ELSA-2026-93413
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-93413
ELSA-2026-93413 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-11-02 |
Description
[6.12.0-211.72.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.72.1]
- ipv4: free inet_opt and ireq_opt after an RCU grace period (CKI Backport Bot) [RHEL-295608] {CVE-2026-98432}
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-230757] {CVE-2026-46174}
- selftests: netfilter: use KHDR_INCLUDES in CFLAGS (CKI Backport Bot) [RHEL-291348]
- netfilter: conntrack: make filtering by zone discoverable (CKI Backport Bot) [RHEL-291348]
- selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo (CKI Backport Bot) [RHEL-291348]
- netlink: specs: fix the conntrack filter type (CKI Backport Bot) [RHEL-291348]
- netfilter: report NLM_F_DUMP_FILTERED when all is filtered out (CKI Backport Bot) [RHEL-291348]
- xfrm: hold net_device reference under RCU in bundle creation (Abhishek Rawal) [RHEL-277962] {CVE-2026-98364}
- tipc: require net admin for TIPCv2 netlink mutators (CKI Backport Bot) [RHEL-273184] {CVE-2026-74283}
- entry: Fix seccomp bypass after ptrace with TSYNC (Audra Mitchell) [RHEL-271405] {CVE-2026-89603}
- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (Abhishek Rawal) [RHEL-248847] {CVE-2026-68398}
- net: sock: fix hardened usercopy panic in sock_recv_errqueue (CKI Backport Bot) [RHEL-189611] {CVE-2026-22977}
[6.12.0-211.71.1]
- nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() (Maurizio Lombardi) [RHEL-290598] {CVE-2026-98725}
- net: skbuff: propagate shared-frag marker in skb_zerocopy() (Xin Long) [RHEL-291156]
- smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-278330] {CVE-2026-93787}
[6.12.0-211.70.1]
- scsi: target: iscsi: Reserve a terminator byte for the login payload (CKI Backport Bot) [RHEL-285628] {CVE-2026-90011}
- virtio-fs: avoid double-free on failed queue setup (CKI Backport Bot) [RHEL-278134] {CVE-2026-93827}
- KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279482] {CVE-2026-98222}
- mptcp: options: reset DSS fields in case of unexpected size (Prasenjit Mukherjee) [RHEL-250579] {CVE-2026-80586}
- mptcp: pm: userspace: fix use-after-free in get_local_id (Prasenjit Mukherjee) [RHEL-236704] {CVE-2026-68169}
- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (Rahul Kumar) [RHEL-270935] {CVE-2026-89932}
- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (Rahul Kumar) [RHEL-270935] {CVE-2026-89932}
- KVM: nVMX: Always flush vpid02 on first use (Rahul Kumar) [RHEL-270935] {CVE-2026-89932}
- arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-270721]
- ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-270721]
- ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-270702]
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_aarch64_appstream |
| kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_aarch64_baseos_latest | |
| kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_aarch64_codeready_builder | |
| kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_aarch64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.72.1.el10_2.aarch64.rpm | 8804816948a016bc7790d3517b8680664416a363283dfbd9ae050094a5a091e0 | - | ol10_aarch64_codeready_builder | |
| kernel-headers-6.12.0-211.72.1.el10_2.aarch64.rpm | ee41d48f91c558278060014bb61b85e01f820a475265b6ffa09dd33501ed42a0 | - | ol10_aarch64_appstream | |
| kernel-tools-6.12.0-211.72.1.el10_2.aarch64.rpm | 4fcb754ee8592b3181b933efdd62a9a26b510e6a8ae0acd0ad52476783db3cde | - | ol10_aarch64_baseos_latest | |
| kernel-tools-6.12.0-211.72.1.el10_2.aarch64.rpm | 4fcb754ee8592b3181b933efdd62a9a26b510e6a8ae0acd0ad52476783db3cde | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.72.1.el10_2.aarch64.rpm | 9ec3317e31bf0dc44a7491ed3fcc2cd182f86df3cb53dd8c539b2ba0c371f895 | - | ol10_aarch64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.72.1.el10_2.aarch64.rpm | 9ec3317e31bf0dc44a7491ed3fcc2cd182f86df3cb53dd8c539b2ba0c371f895 | - | ol10_aarch64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.72.1.el10_2.aarch64.rpm | 4564e436cdb848ac803e854eccde89b8538e5ff1aeabfa3a4ab0994c5308836d | - | ol10_aarch64_codeready_builder | |
| libperf-6.12.0-211.72.1.el10_2.aarch64.rpm | 15f23cb18209a28cbe8325a54461f5c1c310efdd7454930bbfcdbe8c1ad01aed | - | ol10_aarch64_codeready_builder | |
| perf-6.12.0-211.72.1.el10_2.aarch64.rpm | 60f2c155c361aa2109c712ee324958bb0839a568d01a6ee12cec69e8c01ef699 | - | ol10_aarch64_appstream | |
| python3-perf-6.12.0-211.72.1.el10_2.aarch64.rpm | a707abda8fef3bb5298b7fed6f05704afad4d6403c714e6352b98286df851b3d | - | ol10_aarch64_appstream | |
| rtla-6.12.0-211.72.1.el10_2.aarch64.rpm | ae5791a39674299704aa4ee1263c015623cac143ee655893f15343f111d78a17 | - | ol10_aarch64_appstream | |
| rv-6.12.0-211.72.1.el10_2.aarch64.rpm | ee5775ab3dca2b5bd48d7559e48734629ed4392815d0290566eadb58647ddb97 | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_x86_64_appstream |
| kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_x86_64_codeready_builder | |
| kernel-6.12.0-211.72.1.el10_2.src.rpm | b60c4bca2ccd078fccdb6f3ffd541bee29df86c10c3ea570d0925871a494e4ad | - | ol10_x86_64_u2_baseos_patch | |
| kernel-6.12.0-211.72.1.el10_2.x86_64.rpm | 48c7dc4351d2dacaa916b5251071d4438e2f52db1e0e80edd52b2367b8937ca1 | - | ol10_x86_64_baseos_latest | |
| kernel-6.12.0-211.72.1.el10_2.x86_64.rpm | 48c7dc4351d2dacaa916b5251071d4438e2f52db1e0e80edd52b2367b8937ca1 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-abi-stablelists-6.12.0-211.72.1.el10_2.noarch.rpm | f33fa4daeaba0e81b1fc681546bbd3671203fb95d0c88e5649f478ba3b6fd1a2 | - | ol10_x86_64_baseos_latest | |
| kernel-abi-stablelists-6.12.0-211.72.1.el10_2.noarch.rpm | f33fa4daeaba0e81b1fc681546bbd3671203fb95d0c88e5649f478ba3b6fd1a2 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 0b2fb1f59f40ca851c1aeb37ae80f327c61e014033e86fc0b4f9d5eee330b49f | - | ol10_x86_64_baseos_latest | |
| kernel-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 0b2fb1f59f40ca851c1aeb37ae80f327c61e014033e86fc0b4f9d5eee330b49f | - | ol10_x86_64_u2_baseos_patch | |
| kernel-cross-headers-6.12.0-211.72.1.el10_2.x86_64.rpm | 97b96ee2c1a07ac9df80028fdbf5513b0871760769dd6cbb564eb655404af747 | - | ol10_x86_64_codeready_builder | |
| kernel-debug-6.12.0-211.72.1.el10_2.x86_64.rpm | 721d378ea8291537642adefd91c7d6ee2002ac6a5715f195f4724ab4c6fe7232 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-6.12.0-211.72.1.el10_2.x86_64.rpm | 721d378ea8291537642adefd91c7d6ee2002ac6a5715f195f4724ab4c6fe7232 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 7034a91eafe707cbc0bff84f460a7e346c42b4f3a6987761973cfbc334bce3a1 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 7034a91eafe707cbc0bff84f460a7e346c42b4f3a6987761973cfbc334bce3a1 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-devel-6.12.0-211.72.1.el10_2.x86_64.rpm | 54292bbd68f15532963bc3c716e399485caf544b71d6da6aade69489750f472a | - | ol10_x86_64_appstream | |
| kernel-debug-devel-matched-6.12.0-211.72.1.el10_2.x86_64.rpm | 5a3b9a67e592a86f61af9c1ee120524dce9daf2727cd64cf30b9f3d3682bb532 | - | ol10_x86_64_appstream | |
| kernel-debug-modules-6.12.0-211.72.1.el10_2.x86_64.rpm | 1b054a1719c7253de3146d191453a4a5234671a6c54db3f790feba789522477e | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-6.12.0-211.72.1.el10_2.x86_64.rpm | 1b054a1719c7253de3146d191453a4a5234671a6c54db3f790feba789522477e | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 6b19ecee0f0cd7545fd17e2673d752daca3096784f5ba5a6713f12aed745ad17 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 6b19ecee0f0cd7545fd17e2673d752daca3096784f5ba5a6713f12aed745ad17 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-modules-extra-6.12.0-211.72.1.el10_2.x86_64.rpm | 09c5d1db007ed5225fbbd9720ee199c517621452e379dcddf12e41a6120b9a17 | - | ol10_x86_64_baseos_latest | |
| kernel-debug-modules-extra-6.12.0-211.72.1.el10_2.x86_64.rpm | 09c5d1db007ed5225fbbd9720ee199c517621452e379dcddf12e41a6120b9a17 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-debug-uki-virt-6.12.0-211.72.1.el10_2.x86_64.rpm | 8f03e6896c774e07b1c47de6138cc40cebcbab68745b85f0d8425148568cb96b | - | ol10_x86_64_baseos_latest | |
| kernel-debug-uki-virt-6.12.0-211.72.1.el10_2.x86_64.rpm | 8f03e6896c774e07b1c47de6138cc40cebcbab68745b85f0d8425148568cb96b | - | ol10_x86_64_u2_baseos_patch | |
| kernel-devel-6.12.0-211.72.1.el10_2.x86_64.rpm | 50e8111c5e949da9df21b0632ccc647fa917ef4b0ce45c9e8a133873578caf5d | - | ol10_x86_64_appstream | |
| kernel-devel-matched-6.12.0-211.72.1.el10_2.x86_64.rpm | dab730abdae175c6cb2bbc51e1c9bb5ff698c5706640273ad2c6059025e03255 | - | ol10_x86_64_appstream | |
| kernel-doc-6.12.0-211.72.1.el10_2.noarch.rpm | 7432da1d3c0f8eb7e6d113cf167972c9f6e03c591a89f58441ea13990e38e53e | - | ol10_x86_64_appstream | |
| kernel-headers-6.12.0-211.72.1.el10_2.x86_64.rpm | aee6ca7bb13e4e717367298b711e6c1783b494de7a9f41654f6fcd4aa53b5f9d | - | ol10_x86_64_appstream | |
| kernel-modules-6.12.0-211.72.1.el10_2.x86_64.rpm | 69369e04e16ad50f1a454ee3f71277a07aa045678f1d9711ff570bc57542560e | - | ol10_x86_64_baseos_latest | |
| kernel-modules-6.12.0-211.72.1.el10_2.x86_64.rpm | 69369e04e16ad50f1a454ee3f71277a07aa045678f1d9711ff570bc57542560e | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 5ab239dad9769b1a356ffb39f16645865f246efeca628fe026b9b2c03280cadf | - | ol10_x86_64_baseos_latest | |
| kernel-modules-core-6.12.0-211.72.1.el10_2.x86_64.rpm | 5ab239dad9769b1a356ffb39f16645865f246efeca628fe026b9b2c03280cadf | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-6.12.0-211.72.1.el10_2.x86_64.rpm | be0111ef59bf5bed25a5eb985851cc209c04951ac851b8d04a7cf4088b9a3a54 | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-6.12.0-211.72.1.el10_2.x86_64.rpm | be0111ef59bf5bed25a5eb985851cc209c04951ac851b8d04a7cf4088b9a3a54 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-modules-extra-matched-6.12.0-211.72.1.el10_2.x86_64.rpm | 22d5580c298faee697fdf9481c83ab0755061d5b0a707d0576d0c320d75cdc1b | - | ol10_x86_64_baseos_latest | |
| kernel-modules-extra-matched-6.12.0-211.72.1.el10_2.x86_64.rpm | 22d5580c298faee697fdf9481c83ab0755061d5b0a707d0576d0c320d75cdc1b | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-6.12.0-211.72.1.el10_2.x86_64.rpm | 74c8d057fd92313f072bf9f4788a70fb0a993944f53e6579451eb2259f31be06 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-6.12.0-211.72.1.el10_2.x86_64.rpm | 74c8d057fd92313f072bf9f4788a70fb0a993944f53e6579451eb2259f31be06 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-6.12.0-211.72.1.el10_2.x86_64.rpm | ecc7e419a5ef8b1c0ad7ff431680c4852a884ec8a180dfc561b866ce228c8950 | - | ol10_x86_64_baseos_latest | |
| kernel-tools-libs-6.12.0-211.72.1.el10_2.x86_64.rpm | ecc7e419a5ef8b1c0ad7ff431680c4852a884ec8a180dfc561b866ce228c8950 | - | ol10_x86_64_u2_baseos_patch | |
| kernel-tools-libs-devel-6.12.0-211.72.1.el10_2.x86_64.rpm | ef0bfc802353cfedd56d1e05b772115c33612fe1e381b6def95406d9484e1889 | - | ol10_x86_64_codeready_builder | |
| kernel-uki-virt-6.12.0-211.72.1.el10_2.x86_64.rpm | b8ed16a92874bf94a364479610b983264e368e7372d7dd01a3d0b71e55c3c49c | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-6.12.0-211.72.1.el10_2.x86_64.rpm | b8ed16a92874bf94a364479610b983264e368e7372d7dd01a3d0b71e55c3c49c | - | ol10_x86_64_u2_baseos_patch | |
| kernel-uki-virt-addons-6.12.0-211.72.1.el10_2.x86_64.rpm | dcc268309ed050038670233a0f2ef41ea6b338423efbf62418f455870a5f024b | - | ol10_x86_64_baseos_latest | |
| kernel-uki-virt-addons-6.12.0-211.72.1.el10_2.x86_64.rpm | dcc268309ed050038670233a0f2ef41ea6b338423efbf62418f455870a5f024b | - | ol10_x86_64_u2_baseos_patch | |
| libperf-6.12.0-211.72.1.el10_2.x86_64.rpm | 0eceaad06b6ae45214b2b6d793d030fa4a03419045e910a23d22d18d234f00d3 | - | ol10_x86_64_codeready_builder | |
| perf-6.12.0-211.72.1.el10_2.x86_64.rpm | 9054f31d746384f23a0baa443149aad62f11c3957cc9bd2e9cb7e44accdfd02d | - | ol10_x86_64_appstream | |
| python3-perf-6.12.0-211.72.1.el10_2.x86_64.rpm | 345c410979a443271c312020e7fa330ef05baaccc1a3718c2a59fcf6550070d4 | - | ol10_x86_64_appstream | |
| rtla-6.12.0-211.72.1.el10_2.x86_64.rpm | 22de17ee2113a561f911d192c7696e66c338d07bf451b7a5e92033edfced02d7 | - | ol10_x86_64_appstream | |
| rv-6.12.0-211.72.1.el10_2.x86_64.rpm | c719c8a7812b6256ffb5b0125bb8310cfd08f8c386172837b95a3081ee7da9a4 | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
