{"cves":["CVE-2025-71113","CVE-2025-71147","CVE-2026-23168","CVE-2026-31530","CVE-2026-46116","CVE-2026-46150","CVE-2026-46215","CVE-2026-52950","CVE-2026-52976","CVE-2026-53009","CVE-2026-53071"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[6.12.0-211.37.1]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]\n- Disable UKI signing [Orabug: 36571828]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5]\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]\n- Add Oracle Linux IMA certificates\n- Update module name for cryptographic module [Orabug: 37400433]\n- Clean git history at setup stage\n\n[6.12.0-211.37.1]\n- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]\n- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}\n\n[6.12.0-211.36.1]\n- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}\n- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}\n- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]\n- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]\n- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]\n- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]\n- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}\n- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]\n- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]\n- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]\n- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]\n- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]\n- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]\n- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]\n- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]\n- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]\n- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]\n- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]\n- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]\n- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]\n- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}\n- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: switch test to scnprintf('%*pbl') (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: Add test for out-of-boundary modifications for scatter  gather (Jakub Ramaseuski) [RHEL-191324]\n- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]\n- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]\n(Jakub Ramaseuski) [RHEL-191324]\n- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}\n- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}\n- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}\n\n[6.12.0-211.35.1]\n- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}\n- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]\n- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]\n- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]\n- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]\n- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]\n- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]\n- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]\n- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]\n- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]\n- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}\n- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]\n- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}\n- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}\n- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}\n- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]\n- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]","id":"ELSA-2026-42919","ovalId":"oval:com.oracle.elsa:def:202642919","source":"oracle_linux","title":"ELSA-2026-42919:  kernel security, bug fix, and enhancement update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-42919.html"}