Описание
ELSA-2026-49211: kernel security, bug fix, and enhancement update (IMPORTANT)
[6.12.0-211.42.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
[6.12.0-211.42.1]
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}
[6.12.0-211.41.1]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
kernel-cross-headers
6.12.0-211.42.1.el10_2
kernel-headers
6.12.0-211.42.1.el10_2
kernel-tools
6.12.0-211.42.1.el10_2
kernel-tools-libs
6.12.0-211.42.1.el10_2
kernel-tools-libs-devel
6.12.0-211.42.1.el10_2
libperf
6.12.0-211.42.1.el10_2
perf
6.12.0-211.42.1.el10_2
python3-perf
6.12.0-211.42.1.el10_2
rtla
6.12.0-211.42.1.el10_2
rv
6.12.0-211.42.1.el10_2
Oracle Linux x86_64
kernel
6.12.0-211.42.1.el10_2
kernel-abi-stablelists
6.12.0-211.42.1.el10_2
kernel-core
6.12.0-211.42.1.el10_2
kernel-cross-headers
6.12.0-211.42.1.el10_2
kernel-debug
6.12.0-211.42.1.el10_2
kernel-debug-core
6.12.0-211.42.1.el10_2
kernel-debug-devel
6.12.0-211.42.1.el10_2
kernel-debug-devel-matched
6.12.0-211.42.1.el10_2
kernel-debug-modules
6.12.0-211.42.1.el10_2
kernel-debug-modules-core
6.12.0-211.42.1.el10_2
kernel-debug-modules-extra
6.12.0-211.42.1.el10_2
kernel-debug-uki-virt
6.12.0-211.42.1.el10_2
kernel-devel
6.12.0-211.42.1.el10_2
kernel-devel-matched
6.12.0-211.42.1.el10_2
kernel-doc
6.12.0-211.42.1.el10_2
kernel-headers
6.12.0-211.42.1.el10_2
kernel-modules
6.12.0-211.42.1.el10_2
kernel-modules-core
6.12.0-211.42.1.el10_2
kernel-modules-extra
6.12.0-211.42.1.el10_2
kernel-modules-extra-matched
6.12.0-211.42.1.el10_2
kernel-tools
6.12.0-211.42.1.el10_2
kernel-tools-libs
6.12.0-211.42.1.el10_2
kernel-tools-libs-devel
6.12.0-211.42.1.el10_2
kernel-uki-virt
6.12.0-211.42.1.el10_2
kernel-uki-virt-addons
6.12.0-211.42.1.el10_2
libperf
6.12.0-211.42.1.el10_2
perf
6.12.0-211.42.1.el10_2
python3-perf
6.12.0-211.42.1.el10_2
rtla
6.12.0-211.42.1.el10_2
rv
6.12.0-211.42.1.el10_2
Связанные CVE
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRITE, MAP_NORE...
In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRITE, MAP_NORE...
In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRI
ksm: use range-walk function to jump over holes in scan_get_next_rmap_item