elsa-2026-1690

{
  "cves": [
    "CVE-2025-37819",
    "CVE-2025-38022",
    "CVE-2025-38349",
    "CVE-2025-38453",
    "CVE-2025-38568",
    "CVE-2025-38731",
    "CVE-2025-40135",
    "CVE-2025-40154",
    "CVE-2025-40158",
    "CVE-2025-40170",
    "CVE-2025-40248",
    "CVE-2025-40251",
    "CVE-2025-40258",
    "CVE-2025-40271",
    "CVE-2025-40294",
    "CVE-2025-40301",
    "CVE-2025-40318",
    "CVE-2025-68301",
    "CVE-2025-68305"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[6.12.0-124.31.1]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]\n- Disable UKI signing [Orabug: 36571828]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5]\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]\n- Add Oracle Linux IMA certificates\n- Update module name for cryptographic module [Orabug: 37400433]\n- Clean git history at setup stage\n\n[6.12.0-124.31.1]\n- i40e: support generic devlink param 'max_mac_per_vf' (Mohammad Heib) [RHEL-121647]\n- devlink: Add new 'max_mac_per_vf' generic device param (Mohammad Heib) [RHEL-121647]\n- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]\n- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]\n- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]\n- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]\n- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]\n- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]\n- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]\n- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]\n- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]\n- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]\n- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]\n- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}\n- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]\n- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}\n\n[6.12.0-124.30.1]\n- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}\n- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}\n- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}\n- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}\n- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}\n- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}\n- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}\n- net: dst: introduce dst-dev_rcu (Hangbin Liu) [RHEL-129026]\n- net: Add locking to protect skb-dev access in ip_output (Hangbin Liu) [RHEL-129026]\n- net: dst: add four helpers to annotate data-races around dst-dev (Hangbin Liu) [RHEL-129026]\n- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}\n- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}\n- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}\n- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}\n- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}\n- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}\n- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}\n- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}\n- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}\n- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}",
  "id": "ELSA-2026-1690",
  "ovalId": "oval:com.oracle.elsa:def:20261690",
  "source": "oracle_linux",
  "title": "ELSA-2026-1690:  kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-1690.html"
}