[El-errata] ELSA-2026-57251 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update

Fri Aug 21 15:01:38 UTC 2026

Oracle Linux Security Advisory ELSA-2026-57251

http://linux.oracle.com/errata/ELSA-2026-57251.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.49.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.49.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.49.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.49.1.el10_2.x86_64.rpm
libperf-6.12.0-211.49.1.el10_2.x86_64.rpm
perf-6.12.0-211.49.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.49.1.el10_2.x86_64.rpm
rtla-6.12.0-211.49.1.el10_2.x86_64.rpm
rv-6.12.0-211.49.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.49.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.49.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.49.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.49.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.49.1.el10_2.aarch64.rpm
libperf-6.12.0-211.49.1.el10_2.aarch64.rpm
perf-6.12.0-211.49.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.49.1.el10_2.aarch64.rpm
rtla-6.12.0-211.49.1.el10_2.aarch64.rpm
rv-6.12.0-211.49.1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.49.1.el10_2.src.rpm

Related CVEs:

CVE-2026-43206
CVE-2026-43237
CVE-2026-43493
CVE-2026-45878
CVE-2026-45991
CVE-2026-46185
CVE-2026-52991
CVE-2026-53136
CVE-2026-53143
CVE-2026-53329
CVE-2026-53356
CVE-2026-53374
CVE-2026-63879
CVE-2026-63884
CVE-2026-63886
CVE-2026-63888
CVE-2026-63952
CVE-2026-64017
CVE-2026-64219
CVE-2026-64379
CVE-2026-64382
CVE-2026-64386
CVE-2026-64560
CVE-2026-68388

Description of changes:

[6.12.0-211.49.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.49.1]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}

[6.12.0-211.48.1]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]