ELSA-2026-53330

ELSA-2026-53330 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-11

Description


[6.12.0-211.46.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.46.1]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}

[6.12.0-211.45.1]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}


Related CVEs


CVE-2024-53143
CVE-2025-71072
CVE-2026-23415
CVE-2026-31488
CVE-2026-52923
CVE-2026-64368
CVE-2026-64531

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_aarch64_appstream
kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_aarch64_baseos_latest
kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_aarch64_codeready_builder
kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_aarch64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.46.1.el10_2.aarch64.rpmc9f5727b52a5a12b769b218cabcaa4d0e6811546eae01407ce15e88684fca35d-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-211.46.1.el10_2.aarch64.rpmcae2c54ca82f0c356c0f3662ac8cd6a3305439d59cedee784d37cf5c3df64206-ol10_aarch64_appstream
kernel-tools-6.12.0-211.46.1.el10_2.aarch64.rpm0e306ed43f693991af1407d12eadcaa233d2b818d7c28eb61e618266e8b21754-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-211.46.1.el10_2.aarch64.rpm0e306ed43f693991af1407d12eadcaa233d2b818d7c28eb61e618266e8b21754-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.46.1.el10_2.aarch64.rpm1fd37588c0511d828f7b7d5a675487e8f0200dfb28e6e201784e9b54e97f42f4-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-211.46.1.el10_2.aarch64.rpm1fd37588c0511d828f7b7d5a675487e8f0200dfb28e6e201784e9b54e97f42f4-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.aarch64.rpm60749e8fa1b9ef894023b44a95b927db8ddc220d943bbdcb15e5bb8d670119ba-ol10_aarch64_codeready_builder
libperf-6.12.0-211.46.1.el10_2.aarch64.rpm2ab3e8307656407c42c6a1d29a44ded896717031c0ae6d7b3a63baba45ab978f-ol10_aarch64_codeready_builder
perf-6.12.0-211.46.1.el10_2.aarch64.rpm925f489af662f11beb40c8746282797dda5e684e55d5f7513413a9b381046e2e-ol10_aarch64_appstream
python3-perf-6.12.0-211.46.1.el10_2.aarch64.rpm47e3ddc816c0e8159b5e021ad1e504197ed10f21b3ff022630244e40c63add55-ol10_aarch64_appstream
rtla-6.12.0-211.46.1.el10_2.aarch64.rpme16e63a99a26f15196bcc2d43f12d94203e6d2dd42fea7bd7a61eeac1011d63b-ol10_aarch64_appstream
rv-6.12.0-211.46.1.el10_2.aarch64.rpme65b58d339cd37522f4e440a7b64f9894bacbcf1340500a5cb6c46358ad379df-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_x86_64_appstream
kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_x86_64_baseos_latest
kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_x86_64_codeready_builder
kernel-6.12.0-211.46.1.el10_2.src.rpm340fc18cc44eb6dbd403b626df346873ce4e21a8f30f291795547766dd9cc138-ol10_x86_64_u2_baseos_patch
kernel-6.12.0-211.46.1.el10_2.x86_64.rpmd84c6e1ff5233c24a874c9a95d5982cd167e3dcb604cc941c258da7d7bfbb0d0-ol10_x86_64_baseos_latest
kernel-6.12.0-211.46.1.el10_2.x86_64.rpmd84c6e1ff5233c24a874c9a95d5982cd167e3dcb604cc941c258da7d7bfbb0d0-ol10_x86_64_u2_baseos_patch
kernel-abi-stablelists-6.12.0-211.46.1.el10_2.noarch.rpmbf386673f0159c4d058d9000c8825b8cd77e883e768207de55729f7d2b999117-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-211.46.1.el10_2.noarch.rpmbf386673f0159c4d058d9000c8825b8cd77e883e768207de55729f7d2b999117-ol10_x86_64_u2_baseos_patch
kernel-core-6.12.0-211.46.1.el10_2.x86_64.rpm5d9e23eff5d0e7a6891070c8daafa3620cc4b77acbd0706564a69adffbba0225-ol10_x86_64_baseos_latest
kernel-core-6.12.0-211.46.1.el10_2.x86_64.rpm5d9e23eff5d0e7a6891070c8daafa3620cc4b77acbd0706564a69adffbba0225-ol10_x86_64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.46.1.el10_2.x86_64.rpm5023ce72cdda6d5f74d23e0f05dc8655fb9b4429d0112742fc109e13884dc63d-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-211.46.1.el10_2.x86_64.rpm009f5ba2e7d6287ae4b45d401eb1bbb5daedcca462ac3b1956cd0fb774db502d-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-211.46.1.el10_2.x86_64.rpm009f5ba2e7d6287ae4b45d401eb1bbb5daedcca462ac3b1956cd0fb774db502d-ol10_x86_64_u2_baseos_patch
kernel-debug-core-6.12.0-211.46.1.el10_2.x86_64.rpm1e69b35aa903e5a384ddc43198de06bfca26e9390902619af88c502edd62aafa-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-211.46.1.el10_2.x86_64.rpm1e69b35aa903e5a384ddc43198de06bfca26e9390902619af88c502edd62aafa-ol10_x86_64_u2_baseos_patch
kernel-debug-devel-6.12.0-211.46.1.el10_2.x86_64.rpm9b3d3778823618df776656cba0c1b76e521b825ca947fa37daea45dd7ab868a0-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-211.46.1.el10_2.x86_64.rpmdfa8953e99f176b854e73d1bddc73bea08625d631feeddde2cff6775167ea6ca-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-211.46.1.el10_2.x86_64.rpm97e20911b0ae5c4c41080ed719ade6375fe6de9f2c612bf646534db8c964c5d1-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-211.46.1.el10_2.x86_64.rpm97e20911b0ae5c4c41080ed719ade6375fe6de9f2c612bf646534db8c964c5d1-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm5a8eb654b5fdfaf3d0343878a1c1e830ee7d7bedc439f3c2d075d9c274ab00b9-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm5a8eb654b5fdfaf3d0343878a1c1e830ee7d7bedc439f3c2d075d9c274ab00b9-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm79570d5b0d7a7e430fdf2b12420c003e8b636388924ca0980de57a4faa6c67ee-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm79570d5b0d7a7e430fdf2b12420c003e8b636388924ca0980de57a4faa6c67ee-ol10_x86_64_u2_baseos_patch
kernel-debug-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm543406d23ef4ac559f5f7fdc4f716488a5f126d071250a587e35b3b1ebc3216f-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm543406d23ef4ac559f5f7fdc4f716488a5f126d071250a587e35b3b1ebc3216f-ol10_x86_64_u2_baseos_patch
kernel-devel-6.12.0-211.46.1.el10_2.x86_64.rpm6b1e0539e622d3c255f98238f1defcf6a9b40870f81690390dd2affc0dbc5864-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-211.46.1.el10_2.x86_64.rpm6e5b7516ebc6963e0fc29f8ae2ad880cc6779cce5c04eb854ba403736be341c7-ol10_x86_64_appstream
kernel-doc-6.12.0-211.46.1.el10_2.noarch.rpmc54088748b7d6f6a4f74c195252d3d13ed552124056b3d546b8fd8d69c7d49b9-ol10_x86_64_appstream
kernel-headers-6.12.0-211.46.1.el10_2.x86_64.rpm3f71afe95cf82f69253efa990d13451c437e7d817e7e9cbcc2f70def1cf649e5-ol10_x86_64_appstream
kernel-modules-6.12.0-211.46.1.el10_2.x86_64.rpm96cadf5e354c17b41baf1b8fbd7041b2241f0c26d46ff6230245ea8ffc3fe17d-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-211.46.1.el10_2.x86_64.rpm96cadf5e354c17b41baf1b8fbd7041b2241f0c26d46ff6230245ea8ffc3fe17d-ol10_x86_64_u2_baseos_patch
kernel-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpmc23dfb5da848fb4d27b7a74f3f4a641aeb5d66eacaed89a80eec54878286f5d1-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpmc23dfb5da848fb4d27b7a74f3f4a641aeb5d66eacaed89a80eec54878286f5d1-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpmeb1682d34ad30216390aa59ab99b0288587a31be8ac2ad7c937ff5c99800d189-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpmeb1682d34ad30216390aa59ab99b0288587a31be8ac2ad7c937ff5c99800d189-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-matched-6.12.0-211.46.1.el10_2.x86_64.rpmc0b11b89ef30fc3ed147e599e508a07ea57b24e529830b8aef3fb18a86461520-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-211.46.1.el10_2.x86_64.rpmc0b11b89ef30fc3ed147e599e508a07ea57b24e529830b8aef3fb18a86461520-ol10_x86_64_u2_baseos_patch
kernel-tools-6.12.0-211.46.1.el10_2.x86_64.rpm2f6cbcd67d29b4c9e3bb75dd647b1a17a55de1a62fc1e97506cc94f8a05b137e-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-211.46.1.el10_2.x86_64.rpm2f6cbcd67d29b4c9e3bb75dd647b1a17a55de1a62fc1e97506cc94f8a05b137e-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.46.1.el10_2.x86_64.rpm508d6a41009711761550afa65f8545587857d376ee7e6424a8c9ba40ade0512a-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-211.46.1.el10_2.x86_64.rpm508d6a41009711761550afa65f8545587857d376ee7e6424a8c9ba40ade0512a-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.x86_64.rpm2f20b35fd501bfa702bb4b00421865906ce410de8f6993123b028f5076903faf-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm363d7558452d29898c7249ddbc91fe7c64786ebf77a129091e89c31f107fdd6f-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm363d7558452d29898c7249ddbc91fe7c64786ebf77a129091e89c31f107fdd6f-ol10_x86_64_u2_baseos_patch
kernel-uki-virt-addons-6.12.0-211.46.1.el10_2.x86_64.rpm3015935dce6bd55aafafd74922287be81aa848a43e3f2a699ee7d8410dd9ff99-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-211.46.1.el10_2.x86_64.rpm3015935dce6bd55aafafd74922287be81aa848a43e3f2a699ee7d8410dd9ff99-ol10_x86_64_u2_baseos_patch
libperf-6.12.0-211.46.1.el10_2.x86_64.rpm362d4758bb57c81b3ee4f4f162c456830bfc676b52cf6dffeef0ef18dd73e448-ol10_x86_64_codeready_builder
perf-6.12.0-211.46.1.el10_2.x86_64.rpm438f159cf6f6a7018cabf53b35366a8ae8ef96c9e55b27ca373584c098280be1-ol10_x86_64_appstream
python3-perf-6.12.0-211.46.1.el10_2.x86_64.rpma90e5c697287625147bbc62663edf9dd551b5d7938cc1f14e4252ebf64e08d29-ol10_x86_64_appstream
rtla-6.12.0-211.46.1.el10_2.x86_64.rpmb1f6e3e5da0366c64fd445035648e642581ab4d75cd99f82fc0ab8c6ff002688-ol10_x86_64_appstream
rv-6.12.0-211.46.1.el10_2.x86_64.rpm96f54a3fcea38feca5dc9ad7fb0e5bd29e17f39d1cba13b228b6c36deaebca1a-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete