ELSA-2026-45114

ELSA-2026-45114 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-29

Description


[6.12.0-211.39.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.39.1]
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]


Related CVEs


CVE-2025-40237
CVE-2026-23110
CVE-2026-31692
CVE-2026-46099
CVE-2026-52973
CVE-2026-53059

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_aarch64_appstream
kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_aarch64_baseos_latest
kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_aarch64_codeready_builder
kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_aarch64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.39.1.el10_2.aarch64.rpm9eb13d3851a427714a20ec46a72027f51ac7c5d1ba4e819a30c24cd21aa5a1de-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-211.39.1.el10_2.aarch64.rpm52dcb8651d641cc620f0dd70695c8cde8924567db5035dec57d4efe719c33831-ol10_aarch64_appstream
kernel-tools-6.12.0-211.39.1.el10_2.aarch64.rpm6f6fd1a6ee67fb84ac3497afc62a5c0cd266dfe0e56bb3706b6edcbbde49687a-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-211.39.1.el10_2.aarch64.rpm6f6fd1a6ee67fb84ac3497afc62a5c0cd266dfe0e56bb3706b6edcbbde49687a-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.39.1.el10_2.aarch64.rpmdb03ffb881cf37d2110ee7cc7fa87eef2b797a8680f0dacb125600f7731a37b2-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-211.39.1.el10_2.aarch64.rpmdb03ffb881cf37d2110ee7cc7fa87eef2b797a8680f0dacb125600f7731a37b2-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.39.1.el10_2.aarch64.rpm4d7f946d499fb7827d272177e7837ef6dd25f8f4e7d05c103898602d7592775f-ol10_aarch64_codeready_builder
libperf-6.12.0-211.39.1.el10_2.aarch64.rpm74802b715c7ab010f8bd308f3f4c39095a116f557230ba3dad4effde6d86aea4-ol10_aarch64_codeready_builder
perf-6.12.0-211.39.1.el10_2.aarch64.rpm12bcc380ebeeae7c002a055bd258325b8e95409dc49903d6734ece0f8ad95b53-ol10_aarch64_appstream
python3-perf-6.12.0-211.39.1.el10_2.aarch64.rpmfbc5ef199e0c72779f66bb6fa1a2303b527f97cd8105bed291dd725ebe9c3f3a-ol10_aarch64_appstream
rtla-6.12.0-211.39.1.el10_2.aarch64.rpm647a7dfaa90c3cf3a36cb6ea48ca0a750092ce4b95f8140dd8574686e7221420-ol10_aarch64_appstream
rv-6.12.0-211.39.1.el10_2.aarch64.rpm05cd9f6465a8f90f847dee885730d6eda797a00acf45acd75b9a78af46c18820-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_x86_64_appstream
kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_x86_64_baseos_latest
kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_x86_64_codeready_builder
kernel-6.12.0-211.39.1.el10_2.src.rpmed4cf76c59c52f59be435c2824f9275599c2ddcc49c430fad18b5624023353bf-ol10_x86_64_u2_baseos_patch
kernel-6.12.0-211.39.1.el10_2.x86_64.rpmdbeaedaf883756be695b93dee254ddc9aa1aebdb54303a89f0f00c72338e8c62-ol10_x86_64_baseos_latest
kernel-6.12.0-211.39.1.el10_2.x86_64.rpmdbeaedaf883756be695b93dee254ddc9aa1aebdb54303a89f0f00c72338e8c62-ol10_x86_64_u2_baseos_patch
kernel-abi-stablelists-6.12.0-211.39.1.el10_2.noarch.rpma11214109017f9a98ac6c805eea62e5edb7234c5779b247c59eb554392fcdc8e-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-211.39.1.el10_2.noarch.rpma11214109017f9a98ac6c805eea62e5edb7234c5779b247c59eb554392fcdc8e-ol10_x86_64_u2_baseos_patch
kernel-core-6.12.0-211.39.1.el10_2.x86_64.rpma2a7a8fdda594ddab070c3cf7077a852fdca7edf4eeb78a90ab2b433ac48bc07-ol10_x86_64_baseos_latest
kernel-core-6.12.0-211.39.1.el10_2.x86_64.rpma2a7a8fdda594ddab070c3cf7077a852fdca7edf4eeb78a90ab2b433ac48bc07-ol10_x86_64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.39.1.el10_2.x86_64.rpm4fa259a2330e1a0262cc1b2994ee77785f747e47923e1e649ec6af6c3fa54702-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-211.39.1.el10_2.x86_64.rpm792c54cf535f22680bde33b8e1b5be173201311288e125ca0e890356693fd83c-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-211.39.1.el10_2.x86_64.rpm792c54cf535f22680bde33b8e1b5be173201311288e125ca0e890356693fd83c-ol10_x86_64_u2_baseos_patch
kernel-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpma7c597474a0c0de0c0ff61b67776d709247f083fe5341c4e901b23f7d9115832-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpma7c597474a0c0de0c0ff61b67776d709247f083fe5341c4e901b23f7d9115832-ol10_x86_64_u2_baseos_patch
kernel-debug-devel-6.12.0-211.39.1.el10_2.x86_64.rpmceb8335422e3fe85f14f020985a936be2ce64fac75b8576c85c72c4f04391df4-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-211.39.1.el10_2.x86_64.rpm5db8821cac9c8740747c4f12132f00e2c3b3ece04e01c2a3e1d24012e18d7bac-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-211.39.1.el10_2.x86_64.rpm5d5253a26596c9199553acda8e2484eff157d444b7a1ca029e6a78ec2c9c93ee-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-211.39.1.el10_2.x86_64.rpm5d5253a26596c9199553acda8e2484eff157d444b7a1ca029e6a78ec2c9c93ee-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpmb3d373aba21f8db18407caa27d97c7b4b95f8963bd49bedb8409879f0a133686-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpmb3d373aba21f8db18407caa27d97c7b4b95f8963bd49bedb8409879f0a133686-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm1a257a4551fab2a81dc5b9dd17b1b0b9e322a2bb1ef81cab267382cda6b95fd6-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm1a257a4551fab2a81dc5b9dd17b1b0b9e322a2bb1ef81cab267382cda6b95fd6-ol10_x86_64_u2_baseos_patch
kernel-debug-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm8656c6401c17ab058f3b4b809cefe002dee14cdbd7d9629701275e528f578fb3-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm8656c6401c17ab058f3b4b809cefe002dee14cdbd7d9629701275e528f578fb3-ol10_x86_64_u2_baseos_patch
kernel-devel-6.12.0-211.39.1.el10_2.x86_64.rpmbdad5ddda1426a580771e64b6d624303d1e1b67dc9061c51a5834017044fbd60-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-211.39.1.el10_2.x86_64.rpm348677395e85d5346775bc89cb73efba6266b8a3c5e525cac471183c00a8faef-ol10_x86_64_appstream
kernel-doc-6.12.0-211.39.1.el10_2.noarch.rpm2743ee660eb96068b882268ef8ad71b6dd479ee3519562b1e5b34436815c4548-ol10_x86_64_appstream
kernel-headers-6.12.0-211.39.1.el10_2.x86_64.rpmd590de236a6848961b079152e031b81efaf3e1ab030b24ba372d1f1d2aeb84d8-ol10_x86_64_appstream
kernel-modules-6.12.0-211.39.1.el10_2.x86_64.rpmd3eb4e843ff124fb9974f84a4536a61e08c06fa1f59a2198ce649e3751f267d6-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-211.39.1.el10_2.x86_64.rpmd3eb4e843ff124fb9974f84a4536a61e08c06fa1f59a2198ce649e3751f267d6-ol10_x86_64_u2_baseos_patch
kernel-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpma0322383ffaf07011f4db9dc217d773c980f9d859ee98056ff287965b40db5ba-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpma0322383ffaf07011f4db9dc217d773c980f9d859ee98056ff287965b40db5ba-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpmc7f2cbec7915d234058a80a6980ab14b7d26774d5ae26e13ed24d3031a85916b-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpmc7f2cbec7915d234058a80a6980ab14b7d26774d5ae26e13ed24d3031a85916b-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-matched-6.12.0-211.39.1.el10_2.x86_64.rpm7f70f7a2e1ed13b851e74d9b6ddbaba88092dc876cc155919f12de912566ca8c-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-211.39.1.el10_2.x86_64.rpm7f70f7a2e1ed13b851e74d9b6ddbaba88092dc876cc155919f12de912566ca8c-ol10_x86_64_u2_baseos_patch
kernel-tools-6.12.0-211.39.1.el10_2.x86_64.rpm1722baecd8640fbd8f2be3790b91ca000fccb1c3b56af175e691ad9b95bd5ea5-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-211.39.1.el10_2.x86_64.rpm1722baecd8640fbd8f2be3790b91ca000fccb1c3b56af175e691ad9b95bd5ea5-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.39.1.el10_2.x86_64.rpmdcb61020bdcf8c84c6101cdb98b217dfdfb844d7cd5d0062cd6b519b3b31b8c6-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-211.39.1.el10_2.x86_64.rpmdcb61020bdcf8c84c6101cdb98b217dfdfb844d7cd5d0062cd6b519b3b31b8c6-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.39.1.el10_2.x86_64.rpmbad4ab9059214321d113469da25e7f702b8b7d0ee2ea6fae29706e60ebb7e341-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm1d09183b27d4ed6ecf38471e0118369f9c42f7a3b7d0c77d72c4e447b4e71164-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm1d09183b27d4ed6ecf38471e0118369f9c42f7a3b7d0c77d72c4e447b4e71164-ol10_x86_64_u2_baseos_patch
kernel-uki-virt-addons-6.12.0-211.39.1.el10_2.x86_64.rpm087eb1eb556f5b12bcddd7bbe277e283be0702abd4e27bcd8a1ac3e8236044f9-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-211.39.1.el10_2.x86_64.rpm087eb1eb556f5b12bcddd7bbe277e283be0702abd4e27bcd8a1ac3e8236044f9-ol10_x86_64_u2_baseos_patch
libperf-6.12.0-211.39.1.el10_2.x86_64.rpm7c8e5572edbae1dad2ca9ca225765773a7c0d3662fa335fc72634f824b86b5e2-ol10_x86_64_codeready_builder
perf-6.12.0-211.39.1.el10_2.x86_64.rpm8b7c4c37810bffbad4d9e3fe16a06577c4c6e3be4807f90ad53ee121f53bf1b2-ol10_x86_64_appstream
python3-perf-6.12.0-211.39.1.el10_2.x86_64.rpmb112c3d406f0f389021482c0a8adf3117898f7b8c16af08cbd5d2c12dfcfbc4b-ol10_x86_64_appstream
rtla-6.12.0-211.39.1.el10_2.x86_64.rpm09e2406e9be46d1c7f449c7be334b7f93891903dfd70c61dd2cb6ffd0bfe3bd1-ol10_x86_64_appstream
rv-6.12.0-211.39.1.el10_2.x86_64.rpm3eba99b8ec20423cd30d2aec0bbe694a1d46e70baa2d679d49224309d8719355-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete