaaf149c454c	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-libs-6.12.0-211.37.1.el10_2.x86_64.rpm	ff5b11509977f88814bb0ba552d84d14fc88533ec4db1d5a81f1264389d36573	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-211.37.1.el10_2.x86_64.rpm	ff5b11509977f88814bb0ba552d84d14fc88533ec4db1d5a81f1264389d36573	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-libs-devel-6.12.0-211.37.1.el10_2.x86_64.rpm	cefb21362e9527c7e8375275349b7ec66a79d5720061de2c1acad862843942ee	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-211.37.1.el10_2.x86_64.rpm	5a3d146e1db02ed9561e15d69fcfd75099b4bab49fec6cfd8c4c244d61ba3dda	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-211.37.1.el10_2.x86_64.rpm	5a3d146e1db02ed9561e15d69fcfd75099b4bab49fec6cfd8c4c244d61ba3dda	-	ol10_x86_64_u2_baseos_patch
	kernel-uki-virt-addons-6.12.0-211.37.1.el10_2.x86_64.rpm	475c7e1f950d86945daae13227ddb3737fc75f79f1a2736f063b2762a46dd1ab	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-211.37.1.el10_2.x86_64.rpm	475c7e1f950d86945daae13227ddb3737fc75f79f1a2736f063b2762a46dd1ab	-	ol10_x86_64_u2_baseos_patch
	libperf-6.12.0-211.37.1.el10_2.x86_64.rpm	8d28e6946262eab7815d290ec443f9b1136483d08ad3208a9890933377ed35ee	-	ol10_x86_64_codeready_builder
	perf-6.12.0-211.37.1.el10_2.x86_64.rpm	02b010ad4774b3c243164a5d0d73698ace5a113220dfc536df6b7ec53cf4637d	-	ol10_x86_64_appstream
	python3-perf-6.12.0-211.37.1.el10_2.x86_64.rpm	9fda0ad06f8d15665eb20fb82dc16d56f9f17cfb05eb4536833e37ebd88705ed	-	ol10_x86_64_appstream
	rtla-6.12.0-211.37.1.el10_2.x86_64.rpm	47804a4a889f4113a01b908a422f6c8140053867a03e709e564b55fad823f12e	-	ol10_x86_64_appstream
	rv-6.12.0-211.37.1.el10_2.x86_64.rpm	b9f21d56e90cd2e105a821a810c99cb1324cf9f5989d51ff17fc60a4a61b4dcd	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team