ELSA-2026-85321
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-85321
ELSA-2026-85321 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-20 |
Description
[6.12.0-211.67.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.67.1]
- net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590]
- ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999}
- signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256}
- posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048]
- exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260}
- smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631}
- smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633}
- xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678]
- xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678]
- xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678]
- xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678]
- drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038]
- selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987]
- sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752}
- sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479}
- sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162}
- sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588}
- usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958}
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412]
- usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962}
- usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963}
- usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961}
- redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228]
- Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509}
- openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678}
- openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678}
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801}
- tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117}
- sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971}
- sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917}
- sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315}
- sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376}
- sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336]
- xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_aarch64_appstream |
| kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_aarch64_baseos_latest | |
| kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_aarch64_codeready_builder | |
| kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.67.1.el10_2.aarch64.rpm | fe80b868d3823ed1b87b63f674ebe0b0ce0fd35b01511a1559f1425330d13238 | - | ol10_aarch64_codeready_builder | |
| kernel-headers-6.12.0-211.67.1.el10_2.aarch64.rpm | 002fc954e50619ea41bf9297f6e0ed1955147049d84898b452ddae7fa130d2d9 | - | ol10_aarch64_appstream | |
| kernel-tools-6.12.0-211.67.1.el10_2.aarch64.rpm | 55f5e662939a2621f4fcb3c0e8f256526fb55936a4b33327ad8cec9a69faedee | - | ol10_aarch64_baseos_latest | |
| kernel-tools-6.12.0-211.67.1.el10_2.aarch64.rpm | 55f5e662939a2621f4fcb3c0e8f256526fb55936a4b33327ad8cec9a69faedee | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.67.1.el10_2.aarch64.rpm | 8600c59cc4096d6925af21f36c46253d10dc75abe7f3ce637fff09b753a07dc4 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.67.1.el10_2.aarch64.rpm | 8600c59cc4096d6925af21f36c46253d10dc75abe7f3ce637fff09b753a07dc4 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.67.1.el10_2.aarch64.rpm | b9fb6cffaba84cb07ef1193a9995f2999db92a322d464400dc557c128ad83042 | - | ol10_aarch64_codeready_builder | |
| libperf-6.12.0-211.67.1.el10_2.aarch64.rpm | e3f430af8481e43c97836d7f4d0139831522b48cc1fb3796f9b8fb9a4162b108 | - | ol10_aarch64_codeready_builder | |
| perf-6.12.0-211.67.1.el10_2.aarch64.rpm | 15240086d5efddf0b3dc585bcbdd538adfcaaed19e0a516a7c598366f549c094 | - | ol10_aarch64_appstream | |
| python3-perf-6.12.0-211.67.1.el10_2.aarch64.rpm | 21ddef27aa30d4e97ec2198cb0c6b0119ed2288eef5d274c701e12b44b27a6ed | - | ol10_aarch64_appstream | |
| rtla-6.12.0-211.67.1.el10_2.aarch64.rpm | 2e4793c939c540e3ab6275bf3730e9259aba48e130579f8a130b82cce806eb8a | - | ol10_aarch64_appstream | |
| rv-6.12.0-211.67.1.el10_2.aarch64.rpm | 33bbbe69d04e8f503d1aef29d678a65c20fc58dafc29f047ffb94881a0e7a5f9 | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_x86_64_appstream |
| kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_x86_64_codeready_builder | |
| kernel-6.12.0-211.67.1.el10_2.src.rpm | 90631db366f0cced5a9f98fa91d7d357102b7588b5c524cb88ec320e3b310570 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-6.12.0-211.67.1.el10_2.x86_64.rpm | 67958d232ca4e584c616bde002352041b39b92a20f96741cf13c11035babdc07 | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.67.1.el10_2.x86_64.rpm | 67958d232ca4e584c616bde002352041b39b92a20f96741cf13c11035babdc07 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-abi-stablelists-6.12.0-211.67.1.el10_2.noarch.rpm | 97921615e22f79c2e9dfef546a710de67a4f7a5ba5719248fbd9c1c56930191a | - | ol10_x86_64_baseos_latest | |
| kernel-abi-stablelists-6.12.0-211.67.1.el10_2.noarch.rpm | 97921615e22f79c2e9dfef546a710de67a4f7a5ba5719248fbd9c1c56930191a | - | ol10_x86_64_u2_baseos_patch | |
| kernel-core-6.12.0-211.67.1.el10_2.x86_64.rpm | 4cab6908d00ba6e1db27a600b83fad8e4cd9ef7a28deedd618118df492abc6ee | - | ol10_x86_64_baseos_latest | |
| kernel-core-6.12.0-211.67.1.el10_2.x86_64.rpm | 4cab6908d00ba6e1db27a600b83fad8e4cd9ef7a28deedd618118df492abc6ee | - | ol10_x86_64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.67.1.el10_2.x86_64.rpm | 996104acf9bee1ddaa67db15d482c379fc0e6a610e43af522c8c46082b4837f3 | - | ol10_x86_64_codeready_builder | |
| kernel-debug-6.12.0-211.67.1.el10_2.x86_64.rpm | e2af45dde239716539cbc5a690f5c8e72918db2f58fae75ca4f7838d906b305d | - | ol10_x86_64_baseos_latest | |
| kernel-debug-6.12.0-211.67.1.el10_2.x86_64.rpm | e2af45dde239716539cbc5a690f5c8e72918db2f58fae75ca4f7838d906b305d | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-core-6.12.0-211.67.1.el10_2.x86_64.rpm | daef3f9b4403cb071fb847bf0d2080a9d44f8677d5a5c2d9315d901d73196ca3 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-core-6.12.0-211.67.1.el10_2.x86_64.rpm | daef3f9b4403cb071fb847bf0d2080a9d44f8677d5a5c2d9315d901d73196ca3 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-devel-6.12.0-211.67.1.el10_2.x86_64.rpm | 80e0116445612139f39c242cc0f9395f0af73d8fb1d54d0aec4ceb7d880ea687 | - | ol10_x86_64_appstream | |
| kernel-debug-devel-matched-6.12.0-211.67.1.el10_2.x86_64.rpm | a519a954284505505bbee75d05fbf6591fcad1543954ed9db0e338d7f30ee014 | - | ol10_x86_64_appstream | |
| kernel-debug-modules-6.12.0-211.67.1.el10_2.x86_64.rpm | 328ef81c363828418ee448c51f25d29a488a7a8a0f163bb0d4892ba8f66e83ed | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-6.12.0-211.67.1.el10_2.x86_64.rpm | 328ef81c363828418ee448c51f25d29a488a7a8a0f163bb0d4892ba8f66e83ed | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-core-6.12.0-211.67.1.el10_2.x86_64.rpm | ab95aef82775541275de750a7b125aedf21401683cd35e2b2b447c5eaa1887b6 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-core-6.12.0-211.67.1.el10_2.x86_64.rpm | ab95aef82775541275de750a7b125aedf21401683cd35e2b2b447c5eaa1887b6 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-extra-6.12.0-211.67.1.el10_2.x86_64.rpm | 39b7d0bd28c936b16182508c5d4328b10f9dd77b0625d9249135613ce234ea6a | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-extra-6.12.0-211.67.1.el10_2.x86_64.rpm | 39b7d0bd28c936b16182508c5d4328b10f9dd77b0625d9249135613ce234ea6a | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-uki-virt-6.12.0-211.67.1.el10_2.x86_64.rpm | 0569d8ad3d2d26a8fa0b6b460293238baf3a57458c0d12b748be39da3612b4a0 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-uki-virt-6.12.0-211.67.1.el10_2.x86_64.rpm | 0569d8ad3d2d26a8fa0b6b460293238baf3a57458c0d12b748be39da3612b4a0 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-devel-6.12.0-211.67.1.el10_2.x86_64.rpm | 99803e266965d83620d207972302578d4ad7d015a31968169bcbfff0d6b1c380 | - | ol10_x86_64_appstream | |
| kernel-devel-matched-6.12.0-211.67.1.el10_2.x86_64.rpm | ea27be2c416b1aaab30e503eb214a5d986e9ab2f72c24afbbe4383b80d196c2b | - | ol10_x86_64_appstream | |
| kernel-doc-6.12.0-211.67.1.el10_2.noarch.rpm | 562959384e2ef7b9b7172253a592057f0da3e16793d35edab5d8321614e4b286 | - | ol10_x86_64_appstream | |
| kernel-headers-6.12.0-211.67.1.el10_2.x86_64.rpm | 81107b01c54d4d8a6e210d6156edfab3929288f52475d232c069ba2aeab5fcf0 | - | ol10_x86_64_appstream | |
| kernel-modules-6.12.0-211.67.1.el10_2.x86_64.rpm | dff0969030e33483197c0037f7a95beb3fc4d21ee3a5ab01c7724e66768f8158 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-6.12.0-211.67.1.el10_2.x86_64.rpm | dff0969030e33483197c0037f7a95beb3fc4d21ee3a5ab01c7724e66768f8158 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-core-6.12.0-211.67.1.el10_2.x86_64.rpm | e85ea13cdaf5e5b2af103efcc5f312119893fa1398a4bb88cb62f8f5916651dd | - | ol10_x86_64_baseos_latest | |
| kernel-modules-core-6.12.0-211.67.1.el10_2.x86_64.rpm | e85ea13cdaf5e5b2af103efcc5f312119893fa1398a4bb88cb62f8f5916651dd | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-6.12.0-211.67.1.el10_2.x86_64.rpm | ae8ee43e5ac82cf27897e2cd00ac14afbe56d83627e963e6186726db2909bf91 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-6.12.0-211.67.1.el10_2.x86_64.rpm | ae8ee43e5ac82cf27897e2cd00ac14afbe56d83627e963e6186726db2909bf91 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-matched-6.12.0-211.67.1.el10_2.x86_64.rpm | 10092db5b6a8f0ca4348a9cbb7b613a79668452016bfab6dff3cef67b72fadf5 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-matched-6.12.0-211.67.1.el10_2.x86_64.rpm | 10092db5b6a8f0ca4348a9cbb7b613a79668452016bfab6dff3cef67b72fadf5 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-6.12.0-211.67.1.el10_2.x86_64.rpm | ca30f5180129088ec6b310328f09ddeee54f7ec1557a75670206e5f62c263e9a | - | ol10_x86_64_baseos_latest | |
| kernel-tools-6.12.0-211.67.1.el10_2.x86_64.rpm | ca30f5180129088ec6b310328f09ddeee54f7ec1557a75670206e5f62c263e9a | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.67.1.el10_2.x86_64.rpm | 60af19b4e6cbfb02f191cfa4f2ca4dea3d2d8e65bd9b10d5d83294d318daa88b | - | ol10_x86_64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.67.1.el10_2.x86_64.rpm | 60af19b4e6cbfb02f191cfa4f2ca4dea3d2d8e65bd9b10d5d83294d318daa88b | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.67.1.el10_2.x86_64.rpm | 3b7d81618e553e16df7c780f9498f79402805573e3b9a83f883471cb5a19c386 | - | ol10_x86_64_codeready_builder | |
| kernel-uki-virt-6.12.0-211.67.1.el10_2.x86_64.rpm | b82a23ab0f7282d55bdd5244722c207ca7a492c339f2d915fbd143169c585caa | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-6.12.0-211.67.1.el10_2.x86_64.rpm | b82a23ab0f7282d55bdd5244722c207ca7a492c339f2d915fbd143169c585caa | - | ol10_x86_64_u2_baseos_patch | |
| kernel-uki-virt-addons-6.12.0-211.67.1.el10_2.x86_64.rpm | 17426ae16bcee5cabd9b4afe7c347c8b67579f4e3ac726cfc6c2ddcbaaeca056 | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-addons-6.12.0-211.67.1.el10_2.x86_64.rpm | 17426ae16bcee5cabd9b4afe7c347c8b67579f4e3ac726cfc6c2ddcbaaeca056 | - | ol10_x86_64_u2_baseos_patch | |
| libperf-6.12.0-211.67.1.el10_2.x86_64.rpm | 49765add7794ac3f27a40627460ae21a40445331905e217ea7e31f0b38ae929f | - | ol10_x86_64_codeready_builder | |
| perf-6.12.0-211.67.1.el10_2.x86_64.rpm | 4774075df54617791ac8413c6516fae5c5010883f0c13a91827a8994548aea0d | - | ol10_x86_64_appstream | |
| python3-perf-6.12.0-211.67.1.el10_2.x86_64.rpm | 700e3cf23ad7a2ca39b3c970ed9dd329beda74b3ebdc8e985709d73e7cf4ae3f | - | ol10_x86_64_appstream | |
| rtla-6.12.0-211.67.1.el10_2.x86_64.rpm | 1a83f41a3443eb1715edf952450f66cab3b9b20242b43b30c85e57c7e041c8ca | - | ol10_x86_64_appstream | |
| rv-6.12.0-211.67.1.el10_2.x86_64.rpm | 3f557c721c98f5f14e198867876d658e184e78a323a4566bfdc4da5ce577c37d | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
