ELSA-2026-51295

ELSA-2026-51295 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-07

Description

[6.12.0-211.44.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.44.1]
- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert 'ice: dpll: fix rclk pin state get and misplaced header macros' (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}

Related CVEs

CVE-2026-43186

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_aarch64_appstream
	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_aarch64_u2_baseos_patch
	kernel-cross-headers-6.12.0-211.44.1.el10_2.aarch64.rpm	c2b303a9bf4af01ffa8a8ffa60a2db3d590268e64da14ffdf4ca6eccb52e2eab	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-211.44.1.el10_2.aarch64.rpm	fd5df3e9d272881e7bb4cfe1439fe1156cdfbf72a0b8ee83228235c9dbd3fbb3	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-211.44.1.el10_2.aarch64.rpm	5b4be92109f13ea546c06abe9ee0024e958ba4e71908e60325fe3d335df3e6a3	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-211.44.1.el10_2.aarch64.rpm	5b4be92109f13ea546c06abe9ee0024e958ba4e71908e60325fe3d335df3e6a3	-	ol10_aarch64_u2_baseos_patch
	kernel-tools-libs-6.12.0-211.44.1.el10_2.aarch64.rpm	a54d835dc5969740953f01014b91377297776abd05de9313c80864a0569d2fbf	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-211.44.1.el10_2.aarch64.rpm	a54d835dc5969740953f01014b91377297776abd05de9313c80864a0569d2fbf	-	ol10_aarch64_u2_baseos_patch
	kernel-tools-libs-devel-6.12.0-211.44.1.el10_2.aarch64.rpm	816d478bb881ae6d2a86486882ac89eeac155769c73f06fbd6f21022b2ea53fd	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-211.44.1.el10_2.aarch64.rpm	9cd028fba38fb710f9858196c75f9b573f9710b7fa1c4466a08a6f6d7d95ae39	-	ol10_aarch64_codeready_builder
	perf-6.12.0-211.44.1.el10_2.aarch64.rpm	642db6cbf22edff64305b15260c1515a405109e603c3d0f2a90f45bdca44616d	-	ol10_aarch64_appstream
	python3-perf-6.12.0-211.44.1.el10_2.aarch64.rpm	503229ef841daf913028f4170c2edfbab4611ca373f2523240747735d3ac9232	-	ol10_aarch64_appstream
	rtla-6.12.0-211.44.1.el10_2.aarch64.rpm	79965c51475dc53b2e938cb51fdcd8cc1f172c8a96ff5b8830f9b0af710d49b8	-	ol10_aarch64_appstream
	rv-6.12.0-211.44.1.el10_2.aarch64.rpm	196e31d0242a590dd8877420d1f90741203b981edd4a7f80949f8b5002ed1ca8	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_x86_64_appstream
	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-211.44.1.el10_2.src.rpm	71ff71966d5ea16d0a6f9de0b980169238966a6485ce8000f6d55ac2431d240a	-	ol10_x86_64_u2_baseos_patch
	kernel-6.12.0-211.44.1.el10_2.x86_64.rpm	dd2939211e893d57bdf4949e462b088af4a95c33967b82afc406e3b8b5c776f3	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-211.44.1.el10_2.x86_64.rpm	dd2939211e893d57bdf4949e462b088af4a95c33967b82afc406e3b8b5c776f3	-	ol10_x86_64_u2_baseos_patch
	kernel-abi-stablelists-6.12.0-211.44.1.el10_2.noarch.rpm	a21479deefad0e3610cac2c7d621c530398c838e8130fc166fcdba35be37402f	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-211.44.1.el10_2.noarch.rpm	a21479deefad0e3610cac2c7d621c530398c838e8130fc166fcdba35be37402f	-	ol10_x86_64_u2_baseos_patch
	kernel-core-6.12.0-211.44.1.el10_2.x86_64.rpm	5c6b8d28356025fb9a59d20361277feea802d8cbca958614e7422f48f14c15b3	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-211.44.1.el10_2.x86_64.rpm	5c6b8d28356025fb9a59d20361277feea802d8cbca958614e7422f48f14c15b3	-	ol10_x86_64_u2_baseos_patch
	kernel-cross-headers-6.12.0-211.44.1.el10_2.x86_64.rpm	67c12ab37f374589dc5831b5416ba20a67174e6235b7c38a1ce1d211e28fc547	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-211.44.1.el10_2.x86_64.rpm	aa982b8dfbd416a29b2c1f619145cd2d50381c5601be7136f35ce48eddcb6906	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-211.44.1.el10_2.x86_64.rpm	aa982b8dfbd416a29b2c1f619145cd2d50381c5601be7136f35ce48eddcb6906	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-core-6.12.0-211.44.1.el10_2.x86_64.rpm	4c15c3f5495631990a59d6115140a4ffc4aa2d70f6e1d42a0c4e91154b86486d	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-211.44.1.el10_2.x86_64.rpm	4c15c3f5495631990a59d6115140a4ffc4aa2d70f6e1d42a0c4e91154b86486d	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-devel-6.12.0-211.44.1.el10_2.x86_64.rpm	f4b09d8826dd03dbd66048a5c0822d4bd6627b091c966fd956f915bff8b366b2	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-211.44.1.el10_2.x86_64.rpm	333763f17dbdc03b39a0e32e47440e96b7cb8a406bd919ab0b003ec621946353	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-211.44.1.el10_2.x86_64.rpm	ae4f5897ae379ffd6b118764d01fcc2a398b5d7a9c9b37f9297ba1f58d17fcb4	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-211.44.1.el10_2.x86_64.rpm	ae4f5897ae379ffd6b118764d01fcc2a398b5d7a9c9b37f9297ba1f58d17fcb4	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm	f2e6a3717ed79025bd32f84523bdc77cfa95ebbb6084309d75367578fe5a6efe	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm	f2e6a3717ed79025bd32f84523bdc77cfa95ebbb6084309d75367578fe5a6efe	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm	8f863966c3eb8a28ea1a79b10ea9b0235a5e9515704e4ba9786629e15d6beefc	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm	8f863966c3eb8a28ea1a79b10ea9b0235a5e9515704e4ba9786629e15d6beefc	-	ol10_x86_64_u2_baseos_patch
	kernel-debug-uki-virt-6.12.0-211.44.1.el10_2.x86_64.rpm	fead5475a61634dbdc7193393016b9cdf8a1306e05ff5617eab8e77000e626fc	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-211.44.1.el10_2.x86_64.rpm	fead5475a61634dbdc7193393016b9cdf8a1306e05ff5617eab8e77000e626fc	-	ol10_x86_64_u2_baseos_patch
	kernel-devel-6.12.0-211.44.1.el10_2.x86_64.rpm	8049e92da71fcd130292d14d15a02d76046715a61a9972d398395a534d552cec	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-211.44.1.el10_2.x86_64.rpm	6f321c6f1005feba9fcb6c238d97726da75e9027758b73cdf6a264e6b2da5e5d	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-211.44.1.el10_2.noarch.rpm	fb3d05bef658dada0e1da5e67c1207911159812879d2843bf2a8bce254b17496	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-211.44.1.el10_2.x86_64.rpm	dc15e26675e749e9899bfe5b13fdb46d611a5b3858bc2bce605ea05472b03b9d	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-211.44.1.el10_2.x86_64.rpm	6e1f3d8629d7d028e7f1707b3fe189fb81eda094de24440382b280027eaaba33	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-211.44.1.el10_2.x86_64.rpm	6e1f3d8629d7d028e7f1707b3fe189fb81eda094de24440382b280027eaaba33	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm	df5f2210ed473daf6fb4d75eec7c77079c742f405bcaba988d254afadcb07844	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm	df5f2210ed473daf6fb4d75eec7c77079c742f405bcaba988d254afadcb07844	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm	e77c9e47ca24429a1d577e09ec323f808331afa6bf2c2f19d15bf08a1902ad1b	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm	e77c9e47ca24429a1d577e09ec323f808331afa6bf2c2f19d15bf08a1902ad1b	-	ol10_x86_64_u2_baseos_patch
	kernel-modules-extra-matched-6.12.0-211.44.1.el10_2.x86_64.rpm	cf3e565c784afcabeab28429a510e4eca0bd5965b6a06bb0ef91a1078a538fe3	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-211.44.1.el10_2.x86_64.rpm	cf3e565c784afcabeab28429a510e4eca0bd5965b6a06bb0ef91a1078a538fe3	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-6.12.0-211.44.1.el10_2.x86_64.rpm	fe5ad6a97365cf20c858e863ec594893c0c55f53b78c41140ce04734e49c2780	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-211.44.1.el10_2.x86_64.rpm	fe5ad6a97365cf20c858e863ec594893c0c55f53b78c41140ce04734e49c2780	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-libs-6.12.0-211.44.1.el10_2.x86_64.rpm	e18a0e7512b28827499eb77158848b5ad150aad6288e7a08c24cd9ec98650376	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-211.44.1.el10_2.x86_64.rpm	e18a0e7512b28827499eb77158848b5ad150aad6288e7a08c24cd9ec98650376	-	ol10_x86_64_u2_baseos_patch
	kernel-tools-libs-devel-6.12.0-211.44.1.el10_2.x86_64.rpm	10a9b180354bd159425ed46e981a370e40c656aefac0668f726340ce443538c4	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-211.44.1.el10_2.x86_64.rpm	4496ed4fdeffe39483666a5c5d0df9ed50eac5a3dc82ce5fc91bcba1c1486695	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-211.44.1.el10_2.x86_64.rpm	4496ed4fdeffe39483666a5c5d0df9ed50eac5a3dc82ce5fc91bcba1c1486695	-	ol10_x86_64_u2_baseos_patch
	kernel-uki-virt-addons-6.12.0-211.44.1.el10_2.x86_64.rpm	56d1e6e191fb95e3ab7bc17aad91478e8ff268639b77b181536ac3a7730ab324	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-211.44.1.el10_2.x86_64.rpm	56d1e6e191fb95e3ab7bc17aad91478e8ff268639b77b181536ac3a7730ab324	-	ol10_x86_64_u2_baseos_patch
	libperf-6.12.0-211.44.1.el10_2.x86_64.rpm	b22acefb72bceaf2c28bb799eacf4e68662bcfd505d40730e075536def2f605c	-	ol10_x86_64_codeready_builder
	perf-6.12.0-211.44.1.el10_2.x86_64.rpm	dac7fa20f03f0e2127f1b36bde99b74cd180a9b6418c826a582e4fe5c21afd3a	-	ol10_x86_64_appstream
	python3-perf-6.12.0-211.44.1.el10_2.x86_64.rpm	9799049e0eef532d9dc078b51dc1cb7f962f52046af58d6d18807842d4bea4eb	-	ol10_x86_64_appstream
	rtla-6.12.0-211.44.1.el10_2.x86_64.rpm	a09a8b98c4c8baeb16c16e880dfe6de3f3bc078aff572aa2f9b784b5e4c59abf	-	ol10_x86_64_appstream
	rv-6.12.0-211.44.1.el10_2.x86_64.rpm	8d4b1ad19c819fff744cb39e52e557a99f3ef2a196066b1ea79169405a75483a	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team