ELSA-2026-6053

Опубликовано: 30 мар. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-6053: kernel security update (MODERATE)

[6.12.0-124.47.1]

Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
Disable UKI signing [Orabug: 36571828]
Update Oracle Linux certificates (Kevin Lyons)
Disable signing for aarch64 (Ilya Okomin)
Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
Update x509.genkey [Orabug: 24817676]
Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
Add Oracle Linux IMA certificates
Update module name for cryptographic module [Orabug: 37400433]
Clean git history at setup stage

[6.12.0-124.47.1]

dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]

[6.12.0-124.46.1]

netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-headers

6.12.0-124.47.1.el10_1

perf

6.12.0-124.47.1.el10_1

python3-perf

6.12.0-124.47.1.el10_1

rtla

6.12.0-124.47.1.el10_1

kernel-tools

6.12.0-124.47.1.el10_1

kernel-tools-libs

6.12.0-124.47.1.el10_1

kernel-cross-headers

6.12.0-124.47.1.el10_1

kernel-tools-libs-devel

6.12.0-124.47.1.el10_1

libperf

6.12.0-124.47.1.el10_1

Oracle Linux x86_64

kernel

6.12.0-124.47.1.el10_1

kernel-abi-stablelists

6.12.0-124.47.1.el10_1

kernel-core

6.12.0-124.47.1.el10_1

kernel-debug

6.12.0-124.47.1.el10_1

kernel-debug-core

6.12.0-124.47.1.el10_1

kernel-debug-modules

6.12.0-124.47.1.el10_1

kernel-debug-modules-core

6.12.0-124.47.1.el10_1

kernel-debug-modules-extra

6.12.0-124.47.1.el10_1

kernel-debug-uki-virt

6.12.0-124.47.1.el10_1

kernel-modules

6.12.0-124.47.1.el10_1

kernel-modules-core

6.12.0-124.47.1.el10_1

kernel-modules-extra

6.12.0-124.47.1.el10_1

kernel-modules-extra-matched

6.12.0-124.47.1.el10_1

kernel-tools

6.12.0-124.47.1.el10_1

kernel-tools-libs

6.12.0-124.47.1.el10_1

kernel-uki-virt

6.12.0-124.47.1.el10_1

kernel-uki-virt-addons

6.12.0-124.47.1.el10_1

kernel-debug-devel

6.12.0-124.47.1.el10_1

kernel-debug-devel-matched

6.12.0-124.47.1.el10_1

kernel-devel

6.12.0-124.47.1.el10_1

kernel-devel-matched

6.12.0-124.47.1.el10_1

kernel-doc

6.12.0-124.47.1.el10_1

kernel-headers

6.12.0-124.47.1.el10_1

perf

6.12.0-124.47.1.el10_1

python3-perf

6.12.0-124.47.1.el10_1

rtla

6.12.0-124.47.1.el10_1

kernel-cross-headers

6.12.0-124.47.1.el10_1

kernel-tools-libs-devel

6.12.0-124.47.1.el10_1

libperf

6.12.0-124.47.1.el10_1

Связанные CVE

CVE-2025-71238

CVE-2026-23231

Ссылки на источники

Связанные уязвимости

RLSA-2026:6053

rocky

2 месяца назад

Moderate: kernel security update

RLSA-2026:6571

rocky

2 месяца назад

Moderate: kernel security update

ELSA-2026-6571

oracle-oval

3 месяца назад

ELSA-2026-6571: kernel security update (MODERATE)

CVE-2025-71238

CVSS3: 7.8

ubuntu

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: supervisor write access in kernel mode [5353358.825195] #PF: error_code(0x0002) - not-present page [5353358.825196] PGD 100006067 P4D 0 [5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI [5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1 [5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025 [5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10 [5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246 [5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000 [5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000 [5353358.825214] RBP: 0000000000010...

CVE-2025-71238

CVSS3: 7.3

redhat

4 месяца назад