Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-49211

Опубликовано: 04 авг. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2026-49211: kernel security, bug fix, and enhancement update (IMPORTANT)

[6.12.0-211.42.1]

  • Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
  • Disable UKI signing [Orabug: 36571828]
  • Update Oracle Linux certificates (Kevin Lyons)
  • Disable signing for aarch64 (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
  • Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  • Add Oracle Linux IMA certificates
  • Update module name for cryptographic module [Orabug: 37400433]
  • Clean git history at setup stage

[6.12.0-211.42.1]

  • net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
  • ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
  • isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}

[6.12.0-211.41.1]

  • dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
  • ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-cross-headers

6.12.0-211.42.1.el10_2

kernel-headers

6.12.0-211.42.1.el10_2

kernel-tools

6.12.0-211.42.1.el10_2

kernel-tools-libs

6.12.0-211.42.1.el10_2

kernel-tools-libs-devel

6.12.0-211.42.1.el10_2

libperf

6.12.0-211.42.1.el10_2

perf

6.12.0-211.42.1.el10_2

python3-perf

6.12.0-211.42.1.el10_2

rtla

6.12.0-211.42.1.el10_2

rv

6.12.0-211.42.1.el10_2

Oracle Linux x86_64

kernel

6.12.0-211.42.1.el10_2

kernel-abi-stablelists

6.12.0-211.42.1.el10_2

kernel-core

6.12.0-211.42.1.el10_2

kernel-cross-headers

6.12.0-211.42.1.el10_2

kernel-debug

6.12.0-211.42.1.el10_2

kernel-debug-core

6.12.0-211.42.1.el10_2

kernel-debug-devel

6.12.0-211.42.1.el10_2

kernel-debug-devel-matched

6.12.0-211.42.1.el10_2

kernel-debug-modules

6.12.0-211.42.1.el10_2

kernel-debug-modules-core

6.12.0-211.42.1.el10_2

kernel-debug-modules-extra

6.12.0-211.42.1.el10_2

kernel-debug-uki-virt

6.12.0-211.42.1.el10_2

kernel-devel

6.12.0-211.42.1.el10_2

kernel-devel-matched

6.12.0-211.42.1.el10_2

kernel-doc

6.12.0-211.42.1.el10_2

kernel-headers

6.12.0-211.42.1.el10_2

kernel-modules

6.12.0-211.42.1.el10_2

kernel-modules-core

6.12.0-211.42.1.el10_2

kernel-modules-extra

6.12.0-211.42.1.el10_2

kernel-modules-extra-matched

6.12.0-211.42.1.el10_2

kernel-tools

6.12.0-211.42.1.el10_2

kernel-tools-libs

6.12.0-211.42.1.el10_2

kernel-tools-libs-devel

6.12.0-211.42.1.el10_2

kernel-uki-virt

6.12.0-211.42.1.el10_2

kernel-uki-virt-addons

6.12.0-211.42.1.el10_2

libperf

6.12.0-211.42.1.el10_2

perf

6.12.0-211.42.1.el10_2

python3-perf

6.12.0-211.42.1.el10_2

rtla

6.12.0-211.42.1.el10_2

rv

6.12.0-211.42.1.el10_2

Связанные уязвимости

rocky
около 1 месяца назад

Important: kernel security, bug fix, and enhancement update

CVSS3: 5.5
ubuntu
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRITE, MAP_NORE...

CVSS3: 5.5
redhat
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRITE, MAP_NORE...

CVSS3: 5.5
nvd
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRI

CVSS3: 5.5
msrc
8 месяцев назад

ksm: use range-walk function to jump over holes in scan_get_next_rmap_item