ELSA-2026-61887-0
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-61887-0
ELSA-2026-61887-0 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-01 |
Description
[6.12.0-211.50.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.50.1]
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_aarch64_appstream |
| kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_aarch64_baseos_latest | |
| kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_aarch64_codeready_builder | |
| kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.50.1.el10_2.aarch64.rpm | 168dc6d7117499115c78b3a37fd524f0abe780f2d634e4244d1ab205649d0db9 | - | ol10_aarch64_codeready_builder | |
| kernel-headers-6.12.0-211.50.1.el10_2.aarch64.rpm | aed82c94ee76485cf7f3c6a3c0aed8e227bad5c87e463b7b8f160e2473e172c8 | - | ol10_aarch64_appstream | |
| kernel-tools-6.12.0-211.50.1.el10_2.aarch64.rpm | 3a1ffe65c81f5c42549f0920c96043e98b536a6b21c5cd9778ab1129f1164187 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-6.12.0-211.50.1.el10_2.aarch64.rpm | 3a1ffe65c81f5c42549f0920c96043e98b536a6b21c5cd9778ab1129f1164187 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.50.1.el10_2.aarch64.rpm | 0a864ab7d1c1f98ab5ee8ae6089df82e115ea6b5792792f99ff573e5ca68f852 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.50.1.el10_2.aarch64.rpm | 0a864ab7d1c1f98ab5ee8ae6089df82e115ea6b5792792f99ff573e5ca68f852 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.50.1.el10_2.aarch64.rpm | 836f07479dee446a11e8494c09efc93dcfb6bd262d8819efe7ffce70312dc2b8 | - | ol10_aarch64_codeready_builder | |
| libperf-6.12.0-211.50.1.el10_2.aarch64.rpm | 2924cb6450b80df585bf5d7fa4f357345f54b7c4ec47b85e14c54ccccbe628b7 | - | ol10_aarch64_codeready_builder | |
| perf-6.12.0-211.50.1.el10_2.aarch64.rpm | 85d0db22819d4bf03ee30513a2eacff3b662b3fc023cfe46619a4ec164bca4b9 | - | ol10_aarch64_appstream | |
| python3-perf-6.12.0-211.50.1.el10_2.aarch64.rpm | c3987b77c2ff6d222bdd15deb0af8a4a18a0304d02d9d72f7aea77e51ebd83ee | - | ol10_aarch64_appstream | |
| rtla-6.12.0-211.50.1.el10_2.aarch64.rpm | 71769b5093456386e9f534b63c245b8bcb24a86ffa203e1185d23bd1c16b4755 | - | ol10_aarch64_appstream | |
| rv-6.12.0-211.50.1.el10_2.aarch64.rpm | 7c6ebb1bbe192b8e2280222f8227d99fc62f25f7f61194d8526941a38a7d988f | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_x86_64_appstream |
| kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_x86_64_codeready_builder | |
| kernel-6.12.0-211.50.1.el10_2.src.rpm | 89991bb1c7e12184d41bdbe48e47c9785f25c42e263e3e230b955beae902aa26 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-6.12.0-211.50.1.el10_2.x86_64.rpm | d91d702152b30e0c0ab2ff039bed94ee99654866479064c79b69cd04d0668091 | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.50.1.el10_2.x86_64.rpm | d91d702152b30e0c0ab2ff039bed94ee99654866479064c79b69cd04d0668091 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-abi-stablelists-6.12.0-211.50.1.el10_2.noarch.rpm | c669b48e2637178eebbbf86af81082bf4cdcf7730491cfe7a360153e8b6c066b | - | ol10_x86_64_baseos_latest | |
| kernel-abi-stablelists-6.12.0-211.50.1.el10_2.noarch.rpm | c669b48e2637178eebbbf86af81082bf4cdcf7730491cfe7a360153e8b6c066b | - | ol10_x86_64_u2_baseos_patch | |
| kernel-core-6.12.0-211.50.1.el10_2.x86_64.rpm | 525ce5175c6a96ec570566e5edbf3835b316cb33ec8d041c6773e47869700f51 | - | ol10_x86_64_baseos_latest | |
| kernel-core-6.12.0-211.50.1.el10_2.x86_64.rpm | 525ce5175c6a96ec570566e5edbf3835b316cb33ec8d041c6773e47869700f51 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.50.1.el10_2.x86_64.rpm | aa6b9d32184c96ab8697abc5da3333ce298c1eddd36ae81efd76e3e8c7a0c9d4 | - | ol10_x86_64_codeready_builder | |
| kernel-debug-6.12.0-211.50.1.el10_2.x86_64.rpm | 4ca94a53beafe28d7cc4bb9b81d3623073a346236c41d24f11085bb3abb2b53c | - | ol10_x86_64_baseos_latest | |
| kernel-debug-6.12.0-211.50.1.el10_2.x86_64.rpm | 4ca94a53beafe28d7cc4bb9b81d3623073a346236c41d24f11085bb3abb2b53c | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-core-6.12.0-211.50.1.el10_2.x86_64.rpm | fc17b50420f3112460f93addff11cd2fdbc78e785f1ddf38996a7975585ebe30 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-core-6.12.0-211.50.1.el10_2.x86_64.rpm | fc17b50420f3112460f93addff11cd2fdbc78e785f1ddf38996a7975585ebe30 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-devel-6.12.0-211.50.1.el10_2.x86_64.rpm | e2ed89eb182c7c0a91df2661c40cf851d485a638c923e214ac59f911258fce61 | - | ol10_x86_64_appstream | |
| kernel-debug-devel-matched-6.12.0-211.50.1.el10_2.x86_64.rpm | 39f842443deaaeaf9b21724a87352cbe8f2fac2b8f4b1d8514e2b1e4fcb8c7b1 | - | ol10_x86_64_appstream | |
| kernel-debug-modules-6.12.0-211.50.1.el10_2.x86_64.rpm | d508c0eaf7818e742fdbbd2293f40124659c7640152e8e2666d2d78c80b711a3 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-6.12.0-211.50.1.el10_2.x86_64.rpm | d508c0eaf7818e742fdbbd2293f40124659c7640152e8e2666d2d78c80b711a3 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm | 212634689844ab9d70de74116b59cd99345091ea9497b3b2fea36e2ad1263895 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm | 212634689844ab9d70de74116b59cd99345091ea9497b3b2fea36e2ad1263895 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm | a98f2deb38b4ed310606cee387db91515a87d9af38c0ed849ebfce098f3cbf2f | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm | a98f2deb38b4ed310606cee387db91515a87d9af38c0ed849ebfce098f3cbf2f | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-uki-virt-6.12.0-211.50.1.el10_2.x86_64.rpm | 96f9481b264e73d740d844cf7627d72308619d1741fce30ca3b8dfc4dffc371f | - | ol10_x86_64_baseos_latest | |
| kernel-debug-uki-virt-6.12.0-211.50.1.el10_2.x86_64.rpm | 96f9481b264e73d740d844cf7627d72308619d1741fce30ca3b8dfc4dffc371f | - | ol10_x86_64_u2_baseos_patch | |
| kernel-devel-6.12.0-211.50.1.el10_2.x86_64.rpm | 3a2a2047c1dd53ebdd6c3cdca5c82e7e20630c3925a6e49d55215912971756e8 | - | ol10_x86_64_appstream | |
| kernel-devel-matched-6.12.0-211.50.1.el10_2.x86_64.rpm | d1361a23f17086c883f304bfcb47d4b51ee9ac0fefabf271ad903f8d049eb1d3 | - | ol10_x86_64_appstream | |
| kernel-doc-6.12.0-211.50.1.el10_2.noarch.rpm | fd39de2cca114a3b4091af166843dcf17940cbe1760878bab65188a827cea2d2 | - | ol10_x86_64_appstream | |
| kernel-headers-6.12.0-211.50.1.el10_2.x86_64.rpm | 0fc580e7ed4c6e2d628edf768f1533ca5f445255616348d782a926c0b37a55e3 | - | ol10_x86_64_appstream | |
| kernel-modules-6.12.0-211.50.1.el10_2.x86_64.rpm | cc93ca1788f35f349188768cfb7229b014f2f6309ce2c6853adce67427a734db | - | ol10_x86_64_baseos_latest | |
| kernel-modules-6.12.0-211.50.1.el10_2.x86_64.rpm | cc93ca1788f35f349188768cfb7229b014f2f6309ce2c6853adce67427a734db | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm | 991e9079e671f46c7139691de4630fad750169c6581d48637f786bfa982c4302 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm | 991e9079e671f46c7139691de4630fad750169c6581d48637f786bfa982c4302 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm | 0ec96cd0cf9691d9f0e09de59f47b409082f43900170295fdfabdd34228f4e7a | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm | 0ec96cd0cf9691d9f0e09de59f47b409082f43900170295fdfabdd34228f4e7a | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-matched-6.12.0-211.50.1.el10_2.x86_64.rpm | 739983933b783ec73863d5c78aa7296da810963edaf758ab91ca4f871e9b99a8 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-matched-6.12.0-211.50.1.el10_2.x86_64.rpm | 739983933b783ec73863d5c78aa7296da810963edaf758ab91ca4f871e9b99a8 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-6.12.0-211.50.1.el10_2.x86_64.rpm | 8f394bec9fc9241a86d1bf3d41684792017c14b13ca7b2c2acf866a6b5bf3997 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-6.12.0-211.50.1.el10_2.x86_64.rpm | 8f394bec9fc9241a86d1bf3d41684792017c14b13ca7b2c2acf866a6b5bf3997 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.50.1.el10_2.x86_64.rpm | 3a517206da339e04fbaa819795cb7f943ba9d2e9ad6aef1b1a3bea24a07b0b31 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.50.1.el10_2.x86_64.rpm | 3a517206da339e04fbaa819795cb7f943ba9d2e9ad6aef1b1a3bea24a07b0b31 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.50.1.el10_2.x86_64.rpm | 1a4ea0fc149ed9cc460c52d4dd435723fb5ea6c13033443675bfdd513544903a | - | ol10_x86_64_codeready_builder | |
| kernel-uki-virt-6.12.0-211.50.1.el10_2.x86_64.rpm | 947f022b251832967336ae08db1ce92c3a5441c4fbdb914f079db3f7d459a63c | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-6.12.0-211.50.1.el10_2.x86_64.rpm | 947f022b251832967336ae08db1ce92c3a5441c4fbdb914f079db3f7d459a63c | - | ol10_x86_64_u2_baseos_patch | |
| kernel-uki-virt-addons-6.12.0-211.50.1.el10_2.x86_64.rpm | c9424d3816a55d0583ab25cd9ae0015cdde762f9b40bb08d52365b1919e097b9 | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-addons-6.12.0-211.50.1.el10_2.x86_64.rpm | c9424d3816a55d0583ab25cd9ae0015cdde762f9b40bb08d52365b1919e097b9 | - | ol10_x86_64_u2_baseos_patch | |
| libperf-6.12.0-211.50.1.el10_2.x86_64.rpm | d48266065778a689907bea839ee6f7eed9c3a84855b1af7ee9606feaecee4631 | - | ol10_x86_64_codeready_builder | |
| perf-6.12.0-211.50.1.el10_2.x86_64.rpm | 19f8f3454f4c2309e2099fd9d44329cc38ee260dccd384e1d295d707f1c6bfa8 | - | ol10_x86_64_appstream | |
| python3-perf-6.12.0-211.50.1.el10_2.x86_64.rpm | 25d05caee2b7884fec5711d9f486222354edb096f5ddff71fae1dfcba8264b00 | - | ol10_x86_64_appstream | |
| rtla-6.12.0-211.50.1.el10_2.x86_64.rpm | 6da42261fe823f10ed97e141e24eb8d9eda407d4f6998aa0d2a59f68ff879811 | - | ol10_x86_64_appstream | |
| rv-6.12.0-211.50.1.el10_2.x86_64.rpm | 244f416be4c48b8dd107600cb56c70f69998a5243905d4063456f3789c41ed0a | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
