Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-95367

Опубликовано: 05 нояб. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2026-95367: kernel security update (IMPORTANT)

[6.12.0-211.74.1]

  • Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
  • Disable UKI signing [Orabug: 36571828]
  • Update Oracle Linux certificates (Kevin Lyons)
  • Disable signing for aarch64 (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
  • Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  • Add Oracle Linux IMA certificates
  • Update module name for cryptographic module [Orabug: 37400433]
  • Clean git history at setup stage

[6.12.0-211.74.1]

  • sunrpc: wait for in-flight TLS handshake callback when cancel loses race (Olga Kornievskaia) [RHEL-283649] {CVE-2026-72221}
  • sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (Olga Kornievskaia) [RHEL-283263] {CVE-2026-72222}
  • fs/resctrl: Fix use-after-free during unmount (Dennis Chen) [RHEL-296708] {CVE-2026-72080}
  • xfs: fix exchange-range-to-eof file size exchange (Carlos Maiolino) [RHEL-292986] {CVE-2026-98974}
  • xfs: stop exchanging reflink flags when exchanging mappings (Carlos Maiolino) [RHEL-292986] {CVE-2026-98974}
  • sctp: clear new_transport when removing a peer (CKI Backport Bot) [RHEL-275369] {CVE-2026-74586}
  • writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (Ian Kent) [RHEL-260509] {CVE-2026-64378}
  • openvswitch: Fix CT limit teardown use-after-free (Timothy Redaelli) [RHEL-263515] {CVE-2026-89488}
  • PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (Aristeu Rozanski) [RHEL-267082] {CVE-2026-90315}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-headers

6.12.0-211.74.1.el10_2

perf

6.12.0-211.74.1.el10_2

python3-perf

6.12.0-211.74.1.el10_2

rtla

6.12.0-211.74.1.el10_2

rv

6.12.0-211.74.1.el10_2

kernel-tools

6.12.0-211.74.1.el10_2

kernel-tools-libs

6.12.0-211.74.1.el10_2

kernel-cross-headers

6.12.0-211.74.1.el10_2

kernel-tools-libs-devel

6.12.0-211.74.1.el10_2

libperf

6.12.0-211.74.1.el10_2

Oracle Linux x86_64

kernel-debug-devel

6.12.0-211.74.1.el10_2

kernel-debug-devel-matched

6.12.0-211.74.1.el10_2

kernel-devel

6.12.0-211.74.1.el10_2

kernel-devel-matched

6.12.0-211.74.1.el10_2

kernel-doc

6.12.0-211.74.1.el10_2

kernel-headers

6.12.0-211.74.1.el10_2

perf

6.12.0-211.74.1.el10_2

python3-perf

6.12.0-211.74.1.el10_2

rtla

6.12.0-211.74.1.el10_2

rv

6.12.0-211.74.1.el10_2

kernel

6.12.0-211.74.1.el10_2

kernel-abi-stablelists

6.12.0-211.74.1.el10_2

kernel-core

6.12.0-211.74.1.el10_2

kernel-debug

6.12.0-211.74.1.el10_2

kernel-debug-core

6.12.0-211.74.1.el10_2

kernel-debug-modules

6.12.0-211.74.1.el10_2

kernel-debug-modules-core

6.12.0-211.74.1.el10_2

kernel-debug-modules-extra

6.12.0-211.74.1.el10_2

kernel-debug-uki-virt

6.12.0-211.74.1.el10_2

kernel-modules

6.12.0-211.74.1.el10_2

kernel-modules-core

6.12.0-211.74.1.el10_2

kernel-modules-extra

6.12.0-211.74.1.el10_2

kernel-modules-extra-matched

6.12.0-211.74.1.el10_2

kernel-tools

6.12.0-211.74.1.el10_2

kernel-tools-libs

6.12.0-211.74.1.el10_2

kernel-uki-virt

6.12.0-211.74.1.el10_2

kernel-uki-virt-addons

6.12.0-211.74.1.el10_2

kernel-cross-headers

6.12.0-211.74.1.el10_2

kernel-tools-libs-devel

6.12.0-211.74.1.el10_2

libperf

6.12.0-211.74.1.el10_2

Связанные CVE

CVE-2026-64378
CVE-2026-72080
CVE-2026-72221
CVE-2026-72222
CVE-2026-74586
CVE-2026-89488
CVE-2026-90315
CVE-2026-98974

Ссылки на источники

Связанные уязвимости

oracle-oval логотип

ELSA-2026-95370

oracle-oval
4 дня назад

ELSA-2026-95370: kernel security update (IMPORTANT)

ubuntu логотип

CVE-2026-64378

CVSS3: 7.8
ubuntu
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() When a container exits, the following BUG_ON() is occasionally triggered: ================================================================== VFS: Busy inodes after unmount of sdb (ext4) ------------[ cut here ]------------ kernel BUG at fs/super.c:695! CPU: 3 PID: 6 Comm: containerd-shim Tainted: G OE K 6.6 #1 pstate: 63400009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0xf0/0x100 lr : generic_shutdown_super+0xf0/0x100 Call trace: generic_shutdown_super+0xf0/0x100 kill_block_super+0x20/0x48 ext4_kill_sb+0x28/0x60 deactivate_locked_super+0x54/0x130 deactivate_super+0x84/0xa0 cleanup_mnt+0xa4/0x140 __cleanup_mnt+0x18/0x28 task_work_run+0x78/0xe0 do_notify_resume+0x204/0x240 ================================================================== The root cause is a race between cgroup_writeback_umount() and inode_swit...

redhat логотип

CVE-2026-64378

CVSS3: 7
redhat
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() When a container exits, the following BUG_ON() is occasionally triggered: ================================================================== VFS: Busy inodes after unmount of sdb (ext4) ------------[ cut here ]------------ kernel BUG at fs/super.c:695! CPU: 3 PID: 6 Comm: containerd-shim Tainted: G OE K 6.6 #1 pstate: 63400009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0xf0/0x100 lr : generic_shutdown_super+0xf0/0x100 Call trace: generic_shutdown_super+0xf0/0x100 kill_block_super+0x20/0x48 ext4_kill_sb+0x28/0x60 deactivate_locked_super+0x54/0x130 deactivate_super+0x84/0xa0 cleanup_mnt+0xa4/0x140 __cleanup_mnt+0x18/0x28 task_work_run+0x78/0xe0 do_notify_resume+0x204/0x240 ================================================================== The root cause is a race between cgroup_writeback_umount() and inode_swit...

nvd логотип

CVE-2026-64378

CVSS3: 7.8
nvd
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() When a container exits, the following BUG_ON() is occasionally triggered: ================================================================== VFS: Busy inodes after unmount of sdb (ext4) ------------[ cut here ]------------ kernel BUG at fs/super.c:695! CPU: 3 PID: 6 Comm: containerd-shim Tainted: G OE K 6.6 #1 pstate: 63400009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0xf0/0x100 lr : generic_shutdown_super+0xf0/0x100 Call trace: generic_shutdown_super+0xf0/0x100 kill_block_super+0x20/0x48 ext4_kill_sb+0x28/0x60 deactivate_locked_super+0x54/0x130 deactivate_super+0x84/0xa0 cleanup_mnt+0xa4/0x140 __cleanup_mnt+0x18/0x28 task_work_run+0x78/0xe0 do_notify_resume+0x204/0x240 ================================================================== The root cause is a race between cgroup_writeb

msrc логотип

CVE-2026-64378

CVSS3: 4.7
msrc
4 месяца назад

writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()