[El-errata] ELSA-2026-42919 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jul 28 11:06:06 UTC 2026
Oracle Linux Security Advisory ELSA-2026-42919
http://linux.oracle.com/errata/ELSA-2026-42919.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.37.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.37.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.37.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.37.1.el10_2.x86_64.rpm
libperf-6.12.0-211.37.1.el10_2.x86_64.rpm
perf-6.12.0-211.37.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.37.1.el10_2.x86_64.rpm
rtla-6.12.0-211.37.1.el10_2.x86_64.rpm
rv-6.12.0-211.37.1.el10_2.x86_64.rpm
aarch64:
kernel-cross-headers-6.12.0-211.37.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.37.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.37.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.37.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.37.1.el10_2.aarch64.rpm
libperf-6.12.0-211.37.1.el10_2.aarch64.rpm
perf-6.12.0-211.37.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.37.1.el10_2.aarch64.rpm
rtla-6.12.0-211.37.1.el10_2.aarch64.rpm
rv-6.12.0-211.37.1.el10_2.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.37.1.el10_2.src.rpm
Related CVEs:
CVE-2025-71113
CVE-2025-71147
CVE-2026-23168
CVE-2026-31530
CVE-2026-46116
CVE-2026-46150
CVE-2026-46215
CVE-2026-52950
CVE-2026-52976
CVE-2026-53009
CVE-2026-53071
Description of changes:
[6.12.0-211.37.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.37.1]
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}
[6.12.0-211.36.1]
- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
(Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}
[6.12.0-211.35.1]
- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]
More information about the El-errata
mailing list