elsa-2026-50232

{
  "cves": [
    "CVE-2024-58096",
    "CVE-2024-58097",
    "CVE-2025-21717",
    "CVE-2025-21882",
    "CVE-2025-37929",
    "CVE-2025-38431",
    "CVE-2025-39832",
    "CVE-2025-40135",
    "CVE-2025-68333",
    "CVE-2025-68351",
    "CVE-2025-68358",
    "CVE-2025-68725",
    "CVE-2025-68737",
    "CVE-2025-71197",
    "CVE-2025-71222",
    "CVE-2025-71224",
    "CVE-2025-71225",
    "CVE-2025-71229",
    "CVE-2025-71231",
    "CVE-2025-71232",
    "CVE-2025-71234",
    "CVE-2025-71235",
    "CVE-2025-71236",
    "CVE-2025-71238",
    "CVE-2026-23004",
    "CVE-2026-23057",
    "CVE-2026-23058",
    "CVE-2026-23059",
    "CVE-2026-23060",
    "CVE-2026-23061",
    "CVE-2026-23062",
    "CVE-2026-23069",
    "CVE-2026-23071",
    "CVE-2026-23072",
    "CVE-2026-23073",
    "CVE-2026-23074",
    "CVE-2026-23076",
    "CVE-2026-23078",
    "CVE-2026-23082",
    "CVE-2026-23084",
    "CVE-2026-23085",
    "CVE-2026-23086",
    "CVE-2026-23087",
    "CVE-2026-23088",
    "CVE-2026-23089",
    "CVE-2026-23091",
    "CVE-2026-23095",
    "CVE-2026-23097",
    "CVE-2026-23099",
    "CVE-2026-23100",
    "CVE-2026-23101",
    "CVE-2026-23103",
    "CVE-2026-23105",
    "CVE-2026-23107",
    "CVE-2026-23108",
    "CVE-2026-23110",
    "CVE-2026-23111",
    "CVE-2026-23112",
    "CVE-2026-23113",
    "CVE-2026-23119",
    "CVE-2026-23120",
    "CVE-2026-23123",
    "CVE-2026-23124",
    "CVE-2026-23125",
    "CVE-2026-23126",
    "CVE-2026-23128",
    "CVE-2026-23129",
    "CVE-2026-23131",
    "CVE-2026-23133",
    "CVE-2026-23146",
    "CVE-2026-23148",
    "CVE-2026-23151",
    "CVE-2026-23154",
    "CVE-2026-23156",
    "CVE-2026-23159",
    "CVE-2026-23161",
    "CVE-2026-23163",
    "CVE-2026-23164",
    "CVE-2026-23166",
    "CVE-2026-23168",
    "CVE-2026-23173",
    "CVE-2026-23177",
    "CVE-2026-23178",
    "CVE-2026-23179",
    "CVE-2026-23188",
    "CVE-2026-23189",
    "CVE-2026-23190",
    "CVE-2026-23191",
    "CVE-2026-23193",
    "CVE-2026-23199",
    "CVE-2026-23200",
    "CVE-2026-23201",
    "CVE-2026-23202",
    "CVE-2026-23204",
    "CVE-2026-23205",
    "CVE-2026-23209",
    "CVE-2026-23212",
    "CVE-2026-23213",
    "CVE-2026-23214",
    "CVE-2026-23215",
    "CVE-2026-23216",
    "CVE-2026-23219",
    "CVE-2026-23223",
    "CVE-2026-23229",
    "CVE-2026-23230",
    "CVE-2026-23231",
    "CVE-2026-23237",
    "CVE-2026-23401"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[6.12.0-201.74.2.1]\n- Revert 'rds: Drop rds conn in connect worker if not in down state.' (Vijayendra Suman)  [Orabug: 39200413] \n- io_uring/kbuf: check if target buffer list is still legacy on recycle (Jens Axboe)  [Orabug: 39202438] \n- ipv6: use RCU in ip6_xmit() (Eric Dumazet)  [Orabug: 39202432]  {CVE-2025-40135}\n- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet)  [Orabug: 39202431]  {CVE-2026-23004}\n\n[6.12.0-201.74.2]\n- kabi: update kABI files for FIPS (Saeed Mirzamohammadi)  [Orabug: 38667144]\n- RDMA/mlx5: Fix ucaps init error flow (Maher Sanalla)  [Orabug: 38667144]\n- eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring (Miaoqian Lin)  [Orabug: 38667144]\n- RDMA/ucaps: Avoid format-security warning (Arnd Bergmann)  [Orabug: 38667144]\n- net/mlx5: fs, fix UAF in flow counter release (Moshe Shemesh)  [Orabug: 38667144]\n- net/mlx5: Not returning mlx5_link_info table when speed is unknown (Li Tian)  [Orabug: 38667144]\n- net/mlx5: CT: Use the correct counter offset (Vlad Dogaru)  [Orabug: 38667144]\n- net/mlx5: Reset bw_share field when changing a node's parent (Carolina Jubran)  [Orabug: 38667144]\n- net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Carolina Jubran)  [Orabug: 38667144]\n- mlx5: Fix default values in create CQ (Akiva Goldberger)  [Orabug: 38667144]\n- net/mlx5e: Prepare for using different CQ doorbells (Cosmin Ratiu)  [Orabug: 38667144]\n- net/mlx5: Store the global doorbell in mlx5_priv (Cosmin Ratiu)  [Orabug: 38667144]\n- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Cosmin Ratiu)  [Orabug: 38667144]\n- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Yishai Hadas)  [Orabug: 38667144]\n- RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Mark Bloch)  [Orabug: 38667144]\n- eth: mlx4: select PAGE_POOL (Greg Thelen)  [Orabug: 38667144]\n- net/mlx5e: TC, Don't offload CT commit if it's the last action (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Paul Blakey)  [Orabug: 38667144]\n- net/mlx5: Update pfnum retrieval for devlink port attributes (Shay Drory)  [Orabug: 38667144]\n- net/mlx5: fw reset, check bridge accessibility at earlier stage (Amir Tzin)  [Orabug: 38667144]\n- net/mlx5: Lag, use port selection tables when available (Mark Bloch)  [Orabug: 38667144]\n- net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Tariq Toukan)  [Orabug: 38667144]\n- net/mlx5: Start health poll after enable hca (Moshe Shemesh)  [Orabug: 38667144]\n- net/mlx5: LAG, reload representors on LAG creation failure (Mark Bloch)  [Orabug: 38667144]\n- mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions (WangYuli)  [Orabug: 38667144]\n- mlxsw: Add VXLAN bridge ports to same hardware domain as physical bridge ports (Amit Cohen)  [Orabug: 38667144]\n- mlxsw: spectrum_switchdev: Move mlxsw_sp_bridge_vxlan_join() (Amit Cohen)  [Orabug: 38667144]\n- mlxsw: spectrum_switchdev: Add an internal API for VXLAN leave (Amit Cohen)  [Orabug: 38667144]\n- mlxsw: spectrum: Call mlxsw_sp_bridge_vxlan_{join, leave}() for VLAN-aware bridge (Amit Cohen)  [Orabug: 38667144]\n- mlxsw: Trap ARP packets at layer 2 instead of layer 3 (Amit Cohen)  [Orabug: 38667144]\n- net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Tariq Toukan)  [Orabug: 38667144]\n- net/mlx5e: Use right API to free bitmap memory (Mark Zhang)  [Orabug: 38667144]\n- net/mlx5: Remove NULL check before dev_{put, hold} (Gal Pressman)  [Orabug: 38667144]\n- net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Maxim Mikityanskiy)  [Orabug: 38667144]\n- i2c: mlxbf: Use readl_poll_timeout_atomic() for polling (Andy Shevchenko)  [Orabug: 38667144]\n- net/mlx5e: Expose port reset cycle recovery counter via ethtool (Yael Chemla)  [Orabug: 38667144]\n- net/mlx5e: Get counter group size by FW capability (Yael Chemla)  [Orabug: 38667144]\n- net/mlx5e: Access PHY layer counter group as other counter groups (Yael Chemla)  [Orabug: 38667144]\n- net/mlx5e: Ensure each counter group uses its PCAM bit (Yael Chemla)  [Orabug: 38667144]\n- leds: mlxcpld: Remove unused ACPI header inclusion (Andy Shevchenko)  [Orabug: 38667144]\n- net/mlx5: HWS, log the unsupported mask in definer (Yevgeny Kliteynik)  [Orabug: 38667144]\n- net/mlx5: HWS, use list_move() instead of del/add (Yevgeny Kliteynik)  [Orabug: 38667144]\n- net/mlx5: HWS, remove unused code for alias flow tables (Yevgeny Kliteynik)  [Orabug: 38667144]\n- RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Michael Guralnik)  [Orabug: 38667144]\n- RDMA/mlx5: Support optional-counters binding for QPs (Patrisious Haddad)  [Orabug: 38667144]\n- RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Patrisious Haddad)  [Orabug: 38667144]\n- RDMA/ionic: Implement device stats ops (Abhijit Gangurde)  [Orabug: 38667144]\n- RDMA/core: Pass port to counter bind/unbind operations (Patrisious Haddad)  [Orabug: 38667144]\n- Revert 'RDMA/ionic: Implement device stats ops' (Qing Huang)  [Orabug: 38667144]\n- RDMA/core: Add support to optional-counters binding configuration (Patrisious Haddad)  [Orabug: 38667144]\n- RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Patrisious Haddad)  [Orabug: 38667144]\n- RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Patrisious Haddad)  [Orabug: 38667144]\n- net/mlx5: Add support for setting parent of nodes (Carolina Jubran)  [Orabug: 38667144]\n- net/mlx5: Preserve rate settings when creating a rate node (Carolina Jubran)  [Orabug: 38667144]\n- net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Carolina Jubran)  [Orabug: 38667144]\n- net/mlx5: Rename devlink rate parent set function for leaf nodes (Carolina Jubran)  [Orabug: 38667144]\n- net/mlx5: fs, add support for dest flow sampler HWS action (Moshe Shemesh)  [Orabug: 38667144]\n- net/mlx5: fs, add support for flow meters HWS action (Moshe Shemesh)  [Orabug: 38667144]\n- net/mlx5: fs, add API for sharing HWS action by refcount (Moshe Shemesh)  [Orabug: 38667144]\n- netdevsim: 'support' multi-buf XDP (Jakub Kicinski)  [Orabug: 38667144]\n- net/mlx5: Avoid unnecessary use of comma operator (Simon Horman)  [Orabug: 38667144]\n- mmc: sdhci-of-dwcmshc: Change to dwcmshc_phy_init for reusing codes (Jaehoon Chung)  [Orabug: 38667144]\n- net/mlx5: Add IFC bits for PPCNT recovery counters group (Yael Chemla)  [Orabug: 38667144]\n- RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Patrisious Haddad)  [Orabug: 38667144]\n- RDMA/mlx5: Check enabled UCAPs when creating ucontext (Chiara Meiohas)  [Orabug: 38667144]\n- RDMA/uverbs: Add support for UCAPs in context creation (Chiara Meiohas)  [Orabug: 38667144]\n- RDMA/mlx5: Create UCAP char devices for supported device capabilities (Chiara Meiohas)  [Orabug: 38667144]\n- RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Chiara Meiohas)  [Orabug: 38667144]\n- net/mlx5: fs, add RDMA TRANSPORT steering domain support (Patrisious Haddad)  [Orabug: 38667144]\n- net/mlx5: Query ADV_RDMA capabilities (Patrisious Haddad)  [Orabug: 38667144]\n- net/mlx5: Limit non-privileged commands (Chiara Meiohas)  [Orabug: 38667144]\n- net/mlx5: Allow the throttle mechanism to be more dynamic (Chiara Meiohas)  [Orabug: 38667144]\n- net/mlx5: Add RDMA_CTRL HW capabilities (Chiara Meiohas)  [Orabug: 38667144]\n- net/mlx5e: Properly match IPsec subnet addresses (Leon Romanovsky)  [Orabug: 38667144]\n- net/mlx5e: Separate address related variables to be in struct (Leon Romanovsky)  [Orabug: 38667144]\n- net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Amir Tzin)  [Orabug: 38667144]\n- net/mlx5e: Enable lanes configuration when auto-negotiation is off (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5: Refactor link speed handling with mlx5_link_info struct (Shahar Shitrit)  [Orabug: 38667144]\n- net: rename netns_local to netns_immutable (Nicolas Dichtel)  [Orabug: 38667144]\n- RDMA/mlx5: Reorder capability check last (Christian Gottsche)  [Orabug: 38667144]\n- net/mlx5: Add trust lockdown error to health syndrome print function (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5: Expose crr in health buffer (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5: Log health buffer data on any syndrome (Moshe Shemesh)  [Orabug: 38667144]\n- net/mlx5: Remove newline at the end of a netlink error message (Gal Pressman)  [Orabug: 38667144]\n- net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)  [Orabug: 38667144]\n- net/mlx5e: Symmetric OR-XOR RSS hash control (Gal Pressman)  [Orabug: 38667144]\n- ethtool: Symmetric OR-XOR RSS hash (Gal Pressman)  [Orabug: 38667144]\n- net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Thorsten Blum)  [Orabug: 38667144]\n- net/mlx5: Add new health syndrome error and crr bit offset (Shahar Shitrit)  [Orabug: 38667144]\n- xfrm: provide common xdo_dev_offload_ok callback implementation (Leon Romanovsky)  [Orabug: 38667144]\n- xfrm: rely on XFRM offload (Leon Romanovsky)  [Orabug: 38667144]\n- net/mlx5e: Separate extended link modes request from link modes type selection (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5e: Change eth_proto parameter naming (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5e: Introduce ptys2ethtool_process_link() (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5e: Refactor ptys2ethtool_adver_link() (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5: Bridge, correct config option description (Cosmin Ratiu)  [Orabug: 38667144]\n- netdevsim: call napi_schedule from a timer context (Breno Leitao)  [Orabug: 38667144]\n- eth: mlx4: use the page pool for Rx buffers (Jakub Kicinski)  [Orabug: 38667144]\n- eth: mlx4: remove the local XDP fast-recycling ring (Jakub Kicinski)  [Orabug: 38667144]\n- eth: mlx4: create a page pool for Rx (Jakub Kicinski)  [Orabug: 38667144]\n- net/mlx5: Add sensor name to temperature event message (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Shahar Shitrit)  [Orabug: 38667144]\n- net/mlx5e: Expose RSS via devlink rx reporter diagnose (Amir Tzin)  [Orabug: 38667144]\n- net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Amir Tzin)  [Orabug: 38667144]\n- net/mlx5e: Move RQs diagnose to a dedicated function (Amir Tzin)  [Orabug: 38667144]\n- mlxsw: Enable Tx checksum offload (Ido Schimmel)  [Orabug: 38667144]\n- net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Gal Pressman)  [Orabug: 38667144]\n- net/mlx5: Remove stray semicolon in LAG port selection table creation (Gal Pressman)  [Orabug: 38667144]\n- net/mlx5e: Support FEC settings for 200G per lane link modes (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Add support for 200Gbps per lane link modes (Jianbo Liu)  [Orabug: 38667144]\n- ethtool: Add support for 200Gbps per lane link modes (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Generate PPS IN event on new function for shared clock (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Support one PTP device per hardware clock (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Move PPS notifier and out_work to clock_state (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Add devcom component for the clock shared by functions (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Add init and destruction functions for a single HW clock (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Change parameters for PTP internal functions (Jianbo Liu)  [Orabug: 38667144]\n- net/mlx5: Add helper functions for PTP callbacks (Jianbo Liu)  [Orabug: 38667144]\n- mlxsw: spectrum_router: Remove unused functions (Dr. David Alan Gilbert)  [Orabug: 38667144]\n- net/mlx5: Remove unused mlx5dr_domain_sync (Dr. David Alan Gilbert)  [Orabug: 38667144]\n- mlx4: Remove unused functions (Dr. David Alan Gilbert)  [Orabug: 38667144]\n- platform: mellanox: mlx-platform: Change register name (Vadim Pasternak)  [Orabug: 38667144]\n- platform: mellanox: mlx-platform: Cosmetic changes (Vadim Pasternak)  [Orabug: 38667144]\n- mellanox: Relocate mlx-platform driver (Vadim Pasternak)  [Orabug: 38667144]\n- jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Easwar Hariharan)  [Orabug: 38667144]\n- ktime: Add us_to_ktime() (David Howells)  [Orabug: 38667144]\n- Revert 'mlx5: Fix default values in create CQ' (Qing Huang)  [Orabug: 38667144]\n- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38915249]\n- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Inseo An)  [Orabug: 39044468]  {CVE-2026-23231}\n- scsi: core: Fix error handling for scsi_alloc_sdev() (Junxiao Bi)  [Orabug: 39104869]\n- scsi: core: Fix refcount leak for tagset_refcnt (Junxiao Bi)  [Orabug: 39104869]\n- scsi: core: Move two statements (Bart Van Assche)  [Orabug: 39104869]\n- vfio: Adapt to upstream uAPI for VFIO_PRECOPY_INFO_REINIT (Maciej S. Szmigiero)  [Orabug: 39121644]\n- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson)  [Orabug: 39153394]  {CVE-2026-23401}\n\n[6.12.0-201.74.1]\n- selftests/bpf: Add overwrite mode test for BPF ring buffer (Xu Kuohai)  [Orabug: 38717758]\n- bpf: Add overwrite mode for BPF ring buffer (Xu Kuohai)  [Orabug: 38717758]\n- uek-rpm: Ensure --with onosonly skips building container rpms (Vijay Kumar)  [Orabug: 38905604]\n- nvme-auth: use hkdf_expand_label() (Chris Leech)  [Orabug: 38993277]\n- nvme: spelling fixes (Yi Zhang)  [Orabug: 38993277]\n- nvme-auth: add hkdf_expand_label() (Chris Leech)  [Orabug: 38993277]\n- nvme-auth: update bi_directional flag (Martin George)  [Orabug: 38993277]\n- nvme-auth: update sc_c in host response (Martin George)  [Orabug: 38993277]\n- nvme-tcp: remove redundant check to ctrl-opts (Hannes Reinecke)  [Orabug: 38993277]\n- nvme-tcp: send only permitted commands for secure concat (Martin George)  [Orabug: 38993277]\n- nvme-fabrics: reset admin connection for secure concatenation (Hannes Reinecke)  [Orabug: 38993277]\n- nvme-tcp: request secure channel concatenation (Hannes Reinecke)  [Orabug: 38993277]\n- nvme-keyring: add nvme_tls_psk_refresh() (Hannes Reinecke)  [Orabug: 38993277]\n- nvme: add nvme_auth_derive_tls_psk() (Hannes Reinecke)  [Orabug: 38993277]\n- nvme: add nvme_auth_generate_digest() (Hannes Reinecke)  [Orabug: 38993277]\n- nvme: add nvme_auth_generate_psk() (Hannes Reinecke)  [Orabug: 38993277]\n- crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Hannes Reinecke)  [Orabug: 38993277]\n- ONOS: Enable OPTOE EEPROM and ASF I2C modules (Vijay Kumar)  [Orabug: 39001522]\n- eeprom: optoe: drop i2c_device_id from probe() (Vijay Kumar)  [Orabug: 39001522]\n- ext4: show 'shutdown' hint when ext4 is forced to shutdown (Baokun Li)  [Orabug: 39002345]\n- ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Baokun Li)  [Orabug: 39002345]\n- ext4: correct behavior under errors=remount-ro mode (Baokun Li)  [Orabug: 39002345]\n- ext4: add more ext4_emergency_state() checks around sb_rdonly() (Baokun Li)  [Orabug: 39002345]\n- ext4: add ext4_emergency_state() helper function (Baokun Li)  [Orabug: 39002345]\n- ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Baokun Li)  [Orabug: 39002345]\n- ext4: convert EXT4_FLAGS_* defines to enum (Baokun Li)  [Orabug: 39002345]\n- PCI: Fix BUILD_BUG_ON usage for old gcc (Alex Williamson)  [Orabug: 39021289]\n- PCI: Batch BAR sizing operations (Alex Williamson)  [Orabug: 39021289]\n- uek-rpm: Turn USB_XHCI_PCI_RENESAS to a builtin option (Harshit Mogalapalli)  [Orabug: 39022939]\n- mm/page_alloc: ignore the exact initial compaction result (Vlastimil Babka)  [Orabug: 39037823]\n- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Vlastimil Babka)  [Orabug: 39037823]\n- ONOS: Replace strlcpy with strscpy in bcm-hsdk-gpl (Vijay Kumar)  [Orabug: 39042061]\n- ONOS: Build fix for bcm-hsdk-gpl drivers (Vijay Kumar)  [Orabug: 39042061]\n- uek-rpm/config-x86_64-onos: Add configs for Broadcom HSDK GPL drivers (Vijay Kumar)  [Orabug: 39042061]\n- bcm-hsdk-gpl: Build Broadcom HSDK GPL drivers (Vijay Kumar)  [Orabug: 39042061]\n- drivers/platform: Add Broadcom HSDK GPL drivers (Vijay Kumar)  [Orabug: 39042061]\n- minke-fan-cpld: support partial fan insertion (Divyarajsinh Jhala)  [Orabug: 39043148]\n- src: scale pwm to respect pali2 cpld min pwm req (arista-hpandya)  [Orabug: 39043148]\n- src: add support for FAN-7311H-RED (arista-hpandya)  [Orabug: 39043148]\n- minke-fan-cpld: support platform specific addresses (Divyarajsinh Jhala)  [Orabug: 39043148]\n- drivers: add rundle support to minke fan driver (arista-hpandya)  [Orabug: 39043148]\n- driver: fix rook fan present read in cpld_init and cpld_update (Calvin Laverty)  [Orabug: 39043148]\n- driver: fix scd gpio active low clear (Calvin Laverty)  [Orabug: 39043148]\n- driver: mask_green_red -- mask_red_led in scd-fan.h (Calvin Laverty)  [Orabug: 39043148]\n- leds: use Linux LED device classes as intended (Fraser Gordon)  [Orabug: 39043148]\n- amax31732: Fix error in setting primary threshold (arista-hpandya)  [Orabug: 39043148]\n- amax31732: Enable beta comp on all 4 channels (arista-hpandya)  [Orabug: 39043148]\n- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39045033]\n- uek-rpm: Enable FPROBE and FPROBE_EVENTS in UEK (Harshit Mogalapalli)  [Orabug: 39050941]\n- uek-rpm: T93: disable CONFIG_CPU_FREQ and CONFIG_ARM_SCMI_CPUFREQ (Thomas Tai)  [Orabug: 39052955]\n- mailbox: mvl-mhu: Refactor MHU RX interrupt handling (George Cherian)  [Orabug: 39052955]\n- driver: mmc: ACPI support added for eMMC driver for T9x. (Piyush Malgujar)  [Orabug: 39052955]\n- driver: mmc: Resolve issues reported by static analysis (Wojciech Bartczak)  [Orabug: 39052955]\n- driver: marvell: mmc: Removes static variables in tuning code (Wojciech Bartczak)  [Orabug: 39052955]\n- mmc: cavium: Add MMC polling method to support kmsg panic/oops write (Bhaskara Budiredla)  [Orabug: 39052955]\n- drivers: mmc: cleanup mmc_oops driver (Bhaskara Budiredla)  [Orabug: 39052955]\n- driver: mmc: Adds CMD tuning for eMMC HS200 mode (Wojciech Bartczak)  [Orabug: 39052955]\n- driver: mmc: Cleans up mmc code and prepare it for HS200 tuning update (Wojciech Bartczak)  [Orabug: 39052955]\n- driver: mmc: Adds device tree entries to control eMMC input timings (Wojciech Bartczak)  [Orabug: 39052955]\n- driver: mmc: Adds a way to dynamically control eMMC bus input timings (Wojciech Bartczak)  [Orabug: 39052955]\n- driver: mmc: Adds new overrides for eMMC bus output timings (Wojciech Bartczak)  [Orabug: 39052955]\n- octeontx2: mmc: Adds mechanism to modify output timings for MMC bus (Wojciech Bartczak)  [Orabug: 39052955]\n- drivers: mmc: enables mmc polling for pstore path (Bhaskara Budiredla)  [Orabug: 39052955]\n- mmc: octeontx2: fix handling calibration glitch (Aaron Williams)  [Orabug: 39052955]\n- mmc: octeontx2: Configure flags for T96 pass B0 (Chandrakala Chavva)  [Orabug: 39052955]\n- mmc: octeontx2: Use flags for hardware differences (Aaron Williams)  [Orabug: 39052955]\n- mmc: octeontx2: Fix tuning for T96 C0 (Chandrakala Chavva)  [Orabug: 39052955]\n- mmc: octeontx2: Add tuning support for HS400 mode (Aaron Williams)  [Orabug: 39052955]\n- mmc: octeontx2: speed limit for tx2-c0 (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: cavium: use calibrated timing taps (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: do not drop bus lock in tuning (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: slot switch by vqmmc/gpio (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: reorganize before vqmmc switching (Peter Swain)  [Orabug: 39052955]\n- mmc: octeontx2: cmd and data out values fixture (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: cavium: amend hs400 tuning (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: correct clock divisor (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: fix swiotlb buffer is full (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: avoid single-slot startup issues (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: execute_tuning for octeontx2 (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: track  apply CMD6 bus changes ASAP (Peter Swain)  [Orabug: 39052955]\n- mmc: octeontx2: cn96xx HS200-8wide-100MHz (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: CMD19/21 type correction (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: skip unavailable slots (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: finish_dma_single() should teardown/unmap (Peter Swain)  [Orabug: 39052955]\n- mmc: octeontx2: use device tree entries (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: octeontx2: emmc tuning for delay (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: octeontx2: calibrate tap delay (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: octeontx2: incorporate hw interface io ctl params (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: octeontx2: interrupt addition for ncb fault (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: octeontx2: emmc operation limited to 100 MHz (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: cavium: Use proper register to clear interrupts (Chandrakala Chavva)  [Orabug: 39052955]\n- mmc: cavium: fix shutdown deadlock with active sd-card (Peter Swain)  [Orabug: 39052955]\n- mmc: cavium: Configure sample command and data directly (Sujeet Baranwal)  [Orabug: 39052955]\n- mmc: octeontx2: add check for 8/9xxx chips (Sujeet Baranwal)  [Orabug: 39052955]\n- uek-rpm: T93: Configure EDAC  GHES support (Dave Kleikamp)  [Orabug: 39052955]\n- efi/Marvell: Work-around for bootefi memmap errors (Henry Willard)  [Orabug: 39052955]\n- soc: marvell: Add BERT support for OTX2/CN10K (Szymon Balcerak)  [Orabug: 39052955]\n- EDAC/mc: Modify memory error reporting print (Jaiprakash Singh)  [Orabug: 39052955]\n- edac: octeontx_edac: Reduce the log level for ghes prints (George Cherian)  [Orabug: 39052955]\n- ras:cn10k:BCP issue fix where CE errors are read as UE in kernel (Ashwin Kumar Sundararamakrishnan)  [Orabug: 39052955]\n- EDAC/mc: Common print format for CE and UE error (Jaiprakash Singh)  [Orabug: 39052955]\n- ras:edac: Modify processor_arm structure (Jaiprakash Singh)  [Orabug: 39052955]\n- ras:cn10k: Add support for external abort(EA) work queue (Jaiprakash Singh)  [Orabug: 39052955]\n- driver: edac: octeontx: Add CRC support. (Szymon Balcerak)  [Orabug: 39052955]\n- drivers: octeontx-edac: Refactor work thread to have common handler (Vasyl Gomonovych)  [Orabug: 39052955]\n- drivers: octeontx-edac: Add gic error decoder (Jayanthi Annadurai)  [Orabug: 39052955]\n- driver: edac: octeontx: offline/poison page on fatal/UE (Wladislav Wiebe)  [Orabug: 39052955]\n- driver: edac: octeontx: Improvements to GIC RAS handler (Chandrakala Chavva)  [Orabug: 39052955]\n- edac: octeontx: Add support for GIC RAS reporting (Jayanthi Annadurai)  [Orabug: 39052955]\n- edac: octeontx: Add error syndrome (Jayanthi Annadurai)  [Orabug: 39052955]\n- driver: edac: octeontx: Init MC grain (Vasyl Gomonovych)  [Orabug: 39052955]\n- driver: edac: octeontx: Add revision check for new pass of the chip (Chandrakala Chavva)  [Orabug: 39052955]\n- EDAC: Octeon: Init SDEI (Vasyl Gomonovych)  [Orabug: 39052955]\n- EDAC: Octeon: Add Marvell's OcteonTx2 SoC and CN10KA SoC EDAC driver (Vasyl Gomonovych)  [Orabug: 39052955]\n- octeontx2-af: Fix PF driver crash with kexec kernel booting (Anshumali Gaur)  [Orabug: 39052955]\n- octeontx2-af: add max_vfs module param (Tom Saeger)  [Orabug: 39052955]\n- PCI: boot time optimization (Harman Kalra)  [Orabug: 39052955]\n- uek-rpm: T93: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE (Dave Kleikamp)  [Orabug: 39052955]\n- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shradha Gupta)  [Orabug: 39065406]\n- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shradha Gupta)  [Orabug: 39065406]\n- vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Yishai Hadas)  [Orabug: 39065602]\n- vfio/mlx5: consider inflight SAVE during PRE_COPY (Yishai Hadas)  [Orabug: 39065602]\n- net/mlx5: Add IFC bits for migration state (Yishai Hadas)  [Orabug: 39065602]\n- vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Yishai Hadas)  [Orabug: 39065602]\n- vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Yishai Hadas)  [Orabug: 39065602]\n- vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Yishai Hadas)  [Orabug: 39065602]\n- exadata: tools: perf: use comm_ignore_digit for report, top (Stephen Brennan)  [Orabug: 39071703]\n- tools: perf: add comm_ignore_digit column (Stephen Brennan)  [Orabug: 39071703]\n- uek: kabi: Only do size allignment check on kabi_use when in 64 bit environment. (Yifei Liu)  [Orabug: 39089297]\n- scsi: target: core: Add emulation for REPORT IDENTIFYING INFORMATION (Gulam Mohamed)  [Orabug: 39098803]",
  "id": "ELSA-2026-50232",
  "ovalId": "oval:com.oracle.elsa:def:202650232",
  "source": "oracle_linux",
  "title": "ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-50232.html"
}