ELSA-2026-91565

ELSA-2026-91565 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-28

Description


[6.12.0-211.69.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.69.1]
- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CKI Backport Bot) [RHEL-283521] {CVE-2026-72083}
- md/raid5-ppl: fix use-after-free in ppl_do_flush() (Nigel Croxon) [RHEL-278085] {CVE-2026-93262}
- KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277647] {CVE-2026-74515}
- vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270937] {CVE-2026-89777}
- smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (Jorge San Emeterio Villalain) [RHEL-271266] {CVE-2026-89638}
- net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232133] {CVE-2026-63978}
- net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232133]
- net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230367] {CVE-2026-63979}
- net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234161] {CVE-2026-64523}
- x86/microcode: Add platform mask to Intel microcode 'old' list (Luis Claudio R. Goncalves) [RHEL-212778]
- x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-212778]
- x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-212778]
- x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-212778]
- fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226096] {CVE-2026-53388}
- sched_ext: Fix possible deadlock in the deferred_irq_workfn() (CKI Backport Bot) [RHEL-259937]
- sched_ext: Fix unsafe locking in the scx_dump_state() (CKI Backport Bot) [RHEL-259937]
- net: shaper: rework the VALID marking (again) (Jamie Bainbridge) [RHEL-231705] {CVE-2026-64027}
- net: shaper: annotate the data races (Jamie Bainbridge) [RHEL-231705]
- net: shaper: fix trivial ordering issue in net_shaper_commit() (Jamie Bainbridge) [RHEL-231705]
- net: shaper: flip the polarity of the valid flag (Jamie Bainbridge) [RHEL-231705]
- net: shaper: protect late read accesses to the hierarchy (Jamie Bainbridge) [RHEL-231705]
- net/packet: avoid fanout hook re-registration after unregister (Jamie Bainbridge) [RHEL-246967] {CVE-2026-68338}
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (Jamie Bainbridge) [RHEL-225883] {CVE-2026-64109}
- af_unix: Cache state->msg in unix_stream_read_generic(). (Jamie Bainbridge) [RHEL-225883]
- net: gro: fix double aggregation of flush-marked skbs (Jamie Bainbridge) [RHEL-242620] {CVE-2026-68136}
- tcp: restrict SO_ATTACH_FILTER to priv users (Jamie Bainbridge) [RHEL-257741] {CVE-2026-53236}
- usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258583] {CVE-2026-80824}
- net: smc: fix splice entry lifetime imbalance in smc_rx_splice (CKI Backport Bot) [RHEL-253457] {CVE-2026-74631}
- ipv4: fib: fix route re-dump in inet_dump_fib() on multi-batch dump (Felix Maurer) [RHEL-245489]
- ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (Felix Maurer) [RHEL-245489]


Related CVEs


CVE-2026-53236
CVE-2026-53388
CVE-2026-63978
CVE-2026-63979
CVE-2026-64027
CVE-2026-64109
CVE-2026-64523
CVE-2026-68136
CVE-2026-68338
CVE-2026-72083
CVE-2026-74515
CVE-2026-74631
CVE-2026-80824
CVE-2026-89638
CVE-2026-89777
CVE-2026-93262

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_aarch64_appstream
kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_aarch64_baseos_latest
kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_aarch64_codeready_builder
kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_aarch64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.69.1.el10_2.aarch64.rpm94b4bb990d8ef17a1ec074b835b81ba1a582a3abfa058fc690dd13830ba8695e-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-211.69.1.el10_2.aarch64.rpm19c7b3c6bfb7d24a4c01cf7ec46d831d62847da7751741b1002a317c0cd5601b-ol10_aarch64_appstream
kernel-tools-6.12.0-211.69.1.el10_2.aarch64.rpm9aed19f5adf2b9fa7fe9b195cfa30d3755a680afcfba34a5cdf9a6d7c385c8d6-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-211.69.1.el10_2.aarch64.rpm9aed19f5adf2b9fa7fe9b195cfa30d3755a680afcfba34a5cdf9a6d7c385c8d6-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.69.1.el10_2.aarch64.rpmea7bb125579db2c04058ebefe61e7f9980f2e1425b93f7cc78dfad21ab03d099-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-211.69.1.el10_2.aarch64.rpmea7bb125579db2c04058ebefe61e7f9980f2e1425b93f7cc78dfad21ab03d099-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.69.1.el10_2.aarch64.rpm6ca3bc94ce49032a09debaab8ccff15190c027379644d8ef3ee096599b8d554c-ol10_aarch64_codeready_builder
libperf-6.12.0-211.69.1.el10_2.aarch64.rpmfa6ce6ca80e7310084c846bd74722b5d527531d325faad77aa80e79a7629065d-ol10_aarch64_codeready_builder
perf-6.12.0-211.69.1.el10_2.aarch64.rpm329874a838adf927bf157aabc669c6afefa624a1528b028efb3f8f2dd66e84c1-ol10_aarch64_appstream
python3-perf-6.12.0-211.69.1.el10_2.aarch64.rpm7b8cc1debe00cf2562c867bccc478a76a73df62b2af17e025ff422c0decc0fa0-ol10_aarch64_appstream
rtla-6.12.0-211.69.1.el10_2.aarch64.rpmea03f5f85059fc530ef2136e564fe390f22c9c7e0463ccb27d3b85c101dacb81-ol10_aarch64_appstream
rv-6.12.0-211.69.1.el10_2.aarch64.rpmfbb4f6fe4977a4d5ab8e33799bdc377e81ac685607ed06fbd82acd02a5381536-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_x86_64_appstream
kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_x86_64_baseos_latest
kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_x86_64_codeready_builder
kernel-6.12.0-211.69.1.el10_2.src.rpma46e98bb8ddac30a9ca6fa8177b5e2ff364bbaa0527328619977fe6846f28331-ol10_x86_64_u2_baseos_patch
kernel-6.12.0-211.69.1.el10_2.x86_64.rpm4c2dea701cbca29adfe61a765c40453682f1fd5540ee042bc16c16cbf03a8f08-ol10_x86_64_baseos_latest
kernel-6.12.0-211.69.1.el10_2.x86_64.rpm4c2dea701cbca29adfe61a765c40453682f1fd5540ee042bc16c16cbf03a8f08-ol10_x86_64_u2_baseos_patch
kernel-abi-stablelists-6.12.0-211.69.1.el10_2.noarch.rpmab6ac3f22b5fc092445e6963b277d6008a911ceffb8c4b85912fb605a7dd42f2-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-211.69.1.el10_2.noarch.rpmab6ac3f22b5fc092445e6963b277d6008a911ceffb8c4b85912fb605a7dd42f2-ol10_x86_64_u2_baseos_patch
kernel-core-6.12.0-211.69.1.el10_2.x86_64.rpmaadc5688a985272e0485ba662985dfb7d80e6c092d55f6ed0800d6e534aacee7-ol10_x86_64_baseos_latest
kernel-core-6.12.0-211.69.1.el10_2.x86_64.rpmaadc5688a985272e0485ba662985dfb7d80e6c092d55f6ed0800d6e534aacee7-ol10_x86_64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.69.1.el10_2.x86_64.rpm98e5ffd1251a17d5c128fddfdcd84e69e1e10adf8f6b94cde59d0e72d4a695a7-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-211.69.1.el10_2.x86_64.rpm46f717f1fc19ea09e2aa0b95ffea7f5835e47b0da2c7d860d23c5020b8b0708e-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-211.69.1.el10_2.x86_64.rpm46f717f1fc19ea09e2aa0b95ffea7f5835e47b0da2c7d860d23c5020b8b0708e-ol10_x86_64_u2_baseos_patch
kernel-debug-core-6.12.0-211.69.1.el10_2.x86_64.rpm519599de7676ea19276c142e8fb0d0741af079f8357b9b4e9f92bce00dc2fa55-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-211.69.1.el10_2.x86_64.rpm519599de7676ea19276c142e8fb0d0741af079f8357b9b4e9f92bce00dc2fa55-ol10_x86_64_u2_baseos_patch
kernel-debug-devel-6.12.0-211.69.1.el10_2.x86_64.rpmc82de9a8952f517c08e136b9892ca9a03528693afc1eb739f5eb9b8ec5023552-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-211.69.1.el10_2.x86_64.rpm63ce2a876bcb123cff220407ee160564fdbeded0e80deae8e2faecb441bcf83d-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-211.69.1.el10_2.x86_64.rpm24b374b8de32341b269d1ead3505a30e3c6c6fc45e6c73cb70e2112c05ed9936-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-211.69.1.el10_2.x86_64.rpm24b374b8de32341b269d1ead3505a30e3c6c6fc45e6c73cb70e2112c05ed9936-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-core-6.12.0-211.69.1.el10_2.x86_64.rpm1f8cfcdc1584ffc285fb43758e5af962a4cbfa655ca682099c58d218f640730c-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-211.69.1.el10_2.x86_64.rpm1f8cfcdc1584ffc285fb43758e5af962a4cbfa655ca682099c58d218f640730c-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-extra-6.12.0-211.69.1.el10_2.x86_64.rpm1dbd8916090333d69e80d9c3c072070a15b16f6234e407f018ed0a13b77c26bd-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-211.69.1.el10_2.x86_64.rpm1dbd8916090333d69e80d9c3c072070a15b16f6234e407f018ed0a13b77c26bd-ol10_x86_64_u2_baseos_patch
kernel-debug-uki-virt-6.12.0-211.69.1.el10_2.x86_64.rpm09e60f6c7ef1473d0eec9a6697ffdea7d9637d97c30aad32e82a7aaf95fbc54e-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-211.69.1.el10_2.x86_64.rpm09e60f6c7ef1473d0eec9a6697ffdea7d9637d97c30aad32e82a7aaf95fbc54e-ol10_x86_64_u2_baseos_patch
kernel-devel-6.12.0-211.69.1.el10_2.x86_64.rpmb720ed2ee834522b6306db0814df7f3d82105dea283344ebc293df89d948a8b7-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-211.69.1.el10_2.x86_64.rpm60806fa3e428b9d8502740bdf2d3bf508ebff516da6c3f7e0634ec387592b752-ol10_x86_64_appstream
kernel-doc-6.12.0-211.69.1.el10_2.noarch.rpmde2a632f78f9e859e6bb3f30ba50848378d366b6a4f169651247b23acf3e1c7f-ol10_x86_64_appstream
kernel-headers-6.12.0-211.69.1.el10_2.x86_64.rpm560627f9790ce75e46f355c86b7f78c510c870fc92157d843e680d0a21524148-ol10_x86_64_appstream
kernel-modules-6.12.0-211.69.1.el10_2.x86_64.rpm4b177af1a622c569daa783c01d83731372ce46e2c9ab65c36a92e5d0d517445f-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-211.69.1.el10_2.x86_64.rpm4b177af1a622c569daa783c01d83731372ce46e2c9ab65c36a92e5d0d517445f-ol10_x86_64_u2_baseos_patch
kernel-modules-core-6.12.0-211.69.1.el10_2.x86_64.rpma9801a569e1991603dc4cb1c0dba1d9b01d982a795ce90d8cd0da7d9344413ea-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-211.69.1.el10_2.x86_64.rpma9801a569e1991603dc4cb1c0dba1d9b01d982a795ce90d8cd0da7d9344413ea-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-6.12.0-211.69.1.el10_2.x86_64.rpmec80e0343c3ee054e63e1aca570b23fb8aeb7a0fff71b400a568e21f82ca171b-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-211.69.1.el10_2.x86_64.rpmec80e0343c3ee054e63e1aca570b23fb8aeb7a0fff71b400a568e21f82ca171b-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-matched-6.12.0-211.69.1.el10_2.x86_64.rpm8358ce173de0a25f6aa9a69489b093ef7cec369124e5459be583903dfe473caa-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-211.69.1.el10_2.x86_64.rpm8358ce173de0a25f6aa9a69489b093ef7cec369124e5459be583903dfe473caa-ol10_x86_64_u2_baseos_patch
kernel-tools-6.12.0-211.69.1.el10_2.x86_64.rpm8edb944f534c048d75d80079d4993c5b699cab7943d7a8c800d6bb5f7c73744b-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-211.69.1.el10_2.x86_64.rpm8edb944f534c048d75d80079d4993c5b699cab7943d7a8c800d6bb5f7c73744b-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.69.1.el10_2.x86_64.rpm94f4ac91af91a3e00e9ccba5d7b89e692438c70249235f4f10c224c5bf30d887-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-211.69.1.el10_2.x86_64.rpm94f4ac91af91a3e00e9ccba5d7b89e692438c70249235f4f10c224c5bf30d887-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.69.1.el10_2.x86_64.rpmdcc985cfbd10dbbb3a00d0a2bfb8f4a98fd17768889dbcbfc1af026a89ef6f42-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-211.69.1.el10_2.x86_64.rpm0d3312e69b83e2f2ff341d51324eb85b9dbc0e42e6641eb9dea806720a617e24-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-211.69.1.el10_2.x86_64.rpm0d3312e69b83e2f2ff341d51324eb85b9dbc0e42e6641eb9dea806720a617e24-ol10_x86_64_u2_baseos_patch
kernel-uki-virt-addons-6.12.0-211.69.1.el10_2.x86_64.rpm8511cd38bbcfc3d514c23889a8d8f6f83f82ea62cb4daac7f4f5600e45396d58-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-211.69.1.el10_2.x86_64.rpm8511cd38bbcfc3d514c23889a8d8f6f83f82ea62cb4daac7f4f5600e45396d58-ol10_x86_64_u2_baseos_patch
libperf-6.12.0-211.69.1.el10_2.x86_64.rpmdb55d00782e95b1ebc383269f20215562bd70edf093f56594eee2223535a6ca4-ol10_x86_64_codeready_builder
perf-6.12.0-211.69.1.el10_2.x86_64.rpm47c18b176423ee6d99d682c604609ba589da28786c65f996474047c3e217f26e-ol10_x86_64_appstream
python3-perf-6.12.0-211.69.1.el10_2.x86_64.rpm950b048fb1317e68277d1fc5664ae27b0ef6d75201a6d81e849a1ae22ab3f624-ol10_x86_64_appstream
rtla-6.12.0-211.69.1.el10_2.x86_64.rpm186d0c19c5754aeba568bc436cb6e27fbf1b790c8d14025051a09defff2863ec-ol10_x86_64_appstream
rv-6.12.0-211.69.1.el10_2.x86_64.rpm1568a2098c01a3131dfda2443066421d4571d3d69a6bf88f75e8c03a94fa8b7d-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete