Skip to content
OpenAdvisories
High ELSA-2026-53330 7 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

Published Aug 11, 2026 · Updated Aug 11, 2026

Ecosystem: Oracle Linux

Summary

[6.12.0-211.46.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.46.1]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}

[6.12.0-211.45.1]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}

Fixed packages 30

ReleasePackageFixed in
Oracle Linux · 10 kernel 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-abi-stablelists 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-core 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-cross-headers 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-core 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-devel 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-devel-matched 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-modules 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-modules-core 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-modules-extra 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-debug-uki-virt 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-devel 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-devel-matched 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-doc 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-headers 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-modules 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-modules-core 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-modules-extra 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-modules-extra-matched 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-tools 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-tools-libs 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-tools-libs-devel 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-uki-virt 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 kernel-uki-virt-addons 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 libperf 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 perf 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 python3-perf 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 rtla 0:6.12.0-211.46.1.el10_2
Oracle Linux · 10 rv 0:6.12.0-211.46.1.el10_2

Vulnerabilities 7

  • High 8.2
    CVE-2025-71072

    shmem: fix recovery on rename failures

    In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are seriously short on memory; simple_offset_rename() does not recover well if it runs into that. The same goes for…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2026-64368

    mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

    In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation is requested, for kmalloc() we generally have to zero the full object size even if…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53143

    fsnotify: Fix ordering of iput() and watched_objects decrement

    In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not allowed unless we ensur…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23415 Public exploit

    futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

    In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculative mmap lock and RCU. Concurrently, mbi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-31488

    drm/amd/display: Do not skip unrelated mode changes in DSC validation

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in atomic check"), amdgpu resets the CRTC sta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-52923 Public exploit

    ipc: limit next_id allocation to the valid ID range

    In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64531 Public exploit

    net: openvswitch: reject oversized nested action attrs

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux