Skip to content
OpenAdvisories
Medium ELSA-2026-4723 1 CVE

Moderate: kernel security update (Oracle Linux 10)

Published Mar 17, 2026 · Updated Mar 17, 2026

Summary

[6.12.0-124.45.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.45.1]
- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}

[6.12.0-124.44.1]
- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]

Fixed packages 30

ReleasePackageFixed in
Oracle Linux · 10 kernel 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-abi-stablelists 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-core 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-cross-headers 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-core 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-devel 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-devel-matched 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-modules 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-modules-core 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-modules-extra 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-debug-uki-virt 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-devel 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-devel-matched 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-doc 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-headers 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-modules 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-modules-core 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-modules-extra 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-modules-extra-matched 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-tools 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-tools-libs 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-tools-libs-devel 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-uki-virt 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 kernel-uki-virt-addons 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 libperf 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 perf 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 python3-perf 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 rtla 0:6.12.0-124.45.1.el10_1
Oracle Linux · 10 rv 0:6.12.0-124.45.1.el10_1

Vulnerabilities 1

  • High 7.8
    CVE-2026-23010 Public exploit

    ipv6: Fix use-after-free in inet6_addr_del().

    In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6_addr_del(). syzbot reported use-after-free of inet6_ifaddr in inet6_addr_del(). [0] The cited commit accidentally moved ipv6_del_addr() for mngtmpaddr before…