ELSA-2026-9264

ELSA-2026-9264 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-22

Description

[6.12.0-124.52.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.52.1]
- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]

[6.12.0-124.51.1]
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]

[6.12.0-124.50.1]
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]

Related CVEs

CVE-2025-39766

CVE-2025-68741

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_aarch64_appstream
	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_aarch64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.52.1.el10_1.aarch64.rpm	3270b21af73d8e7d98dc1a567184ba242fcf63057510a65e77b66bbfda286790	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-124.52.1.el10_1.aarch64.rpm	4441837b99241e280289081f960ce21cf4146b9411788e3f6e3cbcb541034af7	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-124.52.1.el10_1.aarch64.rpm	68ee7f0666498c75d8cd395a1b4b1eb48f512b6f2450a71325202531f65cfd88	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-124.52.1.el10_1.aarch64.rpm	68ee7f0666498c75d8cd395a1b4b1eb48f512b6f2450a71325202531f65cfd88	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.52.1.el10_1.aarch64.rpm	917712095d399c09ff6686cf166d88cca2bd117c67762a8c052b2c095773f48f	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-124.52.1.el10_1.aarch64.rpm	917712095d399c09ff6686cf166d88cca2bd117c67762a8c052b2c095773f48f	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.52.1.el10_1.aarch64.rpm	3a73fda4d48889bd425a6c9affaaac54472e90aa4022bdb2105a89b83b1038df	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-124.52.1.el10_1.aarch64.rpm	66c4b784bad4bb3389cfc6ab1c44a90df903f4e290389eec022ebb1cd2a6438a	-	ol10_aarch64_codeready_builder
	perf-6.12.0-124.52.1.el10_1.aarch64.rpm	852aaf6f0164547d4f9738a6be698f2cc1e988e190dbc106acb3450c5d342e09	-	ol10_aarch64_appstream
	python3-perf-6.12.0-124.52.1.el10_1.aarch64.rpm	f3a298d1e8a971f37ac4e1336058b0c3ccdfbbba8bad733b53ba0d31814bfa1f	-	ol10_aarch64_appstream
	rtla-6.12.0-124.52.1.el10_1.aarch64.rpm	15cb2153e50ddf1a1e8f9fc6305605d25c8cb21a5a7be0cd83f55a7b45e57509	-	ol10_aarch64_appstream
	rv-6.12.0-124.52.1.el10_1.aarch64.rpm	544056fc90f220d3ead2b6c5825ab13e1070122adef906e46139e51be2b00cbe	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_x86_64_appstream
	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-124.52.1.el10_1.src.rpm	3ff93185d3c9f0461e48cfcd8b46e63efdd30129dafeb47da2c60a8cbdf37297	-	ol10_x86_64_u1_baseos_patch
	kernel-6.12.0-124.52.1.el10_1.x86_64.rpm	92aec2b0280e6e717ebeb114591d35a0e2f40907e4f6c2b66d96fb9d42283226	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.52.1.el10_1.x86_64.rpm	92aec2b0280e6e717ebeb114591d35a0e2f40907e4f6c2b66d96fb9d42283226	-	ol10_x86_64_u1_baseos_patch
	kernel-abi-stablelists-6.12.0-124.52.1.el10_1.noarch.rpm	0b38246cbd5d74cb24216d19fbf9b42951d7ad473af90dd04ca85c6252a8eea5	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-124.52.1.el10_1.noarch.rpm	0b38246cbd5d74cb24216d19fbf9b42951d7ad473af90dd04ca85c6252a8eea5	-	ol10_x86_64_u1_baseos_patch
	kernel-core-6.12.0-124.52.1.el10_1.x86_64.rpm	58b584e97229e16b4abfb4d50a07e73c3b58ec33d519762871badeec97ab720e	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-124.52.1.el10_1.x86_64.rpm	58b584e97229e16b4abfb4d50a07e73c3b58ec33d519762871badeec97ab720e	-	ol10_x86_64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.52.1.el10_1.x86_64.rpm	d5c74daa22e377ac22fe45895471bb6d25f010b28bb0afccd93b4ba177e7d951	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-124.52.1.el10_1.x86_64.rpm	d64b523482a154f82776b2f1cb71df75fe27702134a66ec79ce0872fe40a1bc3	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-124.52.1.el10_1.x86_64.rpm	d64b523482a154f82776b2f1cb71df75fe27702134a66ec79ce0872fe40a1bc3	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-core-6.12.0-124.52.1.el10_1.x86_64.rpm	2970fae8b5694ff3901a7e6ec9f31fbe24a44e9163bd86e4b01a9f09b23dc2ef	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-124.52.1.el10_1.x86_64.rpm	2970fae8b5694ff3901a7e6ec9f31fbe24a44e9163bd86e4b01a9f09b23dc2ef	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-devel-6.12.0-124.52.1.el10_1.x86_64.rpm	7a3354b6da9731d5617013b822ffe17c3d8072ebede4781e453a3d291aff7ac7	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-124.52.1.el10_1.x86_64.rpm	b081871cf8ed9ccb3fb9c1f4c8fc582a25659ad989d7a8b3dcfa99b2d8e543a4	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-124.52.1.el10_1.x86_64.rpm	5c0fa874425843047567a0eec182b731bf006820fb36dfc1407ea781984f0b8a	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-124.52.1.el10_1.x86_64.rpm	5c0fa874425843047567a0eec182b731bf006820fb36dfc1407ea781984f0b8a	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-core-6.12.0-124.52.1.el10_1.x86_64.rpm	db8108ea4b1a3d1c3777f3c88e478481c79d8100eed0973904dc438042a4a5bf	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-124.52.1.el10_1.x86_64.rpm	db8108ea4b1a3d1c3777f3c88e478481c79d8100eed0973904dc438042a4a5bf	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-extra-6.12.0-124.52.1.el10_1.x86_64.rpm	885fa8fa6e243fd170cf428fce605bedec6846d4c5ba9a4749537632fc3a4276	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-124.52.1.el10_1.x86_64.rpm	885fa8fa6e243fd170cf428fce605bedec6846d4c5ba9a4749537632fc3a4276	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-uki-virt-6.12.0-124.52.1.el10_1.x86_64.rpm	60b0a2469d9c137400e5cb6c75e6ace31860ec3b847b750a2f11352cfcf234a0	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-124.52.1.el10_1.x86_64.rpm	60b0a2469d9c137400e5cb6c75e6ace31860ec3b847b750a2f11352cfcf234a0	-	ol10_x86_64_u1_baseos_patch
	kernel-devel-6.12.0-124.52.1.el10_1.x86_64.rpm	1ed8c8eade40c207ef6a3955a98f6e43f55d523fdc8277434a097e41a8394c08	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-124.52.1.el10_1.x86_64.rpm	ea5d14531c9dd69407f115902edeffecf6d6f245a1dcfa03b53c93c958a2a2b0	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-124.52.1.el10_1.noarch.rpm	cbea7432dd2ad3061601b560a17d7c81a4b0692957d0a74537cf7736c21f9987	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-124.52.1.el10_1.x86_64.rpm	404a2921b9f6a5377c5cef3852dbda2280ab4f1dddd48f5d57ce9f8e9261c9eb	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-124.52.1.el10_1.x86_64.rpm	2c4f153774f48c152d079d4948a372941c289957d55d787d88adcf848d8c25c8	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-124.52.1.el10_1.x86_64.rpm	2c4f153774f48c152d079d4948a372941c289957d55d787d88adcf848d8c25c8	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-core-6.12.0-124.52.1.el10_1.x86_64.rpm	732df76713c530537f31ee47e5b26b6739a0d72db33dc81a2cd88d07a04c01c3	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-124.52.1.el10_1.x86_64.rpm	732df76713c530537f31ee47e5b26b6739a0d72db33dc81a2cd88d07a04c01c3	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-6.12.0-124.52.1.el10_1.x86_64.rpm	57bc5088fc7de96909a76a0c71b66e227446001f74476db2294cac6657667229	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-124.52.1.el10_1.x86_64.rpm	57bc5088fc7de96909a76a0c71b66e227446001f74476db2294cac6657667229	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-matched-6.12.0-124.52.1.el10_1.x86_64.rpm	ec159fcb7a819e2a12fb94f9870b295ffb256321c275804b546f7875cb85f134	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-124.52.1.el10_1.x86_64.rpm	ec159fcb7a819e2a12fb94f9870b295ffb256321c275804b546f7875cb85f134	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-6.12.0-124.52.1.el10_1.x86_64.rpm	470f17522dd900220708ca37ba2db2ea3f7863a8eab4cd78dda1b3ef0143167b	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-124.52.1.el10_1.x86_64.rpm	470f17522dd900220708ca37ba2db2ea3f7863a8eab4cd78dda1b3ef0143167b	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.52.1.el10_1.x86_64.rpm	25a4ddcfb5556012c7186baaff3c915a5a444f992d8bc93a13584f297edbcaa7	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-124.52.1.el10_1.x86_64.rpm	25a4ddcfb5556012c7186baaff3c915a5a444f992d8bc93a13584f297edbcaa7	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.52.1.el10_1.x86_64.rpm	ca99d5b660d978212e33e1b1653d3e8bf82dff6112bdb50855c380ffd7c98ec8	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-124.52.1.el10_1.x86_64.rpm	b77fba76d0a8da486b92e60a225b89e03f88e65a68e9fe6ed27c3f093310fc46	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-124.52.1.el10_1.x86_64.rpm	b77fba76d0a8da486b92e60a225b89e03f88e65a68e9fe6ed27c3f093310fc46	-	ol10_x86_64_u1_baseos_patch
	kernel-uki-virt-addons-6.12.0-124.52.1.el10_1.x86_64.rpm	b0a9508cf33331235f997bde46554b6945d99d397ed9b4538ddc2e02f0cb4670	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-124.52.1.el10_1.x86_64.rpm	b0a9508cf33331235f997bde46554b6945d99d397ed9b4538ddc2e02f0cb4670	-	ol10_x86_64_u1_baseos_patch
	libperf-6.12.0-124.52.1.el10_1.x86_64.rpm	3184201ff9e390a5ce14117a15a414ddef383e3eff046f46a29851354c7fd79a	-	ol10_x86_64_codeready_builder
	perf-6.12.0-124.52.1.el10_1.x86_64.rpm	0efad77deca16bf802948a8b26a20d89da998ca84806bf1dbaf1edb18b402838	-	ol10_x86_64_appstream
	python3-perf-6.12.0-124.52.1.el10_1.x86_64.rpm	3450d4f647052f369c06d83594816aba79f2f3f1f36c265d193fb975a63a84f7	-	ol10_x86_64_appstream
	rtla-6.12.0-124.52.1.el10_1.x86_64.rpm	e71c4ffad1da8050cfbc74dcf2110376d64c3036aafaa185707be4f884c5c723	-	ol10_x86_64_appstream
	rv-6.12.0-124.52.1.el10_1.x86_64.rpm	97723ec336a19ddfb7a0c22a40fcd207054a0d342da15ad045d79eb7bfd7bd85	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team