ELSA-2026-95367

ELSA-2026-95367 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-11-05

Description


[6.12.0-211.74.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.74.1]
- sunrpc: wait for in-flight TLS handshake callback when cancel loses race (Olga Kornievskaia) [RHEL-283649] {CVE-2026-72221}
- sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (Olga Kornievskaia) [RHEL-283263] {CVE-2026-72222}
- fs/resctrl: Fix use-after-free during unmount (Dennis Chen) [RHEL-296708] {CVE-2026-72080}
- xfs: fix exchange-range-to-eof file size exchange (Carlos Maiolino) [RHEL-292986] {CVE-2026-98974}
- xfs: stop exchanging reflink flags when exchanging mappings (Carlos Maiolino) [RHEL-292986] {CVE-2026-98974}
- sctp: clear new_transport when removing a peer (CKI Backport Bot) [RHEL-275369] {CVE-2026-74586}
- writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (Ian Kent) [RHEL-260509] {CVE-2026-64378}
- openvswitch: Fix CT limit teardown use-after-free (Timothy Redaelli) [RHEL-263515] {CVE-2026-89488}
- PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (Aristeu Rozanski) [RHEL-267082] {CVE-2026-90315}


Related CVEs


CVE-2026-64378
CVE-2026-72080
CVE-2026-72221
CVE-2026-72222
CVE-2026-74586
CVE-2026-89488
CVE-2026-90315
CVE-2026-98974

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_aarch64_appstream
kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_aarch64_baseos_latest
kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_aarch64_codeready_builder
kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_aarch64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.74.1.el10_2.aarch64.rpmcd55180a96aa3e368451fbfc4b017e3cae694d563af1abba329e01d558136b71-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-211.74.1.el10_2.aarch64.rpm5615b373223813f72a749f018870b311c1c6fd959311e3196426850533bba3a5-ol10_aarch64_appstream
kernel-tools-6.12.0-211.74.1.el10_2.aarch64.rpm47df3c583bd69c5facf85addc31c86714a5701ebd0b3f2f5063cafbfeef0b03f-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-211.74.1.el10_2.aarch64.rpm47df3c583bd69c5facf85addc31c86714a5701ebd0b3f2f5063cafbfeef0b03f-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.74.1.el10_2.aarch64.rpm3588479403c5ed8d3fbadc3a98a65bccf35e077e9de5cd9ba0135f854f83a7fc-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-211.74.1.el10_2.aarch64.rpm3588479403c5ed8d3fbadc3a98a65bccf35e077e9de5cd9ba0135f854f83a7fc-ol10_aarch64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.74.1.el10_2.aarch64.rpmfcf75a06170136b62d8873afbe423a86efd1c2ebec76710c04776840192e5dba-ol10_aarch64_codeready_builder
libperf-6.12.0-211.74.1.el10_2.aarch64.rpmb90b3d0ec67a1123b61606e639e48c70b7a4fc75f3442baaa2a89441923d9b71-ol10_aarch64_codeready_builder
perf-6.12.0-211.74.1.el10_2.aarch64.rpma15df763417e18eb5bda4ee1cba2975621fc6b213178408bd493664b0b02f4cc-ol10_aarch64_appstream
python3-perf-6.12.0-211.74.1.el10_2.aarch64.rpme8cb7e9598c706e74defbbad7229433b18bd820f3070a760a68c1f4935131e17-ol10_aarch64_appstream
rtla-6.12.0-211.74.1.el10_2.aarch64.rpm696bf8172314c0de7edbd9ed78886982ba2d87126d629b7fb2574a9ab419b44e-ol10_aarch64_appstream
rv-6.12.0-211.74.1.el10_2.aarch64.rpme9b15f77ed842b0b621a305ff29855041cabe4096ba42f23a3c3024da29a5469-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_x86_64_appstream
kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_x86_64_baseos_latest
kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_x86_64_codeready_builder
kernel-6.12.0-211.74.1.el10_2.src.rpm46d82ab6032a63b52dc2b60a741bd79887adf3784ed8fabab119c31732cbc569-ol10_x86_64_u2_baseos_patch
kernel-6.12.0-211.74.1.el10_2.x86_64.rpmb552cad6f5f88213f723a777c21ed5e4d1bb986886cea0dd4fc8abe24a89e573-ol10_x86_64_baseos_latest
kernel-6.12.0-211.74.1.el10_2.x86_64.rpmb552cad6f5f88213f723a777c21ed5e4d1bb986886cea0dd4fc8abe24a89e573-ol10_x86_64_u2_baseos_patch
kernel-abi-stablelists-6.12.0-211.74.1.el10_2.noarch.rpm5027a5a1400244e2c30b54eb18127ada20276a1107cf76425dcd21672252e46f-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-211.74.1.el10_2.noarch.rpm5027a5a1400244e2c30b54eb18127ada20276a1107cf76425dcd21672252e46f-ol10_x86_64_u2_baseos_patch
kernel-core-6.12.0-211.74.1.el10_2.x86_64.rpm785efff633705a74705c726bb80a105c20da5e24cad48382343d51c55823c571-ol10_x86_64_baseos_latest
kernel-core-6.12.0-211.74.1.el10_2.x86_64.rpm785efff633705a74705c726bb80a105c20da5e24cad48382343d51c55823c571-ol10_x86_64_u2_baseos_patch
kernel-cross-headers-6.12.0-211.74.1.el10_2.x86_64.rpm2d02e0761ba20cdc16e265aa9107788a28c59c5a5e06a8466dac7194872d9582-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-211.74.1.el10_2.x86_64.rpmd80af03e4fd977a490426ea64c5b67e237ebf0e3626bbde04402ad46cf3537ac-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-211.74.1.el10_2.x86_64.rpmd80af03e4fd977a490426ea64c5b67e237ebf0e3626bbde04402ad46cf3537ac-ol10_x86_64_u2_baseos_patch
kernel-debug-core-6.12.0-211.74.1.el10_2.x86_64.rpmdd862268c730a31e83f80b599a2271f731cffe1774ae8323c2640edc948c619b-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-211.74.1.el10_2.x86_64.rpmdd862268c730a31e83f80b599a2271f731cffe1774ae8323c2640edc948c619b-ol10_x86_64_u2_baseos_patch
kernel-debug-devel-6.12.0-211.74.1.el10_2.x86_64.rpmdcf773e0884c59aa5c3af99eaa9590302aea8fdd7ea8cfd7bad3466df362aec9-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-211.74.1.el10_2.x86_64.rpm176edc6f03fbace7a16202cd9ea819eefd770b4e486263e02b96621977d26e0b-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-211.74.1.el10_2.x86_64.rpma8bbe9f7309ee711bd623ae1cfa4d79c091c592a6882b5471e6f1fb4e24ef34b-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-211.74.1.el10_2.x86_64.rpma8bbe9f7309ee711bd623ae1cfa4d79c091c592a6882b5471e6f1fb4e24ef34b-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-core-6.12.0-211.74.1.el10_2.x86_64.rpmf633a9584b34a8f8286b868ca4482ad1128608bd7050f6b39edb00471710aeef-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-211.74.1.el10_2.x86_64.rpmf633a9584b34a8f8286b868ca4482ad1128608bd7050f6b39edb00471710aeef-ol10_x86_64_u2_baseos_patch
kernel-debug-modules-extra-6.12.0-211.74.1.el10_2.x86_64.rpmbb36958f40ae2be95186f66bc7e0535fcc896cee596edb7f63fca33803c73b77-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-211.74.1.el10_2.x86_64.rpmbb36958f40ae2be95186f66bc7e0535fcc896cee596edb7f63fca33803c73b77-ol10_x86_64_u2_baseos_patch
kernel-debug-uki-virt-6.12.0-211.74.1.el10_2.x86_64.rpm4321c784420ffe565ee7f24b4f8c7e852e90603da313a702bbcbe10782a14894-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-211.74.1.el10_2.x86_64.rpm4321c784420ffe565ee7f24b4f8c7e852e90603da313a702bbcbe10782a14894-ol10_x86_64_u2_baseos_patch
kernel-devel-6.12.0-211.74.1.el10_2.x86_64.rpm30411ddb1acca676e53d7f2397fb3d0cf89db7224f351b1e7b5fd7bb7550b360-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-211.74.1.el10_2.x86_64.rpm8a683afb3c50afa331c4b59347a80ca1076a47b55fcf032ff8c697759b6ae477-ol10_x86_64_appstream
kernel-doc-6.12.0-211.74.1.el10_2.noarch.rpmba1498bec1906675b3caae292c8d0c5824dde8b3fee6babc7e63a06cb3f8f303-ol10_x86_64_appstream
kernel-headers-6.12.0-211.74.1.el10_2.x86_64.rpm8b39e204f203bcc4fcc64cb27b3b78da253ac60256cb6e3211c0f47f3d3c5303-ol10_x86_64_appstream
kernel-modules-6.12.0-211.74.1.el10_2.x86_64.rpm5f608f99a880d04aa5e21eb5346f6636bb5705b6269e1b7f0b4d4af6a6d8c25a-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-211.74.1.el10_2.x86_64.rpm5f608f99a880d04aa5e21eb5346f6636bb5705b6269e1b7f0b4d4af6a6d8c25a-ol10_x86_64_u2_baseos_patch
kernel-modules-core-6.12.0-211.74.1.el10_2.x86_64.rpm06395e05ddd311d7c0f0aaa2ce2e7c57fcd338dd887165a24d8ba0c262448389-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-211.74.1.el10_2.x86_64.rpm06395e05ddd311d7c0f0aaa2ce2e7c57fcd338dd887165a24d8ba0c262448389-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-6.12.0-211.74.1.el10_2.x86_64.rpmc6228372d0399af6367462acd902eb18a8425ef4f2699294a00b4426254e8465-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-211.74.1.el10_2.x86_64.rpmc6228372d0399af6367462acd902eb18a8425ef4f2699294a00b4426254e8465-ol10_x86_64_u2_baseos_patch
kernel-modules-extra-matched-6.12.0-211.74.1.el10_2.x86_64.rpm79ebc7e2c7b1b49f9756b171b020662fc933f9a4b85819f68d5c9161559a0685-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-211.74.1.el10_2.x86_64.rpm79ebc7e2c7b1b49f9756b171b020662fc933f9a4b85819f68d5c9161559a0685-ol10_x86_64_u2_baseos_patch
kernel-tools-6.12.0-211.74.1.el10_2.x86_64.rpm212f7d7fab69112104c6de139c0d52ca984498b7f173a44b3791c70dd5797b2d-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-211.74.1.el10_2.x86_64.rpm212f7d7fab69112104c6de139c0d52ca984498b7f173a44b3791c70dd5797b2d-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-6.12.0-211.74.1.el10_2.x86_64.rpm707819681a19a1a4fc7a115b7b0fa272d2cc75345608c8d76b950443e10c42af-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-211.74.1.el10_2.x86_64.rpm707819681a19a1a4fc7a115b7b0fa272d2cc75345608c8d76b950443e10c42af-ol10_x86_64_u2_baseos_patch
kernel-tools-libs-devel-6.12.0-211.74.1.el10_2.x86_64.rpmfc951b838ae57cc61872e6158edab1c1ba6f284a93848e1367980b229b946e41-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-211.74.1.el10_2.x86_64.rpm0e388673fd22cef63afc10afb65ffd8f55af283534cd5cc5ce0cabaad635fb55-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-211.74.1.el10_2.x86_64.rpm0e388673fd22cef63afc10afb65ffd8f55af283534cd5cc5ce0cabaad635fb55-ol10_x86_64_u2_baseos_patch
kernel-uki-virt-addons-6.12.0-211.74.1.el10_2.x86_64.rpm224d9d1d6c18696a1e3fb476e52a79c05334da374fa94861a0e77e7ff4bf6af8-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-211.74.1.el10_2.x86_64.rpm224d9d1d6c18696a1e3fb476e52a79c05334da374fa94861a0e77e7ff4bf6af8-ol10_x86_64_u2_baseos_patch
libperf-6.12.0-211.74.1.el10_2.x86_64.rpmba4ff890fcde09153738067e349c253349618153e9f3c4876bf3d54e4235b433-ol10_x86_64_codeready_builder
perf-6.12.0-211.74.1.el10_2.x86_64.rpma8f24d52a335d77c897c79287ed93b8357127fa1ec64d7a5b67dfb2038c4c11a-ol10_x86_64_appstream
python3-perf-6.12.0-211.74.1.el10_2.x86_64.rpm3bd1918ee304847d748aacb45f3400e6d77cb8f8d57b02835007c76255a6eba7-ol10_x86_64_appstream
rtla-6.12.0-211.74.1.el10_2.x86_64.rpm547e8b3a3369b7e2f17cffd940c0e498bbd2d07ffcb1d28f05ba711c065e0b78-ol10_x86_64_appstream
rv-6.12.0-211.74.1.el10_2.x86_64.rpm40dbc2dcc5958a94188ccefc549004d302b9231b718bf3cb7356ea2c704caec5-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete