ELSA-2026-66355-0

Опубликовано: 11 сент. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-66355-0: kernel security update (IMPORTANT)

[6.12.0-211.54.1]

Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
Disable UKI signing [Orabug: 36571828]
Update Oracle Linux certificates (Kevin Lyons)
Disable signing for aarch64 (Ilya Okomin)
Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
Update x509.genkey [Orabug: 24817676]
Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
Add Oracle Linux IMA certificates
Update module name for cryptographic module [Orabug: 37400433]
Clean git history at setup stage

[6.12.0-211.54.1]

net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-headers

6.12.0-211.54.1.el10_2

perf

6.12.0-211.54.1.el10_2

python3-perf

6.12.0-211.54.1.el10_2

rtla

6.12.0-211.54.1.el10_2

kernel-tools

6.12.0-211.54.1.el10_2

kernel-tools-libs

6.12.0-211.54.1.el10_2

kernel-cross-headers

6.12.0-211.54.1.el10_2

kernel-tools-libs-devel

6.12.0-211.54.1.el10_2

libperf

6.12.0-211.54.1.el10_2

Oracle Linux x86_64

kernel-debug-devel

6.12.0-211.54.1.el10_2

kernel-debug-devel-matched

6.12.0-211.54.1.el10_2

kernel-devel

6.12.0-211.54.1.el10_2

kernel-devel-matched

6.12.0-211.54.1.el10_2

kernel-doc

6.12.0-211.54.1.el10_2

kernel-headers

6.12.0-211.54.1.el10_2

perf

6.12.0-211.54.1.el10_2

python3-perf

6.12.0-211.54.1.el10_2

rtla

6.12.0-211.54.1.el10_2

kernel

6.12.0-211.54.1.el10_2

kernel-abi-stablelists

6.12.0-211.54.1.el10_2

kernel-core

6.12.0-211.54.1.el10_2

kernel-debug

6.12.0-211.54.1.el10_2

kernel-debug-core

6.12.0-211.54.1.el10_2

kernel-debug-modules

6.12.0-211.54.1.el10_2

kernel-debug-modules-core

6.12.0-211.54.1.el10_2

kernel-debug-modules-extra

6.12.0-211.54.1.el10_2

kernel-debug-uki-virt

6.12.0-211.54.1.el10_2

kernel-modules

6.12.0-211.54.1.el10_2

kernel-modules-core

6.12.0-211.54.1.el10_2

kernel-modules-extra

6.12.0-211.54.1.el10_2

kernel-modules-extra-matched

6.12.0-211.54.1.el10_2

kernel-tools

6.12.0-211.54.1.el10_2

kernel-tools-libs

6.12.0-211.54.1.el10_2

kernel-uki-virt

6.12.0-211.54.1.el10_2

kernel-uki-virt-addons

6.12.0-211.54.1.el10_2

kernel-cross-headers

6.12.0-211.54.1.el10_2

kernel-tools-libs-devel

6.12.0-211.54.1.el10_2

libperf

6.12.0-211.54.1.el10_2

Связанные CVE

CVE-2026-74480

Ссылки на источники

Связанные уязвимости

CVE-2026-74480

CVSS3: 9.8

ubuntu

около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->ports with pp = &p->next in its fast-leave path. After br_multicast_del_pg() removes p, continuing the loop advances pp through the deleted entry. If multicast-to-unicast was enabled, the bridge can hold multiple port groups for the same port and group with different source MAC addresses. Once multicast-to-unicast is disabled, br_port_group_equal() matches those entries by port only. A fast leave can then delete one entry and continue from its stale next pointer, leaving mp->ports pointing at a deleted port group. Fast leave only needs to remove one matching port group. Break after br_multicast_del_pg() so the loop stops before dereferencing the removed entry.