ELSA-2026-50304

Опубликовано: 07 июн. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Платформа: Oracle Linux 9

Описание

ELSA-2026-50304: Unbreakable Enterprise kernel security update (IMPORTANT)

[6.12.0-203.76.7.3]

arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39017589] {CVE-2025-10263}
arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland) [Orabug: 39017589]
arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland) [Orabug: 39017589]
arm64: cputype: Add C1-Premium definitions (Mark Rutland) [Orabug: 39017589]
arm64: cputype: Add C1-Ultra definitions (Mark Rutland) [Orabug: 39017589]

[6.12.0-203.76.7.2]

kabi: update FIPS kABI files (Saeed Mirzamohammadi) [Orabug: 39489008]
KEYS: Reserve key usage values (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: keep FIPS MPI helpers private (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: keep FIPS compression helpers private (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: keep FIPS helper library symbols private (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: tcrypt - clamp num_mb to avoid divide-by-zero (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: tcrypt - stop ahash speed tests when setkey fails (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: add x86 GHASH CLMUL to FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: add fixed-time AES to FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
fips: add scatterwalk to FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: avoid auto-load for arch specific impls (Saeed Mirzamohammadi) [Orabug: 39489008]
arm64/crypto: wire up FIPS aliases and helpers (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: share alg registry between FIPS and base kernel (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: keep crypto_user out of the FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: tcrypt - skip retest in FIPS mode (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: skip redundant FIPS self-module signature check (Saeed Mirzamohammadi) [Orabug: 39489008]
scripts: fail cleanly on arm64 boot image formats (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto/hkdf: Skip tests with keys too short in FIPS mode (Saeed Mirzamohammadi) [Orabug: 39489008]
uek-rpm: build module symvers before fips140.ko (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: add crc64_rocksoft_generic to the FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: add keywrap to the FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: add cts to the FIPS module (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto: convert kdf_sp800108 to CRYPTO_API() (Saeed Mirzamohammadi) [Orabug: 39489008]
fips: drop ansi_cprng and revert ansi_cprng FIPS hooks (Saeed Mirzamohammadi) [Orabug: 39489008]
crypto/testmgr: mark xxhash64 as fips disallowed (Saeed Mirzamohammadi) [Orabug: 39489008]
Revert 'fips: add xxhash64-generic to FIPS module' (Saeed Mirzamohammadi) [Orabug: 39489008]
asm-generic/vmlinux.lds.h: remove unreachable FIPS140 branch (Saeed Mirzamohammadi) [Orabug: 39489008]
btrfs: switch to library APIs for checksums (Eric Biggers) [Orabug: 39489008]
lib/crypto: blake2b: Add BLAKE2b library functions (Eric Biggers) [Orabug: 39489008]
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array() (Eric Biggers) [Orabug: 39489008]

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-uek

6.12.0-203.76.7.3.el10uek

kernel-uek-core

6.12.0-203.76.7.3.el10uek

kernel-uek-debug

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-core

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-devel

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-core

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-desktop

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-extra

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-usb

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-wireless

6.12.0-203.76.7.3.el10uek

kernel-uek-devel

6.12.0-203.76.7.3.el10uek

kernel-uek-doc

6.12.0-203.76.7.3.el10uek

kernel-uek-modules

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-core

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-deprecated

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-desktop

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-extra

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-usb

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-wireless

6.12.0-203.76.7.3.el10uek

kernel-uek-tools

6.12.0-203.76.7.3.el10uek

kernel-uek64k

6.12.0-203.76.7.3.el10uek

kernel-uek64k-core

6.12.0-203.76.7.3.el10uek

kernel-uek64k-devel

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-core

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-deprecated

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-desktop

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-extra

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-extra-netfilter

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-usb

6.12.0-203.76.7.3.el10uek

kernel-uek64k-modules-wireless

6.12.0-203.76.7.3.el10uek

Oracle Linux x86_64

kernel-uek

6.12.0-203.76.7.3.el10uek

kernel-uek-core

6.12.0-203.76.7.3.el10uek

kernel-uek-debug

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-core

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-devel

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-core

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-desktop

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-extra

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-usb

6.12.0-203.76.7.3.el10uek

kernel-uek-debug-modules-wireless

6.12.0-203.76.7.3.el10uek

kernel-uek-devel

6.12.0-203.76.7.3.el10uek

kernel-uek-doc

6.12.0-203.76.7.3.el10uek

kernel-uek-modules

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-core

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-deprecated

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-desktop

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-extra

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-usb

6.12.0-203.76.7.3.el10uek

kernel-uek-modules-wireless

6.12.0-203.76.7.3.el10uek

kernel-uek-tools

6.12.0-203.76.7.3.el10uek

Oracle Linux 9

Oracle Linux aarch64

kernel-uek

6.12.0-203.76.7.3.el9uek

kernel-uek-core

6.12.0-203.76.7.3.el9uek

kernel-uek-debug

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-core

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-devel

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-core

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-desktop

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-extra

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-usb

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-wireless

6.12.0-203.76.7.3.el9uek

kernel-uek-devel

6.12.0-203.76.7.3.el9uek

kernel-uek-doc

6.12.0-203.76.7.3.el9uek

kernel-uek-modules

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-core

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-deprecated

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-desktop

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-extra

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-usb

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-wireless

6.12.0-203.76.7.3.el9uek

kernel-uek-tools

6.12.0-203.76.7.3.el9uek

kernel-uek64k

6.12.0-203.76.7.3.el9uek

kernel-uek64k-core

6.12.0-203.76.7.3.el9uek

kernel-uek64k-devel

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-core

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-deprecated

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-desktop

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-extra

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-extra-netfilter

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-usb

6.12.0-203.76.7.3.el9uek

kernel-uek64k-modules-wireless

6.12.0-203.76.7.3.el9uek

Oracle Linux x86_64

kernel-uek

6.12.0-203.76.7.3.el9uek

kernel-uek-core

6.12.0-203.76.7.3.el9uek

kernel-uek-debug

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-core

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-devel

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-core

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-desktop

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-extra

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-usb

6.12.0-203.76.7.3.el9uek

kernel-uek-debug-modules-wireless

6.12.0-203.76.7.3.el9uek

kernel-uek-devel

6.12.0-203.76.7.3.el9uek

kernel-uek-doc

6.12.0-203.76.7.3.el9uek

kernel-uek-modules

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-core

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-deprecated

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-desktop

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-extra

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-usb

6.12.0-203.76.7.3.el9uek

kernel-uek-modules-wireless

6.12.0-203.76.7.3.el9uek

kernel-uek-tools

6.12.0-203.76.7.3.el9uek

Связанные CVE

CVE-2025-10263

Ссылки на источники

Связанные уязвимости

CVE-2025-10263

CVSS3: 9.1

ubuntu

около 2 месяцев назад

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.