Skip to content
OpenAdvisories
Medium ELSA-2026-6053 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

Published Mar 30, 2026 · Updated Mar 30, 2026

Summary

[6.12.0-124.47.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.47.1]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]

[6.12.0-124.46.1]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}

Fixed packages 30

ReleasePackageFixed in
Oracle Linux · 10 kernel 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-abi-stablelists 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-core 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-cross-headers 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-core 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-devel 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-devel-matched 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-modules 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-modules-core 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-modules-extra 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-debug-uki-virt 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-devel 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-devel-matched 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-doc 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-headers 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-modules 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-modules-core 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-modules-extra 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-modules-extra-matched 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-tools 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-tools-libs 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-tools-libs-devel 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-uki-virt 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 kernel-uki-virt-addons 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 libperf 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 perf 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 python3-perf 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 rtla 0:6.12.0-124.47.1.el10_1
Oracle Linux · 10 rv 0:6.12.0-124.47.1.el10_1

Vulnerabilities 2

  • High 7.8
    CVE-2026-23231 Public exploit

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in nft_chain_add()) before registering hook…

  • Unscored —

    scsi: qla2xxx: Fix bsg_done() causing double free

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: superv…