Skip to content
OpenAdvisories
High ELSA-2026-45114 6 CVEs

Important: kernel security update (Oracle Linux 10)

Published Jul 29, 2026 · Updated Jul 29, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-211.39.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.39.1]
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]

Fixed packages 30

ReleasePackageFixed in
Oracle Linux · 10 kernel 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-abi-stablelists 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-core 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-cross-headers 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-core 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-devel 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-devel-matched 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-modules 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-modules-core 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-modules-extra 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-debug-uki-virt 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-devel 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-devel-matched 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-doc 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-headers 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-modules 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-modules-core 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-modules-extra 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-modules-extra-matched 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-tools 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-tools-libs 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-tools-libs-devel 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-uki-virt 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 kernel-uki-virt-addons 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 libperf 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 perf 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 python3-perf 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 rtla 0:6.12.0-211.39.1.el10_2
Oracle Linux · 10 rv 0:6.12.0-211.39.1.el10_2

Vulnerabilities 6

  • High 8.1
    CVE-2026-46099

    net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

    In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_core() and rpl_input() call ip6_route_input() which sets a NOREF dst on the skb, then pass it to dst_cache_set_ip6() invoking…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-52973

    futex: Drop CLONE_THREAD requirement for private default hash alloc

    In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private default hash alloc Currently need_futex_hash_allocate_default() depends on strict pthread semantics, abusing CLONE_THREAD. This breaks the non…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.3
    CVE-2026-53059

    dm log: fix out-of-bounds write due to region_count overflow

    In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns secto…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40237

    fs/notify: call exportfs_encode_fid with s_umount

    In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfs_encode_fid with s_umount Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-23110

    scsi: core: Wake up the error handler when final completions race against each other

    In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed so that the error handler only wakes whe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31692

    rtnetlink: add missing netlink_ns_capable() check for peer netns

    In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan,…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux