[El-errata] ELSA-2026-61887-0 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Thu Sep 3 23:31:59 UTC 2026
Oracle Linux Security Advisory ELSA-2026-61887-0
http://linux.oracle.com/errata/ELSA-2026-61887-0.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.50.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.50.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.50.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.50.1.el10_2.x86_64.rpm
libperf-6.12.0-211.50.1.el10_2.x86_64.rpm
perf-6.12.0-211.50.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.50.1.el10_2.x86_64.rpm
rtla-6.12.0-211.50.1.el10_2.x86_64.rpm
rv-6.12.0-211.50.1.el10_2.x86_64.rpm
aarch64:
kernel-cross-headers-6.12.0-211.50.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.50.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.50.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.50.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.50.1.el10_2.aarch64.rpm
libperf-6.12.0-211.50.1.el10_2.aarch64.rpm
perf-6.12.0-211.50.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.50.1.el10_2.aarch64.rpm
rtla-6.12.0-211.50.1.el10_2.aarch64.rpm
rv-6.12.0-211.50.1.el10_2.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.50.1.el10_2.src.rpm
Related CVEs:
CVE-2025-21834
CVE-2026-23003
CVE-2026-43450
CVE-2026-43454
CVE-2026-45970
CVE-2026-46120
CVE-2026-53026
CVE-2026-53053
CVE-2026-53153
CVE-2026-53185
CVE-2026-53189
CVE-2026-53196
CVE-2026-53391
CVE-2026-53392
CVE-2026-53397
CVE-2026-53399
CVE-2026-63800
CVE-2026-64018
CVE-2026-64136
CVE-2026-64189
CVE-2026-64276
CVE-2026-64277
CVE-2026-64298
CVE-2026-64304
CVE-2026-64320
CVE-2026-64384
CVE-2026-64418
CVE-2026-64438
CVE-2026-64490
CVE-2026-68086
CVE-2026-68166
CVE-2026-68480
CVE-2026-72069
CVE-2026-72130
Description of changes:
[6.12.0-211.50.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.50.1]
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}
More information about the El-errata
mailing list