ELSA-2026-500150 Important: Unbreakable Enterprise kernel security update
ELSA-2026-53451 Moderate: Oracle Linux 10 gstreamer1-plugins-good security update
ELSA-2026-53435 Important: Oracle Linux 10 udisks2 security update
ELSA-2026-53846 Important: Oracle Linux 10 isns-utils security update
ELSA-2026-53330 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
ELSA-2026-49526 Important: Oracle Linux 10 osbuild-composer security update
ELSA-2026-34911 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
ELBA-2026-50139-0 Oracle Linux 10 tuned bug fix and enhancement update
ELBA-2026-39299 Oracle Linux 10 microcode_ctl bug fix and enhancement update
ELSA-2026-500162 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-53847 Important: Oracle Linux 9 isns-utils security update
ELSA-2026-53452 Moderate: Oracle Linux 9 gstreamer1-plugins-good security update
ELSA-2026-53365 Important: Oracle Linux 9 fence-agents security update
ELSA-2026-53329 Important: Oracle Linux 9 kernel security, bug fix, and enhancement update
ELSA-2026-52395 Important: Oracle Linux 9 postgresql security update
ELSA-2026-52674 Moderate: Oracle Linux 9 libarchive security update
ELSA-2026-47082 Important: Oracle Linux 9 pipewire security update
ELSA-2026-42877 Important: Oracle Linux 9 java-1.8.0-openjdk security update
ELBA-2026-39314 Oracle Linux 9 microcode_ctl bug fix and enhancement update
ELSA-2026-500162 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELBA-2026-500146 Oracle Linux 9 libguestfs bug fix update
ELSA-2026-500162 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELBA-2026-500147 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELSA-2026-53363 Important: Oracle Linux 8 fence-agents security update
ELSA-2026-50728 Important: Oracle Linux 8 ruby:3.3 security, bug fix, and enhancement update
ELBA-2026-47114 Oracle Linux 8 microcode_ctl bug fix and enhancement update
ELSA-2026-42877 Important: Oracle Linux 8 java-1.8.0-openjdk security update
ELBA-2026-500165 Oracle Linux 8 leapp-repository bug fix update
ELSA-2026-49513 Important: Oracle Linux 7 dovecot security update
ELSA-2026-8517 Important: Oracle Linux 7 libarchive security update
ELSA-2026-47176 Important: Oracle Linux 7 gstreamer1-plugins-bad-free security update
ELSA-2026-43575 Moderate: Oracle Linux 7 gnutls security update
ELSA-2026-41904 Important: Oracle Linux 7 evince security update
ELSA-2026-37397 Important: Oracle Linux 7 ruby security update
ELSA-2026-26564 Important: Oracle Linux 7 dovecot security update
ELSA-2026-13895 Important: Oracle Linux 7 sudo security update
ELSA-2026-500150 Important: Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2026-500150
http://linux.oracle.com/errata/ELSA-2026-500150.html
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-205.92.4.2.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-205.92.4.2.el10uek.x86_64.rpm
aarch64:
kernel-uek-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-doc-6.12.0-205.92.4.2.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-205.92.4.2.el10uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-205.92.4.2.el10uek.src.rpm
Related CVEs:
CVE-2025-38271
CVE-2025-38314
CVE-2025-39733
CVE-2025-39768
CVE-2025-39874
CVE-2025-39908
CVE-2025-40238
CVE-2025-68373
CVE-2025-68790
CVE-2026-31663
CVE-2026-43467
CVE-2026-46242
CVE-2026-46316
CVE-2026-46331
CVE-2026-52943
CVE-2026-53125
CVE-2026-53359
CVE-2026-53362
CVE-2026-64531
CVE-2026-64561
CVE-2026-68480
Description of changes:
[6.12.0-205.92.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug: 39844842]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39844812] {CVE-2026-68480}
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson) [Orabug: 39844799] {CVE-2026-64561}
[6.12.0-205.92.4.1]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [Orabug: 39816011] {CVE-2026-64531}
- Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon) [Orabug: 39812699]
- virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi) [Orabug: 39812697]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [Orabug: 39812085]
[6.12.0-205.92.4]
- f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() (Yongpeng Yang)
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Ji'an Zhou)
- MIPS: smp: report dying CPU to RCU in stop_this_cpu() (Jonas Jelonek)
- LoongArch: Report dying CPU to RCU in stop_this_cpu() (Huacai Chen)
- Revert "net: bonding: fix use-after-free in bond_xmit_broadcast()" (Kevin Berry)
- block: fix handling of dead zone write plugs (Damien Le Moal)
- Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
- Revert "PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support" (Sasha Levin)
- apparmor: fix use-after-free in rawdata dedup loop (Ruslan Valiyev)
- mmc: dw_mmc-rockchip: Add missing private data for very old controllers (Heiko Stuebner)
- sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long)
- net: ipv6: Make udp_tunnel6_xmit_skb() void (Petr Machata)
- dm cache policy smq: check allocation under invalidate lock (Guangshuo Li)
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)
- locking/mutex: Remove wakeups from under mutex::wait_lock (Peter Zijlstra)
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Hem Parekh)
- ipv4: account for fraggap on the paged allocation path (Wongi Lee) [Orabug: 39738617]
- inet: add indirect call wrapper for getfrag() calls (Eric Dumazet) [Orabug: 39738617]
- net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad) [Orabug: 39653091]
- net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad) [Orabug: 39653091]
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Vasily Gorbik) [Orabug: 39489132]
- scripts/sorttable: Allow matches to functions before function entry (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Steven Rostedt) [Orabug: 39489132]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Steven Rostedt) [Orabug: 39489132]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Steven Rostedt) [Orabug: 39489132]
- ftrace: Do not over-allocate ftrace memory (Guenter Roeck) [Orabug: 39489132]
- ftrace: Have ftrace pages output reflect freed pages (Steven Rostedt) [Orabug: 39489132]
- ftrace: Update the mcount_loc check of skipped entries (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Have mcount rela sort use direct values (Steven Rostedt) [Orabug: 39489132]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Use uint64_t for mcount sorting (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Sym (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Shdr (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Convert Elf_Ehdr to union (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Make compare_extable() into two functions (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Remove unneeded Elf_Rel (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Remove unused write functions (Steven Rostedt) [Orabug: 39489132]
- scripts/sorttable: Remove unused macro defines (Steven Rostedt) [Orabug: 39489132]
- xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [Orabug: 39262397] {CVE-2026-31663}
- xfrm: hold device only for the asynchronous decryption (Jianbo Liu) [Orabug: 39262397]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim) [Orabug: 39531622] {CVE-2026-46316}
- fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang) [Orabug: 39681042]
- mm: enforce resource limits for reserved VA mappings (Jianfeng Wang) [Orabug: 39681042]
- ipv6: account for fraggap on the paged allocation path (Wongi Lee) [Orabug: 39686467] {CVE-2026-53362}
- xen/ovmapi: terminate values passed to xenbus_write (Joe Jin) [Orabug: 39726311]
- xen/ovmapi: free queued events on release (Joe Jin) [Orabug: 39726311]
- xen/ovmapi: prevent duplicate app registration (Joe Jin) [Orabug: 39726311]
- xen/ovmapi: avoid raw user pointer access in get_next_event (Joe Jin) [Orabug: 39726311]
- xen/ovmapi: reject oversized posted event payloads (Joe Jin) [Orabug: 39726311]
[6.12.0-205.92.3]
- soc/pensando/bsm: add read-only access to A35 BSM from N1 (Hiren Mehta) [Orabug: 39710757]
- uek-rpm: update Salina emb4 drivers (Joseph Dobosenski) [Orabug: 39692334]
- Enable psci on UEK8 emb4 platform (Joseph Dobosenski) [Orabug: 39692334]
- arm64: amd: add dtb Makefile entries and Pensando defconfigs (Brad Larson) [Orabug: 39692334]
- arm64: dts: amd: add Salina SoC and boards (Brad Larson) [Orabug: 39692334]
- arm64: dts: amd: add Elba, Giglio and Deschutes boards (Brad Larson) [Orabug: 39692334]
- perf: arm-cmn: enable CMN PMU on AMD Pensando Salina (Brad Larson) [Orabug: 39692334]
- net: mctp-i2c: fix dynamic debug logging (Brad Larson) [Orabug: 39692334]
- hwmon: pmbus: add LTC3888 and TPS53659 support (Brad Larson) [Orabug: 39692334]
- mmc: sdhci-cadence: add AMD Pensando bounce buffer and HS400-ES support (Brad Larson) [Orabug: 39692334]
- spi: add AMD Pensando CPLD SPI multiplexer and Salina dw support (Brad Larson) [Orabug: 39692334]
- spi: cadence-quadspi: fix indirect write timeout on AMD Pensando (Brad Larson) [Orabug: 39692334]
- i2c: add AMD Pensando CPLD RD1173 SPI-to-I2C driver (Brad Larson) [Orabug: 39692334]
- i2c: designware: add AMD Pensando support (Brad Larson) [Orabug: 39692334]
- uio: add AMD Pensando UIO drivers (Brad Larson) [Orabug: 39692334]
- rtc: add AMD Pensando ELBA CPLD RTC (Brad Larson) [Orabug: 39692334]
- reset: add AMD Pensando ELBASR reset controller (Brad Larson) [Orabug: 39692334]
- mfd: add AMD Pensando ELBASR CPLD (Brad Larson) [Orabug: 39692334]
- EDAC: add AMD Pensando Elba and Salina memory controllers (Brad Larson) [Orabug: 39692334]
- irqchip: add AMD Pensando SoC interrupt controller (Brad Larson) [Orabug: 39692334]
- soc: pensando: add AMD Pensando SoC service drivers (Brad Larson) [Orabug: 39692334]
- arm64: traps: report AMD Pensando async SError as SIGBUS (Brad Larson) [Orabug: 39692334]
- dt-bindings: add AMD Pensando Elba, Giglio and Salina SoCs (Brad Larson) [Orabug: 39692334]
- Revert "mmc: sdhci-cadence: Support ADMA with bounce buffers" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "hwmon: (pmbus/ltc2978) Add support for ltc3888" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "hwmon: (pmbus/tps53679) Add support for tps53659" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "i2c: rd1173: Add Lattice SPI to I2C bus driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: dts: Add AMD Pensando SoC support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "soc/pensando: Add AMD Pensando SoC drivers" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: defconfig: Add AMD Pensando defconfig" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: Add AMD Pensando UIO support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "irqchip/pensando: Add AMD Pensando IRQ driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mtd: spi-nor: winbond: Add support for W25Q02NW" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "EDAC/elba: Add AMD Pensando Elba/Giglio SoC EDAC driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mfd: Add AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "rtc: elbacpld: Support RTC in AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "spi: dw-mmio: Add AMD Pensando Salina SoC support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: Enable platform SError handler" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "perf/arm-cmn: Enable AMD Pensando Salina SoC CMN PMU driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "i2c: designware: Support stuck SDA line recovery" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mmc: core: Use HPI to interrupt lengthy cache flush (#495)" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "irqchip/pensando: Fix partial of_iomap() leak on error (#505)" (Joseph Dobosenski) [Orabug: 39692334]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673856,39686459] {CVE-2026-53359}
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659418]
- net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 39652107]
- net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 39652107]
- net/mlx5: Fix EQ IRQ affinity notifier debug messages uek8 (Praveen Kumar Kannoju) [Orabug: 39594873]
- netfs: Fix read-gaps to remove netfs_folio from filled folio (David Howells) [Orabug: 39580474]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567285,39668752] {CVE-2026-46331}
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet) [Orabug: 39567285] {CVE-2026-46331}
- uek: kabi: update x86_64/aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 39531375]
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480767]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: split __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- mm/truncate: make partial truncation folio split aware of min_order (Jane Chu) [Orabug: 39215509]
- mm/memory-failure: improve large block size folio handling (Jane Chu) [Orabug: 39215509]
- mm/huge_memory: add split_huge_page_to_order() (Jane Chu) [Orabug: 39215509]
- fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209761]
[6.12.0-205.92.2]
- bnxt_en: bring back rtnl lock in bnxt_shutdown (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: add missing netdev lock management to bnxt_dl_reload_up (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: request unconditional ops lock (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: switch to netif_close (Stanislav Fomichev) [Orabug: 39589466]
- md: fix array_state=clear sysfs deadlock (Yu Kuai) [Orabug: 39190489,39668924] {CVE-2026-53125}
- md: fix return value of mddev_trylock (Xiao Ni) [Orabug: 39190489]
- md: avoid repeated calls to del_gendisk (Xiao Ni) [Orabug: 39190489,39668918] {CVE-2025-68373}
- md: delete mddev kobj before deleting gendisk kobj (Xiao Ni) [Orabug: 39190489]
- md: add legacy_async_del_gendisk mode (Xiao Ni) [Orabug: 39190489]
- md: fix create on open mddev lifetime regression (Yu Kuai) [Orabug: 39190489]
- md: Don't clear MD_CLOSING until mddev is freed (Xiao Ni) [Orabug: 39190489]
- md: call del_gendisk in control path (Xiao Ni) [Orabug: 39190489]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619387,39639984,39656679] {CVE-2026-52943}
[6.12.0-205.92.1]
- uek-rpm: generate symtypes during early FIPS module build (Saeed Mirzamohammadi) [Orabug: 39576442]
- net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38111998]
- Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39084664]
- uek-rpm: Enable MLXREG_DPU module (Alexandre Chartre) [Orabug: 38667152]
- net/mlx5: Fix crash when moving to switchdev mode (Patrisious Haddad) [Orabug: 38667152,39344020] {CVE-2026-43467}
- net/mlx5: Fix double unregister of HCA_PORTS component (Gerd Bayer) [Orabug: 38667152,39590860] {CVE-2025-68790}
- net/mlx5: Fix IPsec cleanup over MPV device (Patrisious Haddad) [Orabug: 38667152,38730559] {CVE-2025-40238}
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Lama Kayal) [Orabug: 38667152]
- net/mlx5: HWS, prevent rehash from filling up the queues (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix complex rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152,39590850] {CVE-2025-39768}
- net/mlx5: HWS, fix simple rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, Track matcher sizes individually (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Create STEs directly from matcher (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Export rule skip logic (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: Refactor devcom to return NULL on failure (Patrisious Haddad) [Orabug: 38667152]
- net/mlx5: Add net namespace support to devcom (Shay Drory) [Orabug: 38667152]
- net/mlx5: Lag, move devcom registration to LAG layer (Shay Drory) [Orabug: 38667152]
- net/mlx5: Refactor devcom to use match attributes (Shay Drory) [Orabug: 38667152]
- platform/mellanox: Fix spelling and comment clarity in Mellanox drivers (Alok Tiwari) [Orabug: 38667152]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Dan Carpenter) [Orabug: 38667152]
- RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Arnd Bergmann) [Orabug: 38667152]
- net/mlx5: HWS, make sure the uplink is the last destination (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Init mutex on the correct path (Vlad Dogaru) [Orabug: 38667152]
- mlxsw: core_thermal: Constify struct thermal_zone_device_ops (Christophe Jaillet) [Orabug: 38667152]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Dan Carpenter) [Orabug: 38667152]
- net/mlx5e: Allow setting MAC address of representors (Mark Bloch) [Orabug: 38667152]
- RDMA/mlx5: Avoid flexible array warning (Leon Romanovsky) [Orabug: 38667152]
- i2c: mlxbf: avoid 64-bit division (Arnd Bergmann) [Orabug: 38667152]
- i2c-mlxbf: Improve I2C bus timing configuration (Chris Babroski) [Orabug: 38667152]
- i2c-mlxbf: Add repeated start condition support (Chris Babroski) [Orabug: 38667152]
- net/mlx5e: Don't drop RTNL during firmware flash (Cosmin Ratiu) [Orabug: 38667152]
- net/mlx5: HWS, handle modify header actions dependency (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, register reformat actions with fw (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: SWS, fix reformat id error handling (Vlad Dogaru) [Orabug: 38667152]
- selftests: net: validate team flags propagation (Stanislav Fomichev) [Orabug: 38667152]
- vfio/mlx5: Enable the DMA link API (Leon Romanovsky) [Orabug: 38667152]
- vfio/mlx5: Rewrite create mkey flow to allow better code reuse (Leon Romanovsky) [Orabug: 38667152]
- vfio/mlx5: Explicitly use number of pages instead of allocated length (Leon Romanovsky) [Orabug: 38667152]
- i2c: mlxbf: Use str_read_write() helper (Fengwei) [Orabug: 38667152]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Patrisious Haddad) [Orabug: 38667152]
- net/mlx5: Use to_delayed_work() (Chen Ni) [Orabug: 38667152]
- net: mlxsw: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Vladimir Oltean) [Orabug: 38667152]
- net/mlx5: HWS, dump bad completion details (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, rework rehash loop (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix redundant extension of action templates (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix counting of rules in the matcher (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, force rehash when rule insertion failed (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, support complex matchers (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, introduce isolated matchers (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, expose polling function in header file (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, add definer function to get field name str (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: support software TX timestamp (Stanislav Fomichev) [Orabug: 38667152]
- RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Leon Romanovsky) [Orabug: 38667152]
- RDMA/umem: Store ODP access mask information in PFN (Leon Romanovsky) [Orabug: 38667152]
- platform/mellanox: mlxreg-dpu: Fix smatch warnings (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: nvsw-sn2200: Fix .items in nvsw_sn2201_busbar_hotplug (Nathan Chancellor) [Orabug: 38667152]
- platform: mellanox: nvsw-sn2200: Add support for new system flavour (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: mlx-platform: Add support for new Nvidia system (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: Cosmetic changes to improve code style (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: Introduce support of Nvidia smart switch (Vadim Pasternak) [Orabug: 38667152]
- platform/mellanox: mlxreg-dpu: Add initial support for Nvidia DPU (Vadim Pasternak) [Orabug: 38667152]
- net/mlx4_core: Adjust allocation type for buddy->bits (Kees Cook) [Orabug: 38667152]
- net/mlx5: HWS, Disallow matcher IP version mixing (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Colin Ian King) [Orabug: 38667152]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kees Cook) [Orabug: 38667152]
- bonding: Fix multiple long standing offload races (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Remove unneeded device check from validate_xmit_xfrm (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu) [Orabug: 38667152]
- net: ptp: introduce .supported_perout_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
- net: ptp: introduce .supported_extts_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
- igb: reject invalid external timestamp requests for 82580-based HW (Jacob Keller) [Orabug: 38667152]
- platform/mellanox: Rename field to improve code readability (Vadim Pasternak) [Orabug: 38667152]
- net/mlx5: HWS, Export action STE tables to debugfs (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Free unused action STE tables (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Cleanup matcher action STE table (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Use the new action STE pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Implement action STE pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Fix pool size optimization (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Add fullness tracking to pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Cleanup after pool refactoring (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Refactor pool implementation (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Make pool single resource (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Remove unused element array (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Fix matcher action template attach (Vlad Dogaru) [Orabug: 38667152]
- RDMA: Replace msecs_to_jiffies with secs_to_jiffies for timeout (Peng Jiang) [Orabug: 38667152]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Easwar Hariharan) [Orabug: 38667152]
- gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Joshua Washington) [Orabug: 38667152]
- net: lan743x: reject unsupported external timestamp requests (Jacob Keller) [Orabug: 38667152]
- renesas: reject PTP_STRICT_FLAGS as unsupported (Jacob Keller) [Orabug: 38667152]
- eth: bnxt: remove most dependencies on RTNL (Stanislav Fomichev) [Orabug: 38667152]
- dma-mapping: remove an outdated comment from dma-map-ops.h (Sui Jingfeng) [Orabug: 38667152]
- Revert "RDMA/core: Silence oversized kvmalloc() warning" (Mikhael Goikhman) [Orabug: 38667152]
- eth: bnxt: fix deadlock when xdp is attached or detached (Taehee Yoo) [Orabug: 38667152]
- xdp: create locked/unlocked instances of xdp redirect target setters (Joshua Washington) [Orabug: 38667152]
- gve: introduce config-based allocation for XDP (Joshua Washington) [Orabug: 38667152]
- gve: Add RSS cache for non RSS device option scenario (Ziwei Xiao) [Orabug: 38667152]
- virtio_pci: drop kernel.h (Michael S. Tsirkin) [Orabug: 38667152]
- dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Pranjal Shrivastava) [Orabug: 38667152]
- macsec: sync features on RTM_NEWLINK (Stanislav Fomichev) [Orabug: 38667152,39590858] {CVE-2025-39874}
- net: dev_ioctl: take ops lock in hwtstamp lower paths (Carolina Jubran) [Orabug: 38667152,39590854] {CVE-2025-39908}
- hamradio: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
- net: lapbether: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
- macsec: set IFF_UNICAST_FLT priv flag (Stanislav Fomichev) [Orabug: 38667152]
- team: replace team lock with rtnl lock (Stanislav Fomichev) [Orabug: 38667152,39590857] {CVE-2025-39733}
- net: prevent a NULL deref in rtnl_create_link() (Eric Dumazet) [Orabug: 38667152,39590851] {CVE-2025-38271}
- hv_netvsc: fix potential deadlock in netvsc_vf_setxdp() (Saurabh Singh Sengar) [Orabug: 38667152]
- virtio-pci: Fix result size returned for the admin command completion (Israel Rukshin) [Orabug: 38667152,39590859] {CVE-2025-38314}
- af_packet: move notifier's packet_dev_mc out of rcu critical section (Stanislav Fomichev) [Orabug: 38667152]
- team: grab team lock during team_change_rx_flags (Stanislav Fomichev) [Orabug: 38667152]
- net: devmem: fix kernel panic when netlink socket close after module unload (Taehee Yoo) [Orabug: 38667152]
- net: Lock lower level devices when updating features (Cosmin Ratiu) [Orabug: 38667152]
- net: add missing instance lock to dev_set_promiscuity (Stanislav Fomichev) [Orabug: 38667152]
- net: Lock netdevices during dev_shutdown (Cosmin Ratiu) [Orabug: 38667152]
- net: fix the missing unlock for detached devices (Jakub Kicinski) [Orabug: 38667152]
- virtio_pci: Use self group type for cap commands (Daniel Jurgens) [Orabug: 38667152]
- net: don't try to ops lock uninitialized devs (Jakub Kicinski) [Orabug: 38667152]
- net: don't mix device locking in dev_close_many() calls (Jakub Kicinski) [Orabug: 38667152]
- bonding: hold ops lock around get_link (Stanislav Fomichev) [Orabug: 38667152]
- rtnetlink: Fix bad unlock balance in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- bpf: add missing ops lock around dev_xdp_attach_link (Stanislav Fomichev) [Orabug: 38667152]
- eth: gve: add missing netdev locks on reset and shutdown paths (Jakub Kicinski) [Orabug: 38667152]
- net: fix use-after-free in the netdev_nl_sock_priv_destroy() (Taehee Yoo) [Orabug: 38667152]
- net: lapbether: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
- net: move replay logic to tc_modify_qdisc (Stanislav Fomichev) [Orabug: 38667152]
- hamradio: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
- bpf: fix a possible NULL deref in bpf_map_offload_map_alloc() (Eric Dumazet) [Orabug: 38667152]
- net: Prevent use after free in netif_napi_set_irq_locked() (Dan Carpenter) [Orabug: 38667152]
- iavf: fix circular lock dependency with netdev_lock (Jacob Keller) [Orabug: 38667152]
- s390/qeth: move netif_napi_add_tx() and napi_enable() from under BH (Alexandra Winter) [Orabug: 38667152]
- iavf: Fix a locking bug in an error path (Bart Van Assche) [Orabug: 38667152]
- wifi: mt76: move napi_enable() from under BH (Jakub Kicinski) [Orabug: 38667152]
- eth: via-rhine: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- eth: niu: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- eth: 8139too: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- net: mvneta: fix locking in mvneta_cpu_online() (Harshit Mogalapalli) [Orabug: 38667152]
- net: destroy dev->lock later in free_netdev() (Eric Dumazet) [Orabug: 38667152]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Eric Dumazet) [Orabug: 38667152]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Christophe Jaillet) [Orabug: 38667152]
- xdp: double protect netdev->xdp_flags with netdev->lock (Jakub Kicinski) [Orabug: 38667152]
- netdev: add "ops compat locking" helpers (Jakub Kicinski) [Orabug: 38667152]
- net: designate XSK pool pointers in queues as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
- net: avoid potential race between netdev_get_by_index_lock() and netns switch (Jakub Kicinski) [Orabug: 38667152]
- net: hold instance lock during NETDEV_REGISTER/UP (Stanislav Fomichev) [Orabug: 38667152]
- net: switch to netif_disable_lro in inetdev_init (Stanislav Fomichev) [Orabug: 38667152]
- net: protect rxq->mp_params with the instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: designate queue -> napi linking as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
- net: designate queue counts as "double ops protected" by instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: explain "protection types" for the instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: constify dev pointer in misc instance lock helpers (Jakub Kicinski) [Orabug: 38667152]
- net: remove netif_set_real_num_rx_queues() helper for when SYSFS=n (Jakub Kicinski) [Orabug: 38667152]
- net: bubble up taking netdev instance lock to callers of net_devmem_unbind_dmabuf() (Jakub Kicinski) [Orabug: 38667152]
- net: reorder dev_addr_sem lock (Stanislav Fomichev) [Orabug: 38667152]
- Revert "net: replace dev_addr_sem with netdev instance lock" (Stanislav Fomichev) [Orabug: 38667152]
- net: drop rtnl_lock for queue_mgmt operations (Stanislav Fomichev) [Orabug: 38667152]
- net: add granular lock for the netdev netlink socket (Stanislav Fomichev) [Orabug: 38667152]
- net: create netdev_nl_sock to wrap bindings list (Stanislav Fomichev) [Orabug: 38667152]
- net: add helpers for setting a memory provider on an rx queue (David Wei) [Orabug: 38667152]
- net: page_pool: add memory provider helpers (Pavel Begunkov) [Orabug: 38667152]
- net: prepare for non devmem TCP memory providers (Pavel Begunkov) [Orabug: 38667152]
- net: page_pool: add a mp hook to unregister_netdevice* (Pavel Begunkov) [Orabug: 38667152]
- net: page_pool: add callback for mp info printing (Pavel Begunkov) [Orabug: 38667152]
- netdev: add io_uring memory provider info (David Wei) [Orabug: 38667152]
- net: generalise net_iov chunk owners (Pavel Begunkov) [Orabug: 38667152]
- net: prefix devmem specific helpers (Pavel Begunkov) [Orabug: 38667152]
- page_pool: disable sync for cpu for dmabuf memory provider (Mina Almasry) [Orabug: 38667152]
- net: page_pool: create page_pool_alloc_netmem (Mina Almasry) [Orabug: 38667152]
- net: page_pool: rename page_pool_alloc_netmem to *_netmems (Mina Almasry) [Orabug: 38667152]
- net: move misc netdev_lock flavors to a separate header (Jakub Kicinski) [Orabug: 38667152]
- net: add option to request netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
- net: replace dev_addr_sem with netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ndo_bpf (Stanislav Fomichev) [Orabug: 38667152]
- net: disallow setup single buffer XDP when tcp-data-split is enabled. (Taehee Yoo) [Orabug: 38667152]
- net: ethtool: add hds_config member in ethtool_netdev_state (Taehee Yoo) [Orabug: 38667152]
- net: hold netdev instance lock during sysfs operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ioctl operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during rtnetlink operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during queue operations (Stanislav Fomichev) [Orabug: 38667152]
- net: move aRFS rmap management and CPU affinity to core (Ahmed Zaki) [Orabug: 38667152]
- net: warn if NAPI instance wasn't shut down (Jakub Kicinski) [Orabug: 38667152]
- net: protect napi->irq with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- bnxt: Add support for persistent NAPI config (Joe Damato) [Orabug: 38667152]
- gve: Map NAPI instances to queues (Joe Damato) [Orabug: 38667152]
- gve: Map IRQs to NAPI instances (Joe Damato) [Orabug: 38667152]
- net: devmem: don't call queue stop / start when the interface is down (Jakub Kicinski) [Orabug: 38667152]
- net: refactor netdev_rx_queue_restart() to use local qops (Jakub Kicinski) [Orabug: 38667152]
- net: hold netdev instance lock during qdisc ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
- net: sched: wrap doit/dumpit methods (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during nft ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ndo_open/ndo_stop (Stanislav Fomichev) [Orabug: 38667152]
- net: plumb extack in __dev_change_net_namespace() (Nicolas Dichtel) [Orabug: 38667152]
- net: advertise netns_immutable property via netlink (Nicolas Dichtel) [Orabug: 38667152]
- net: protect threaded status of NAPI with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: protect NAPI enablement with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: protect netdev->napi_list with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: make sure we retain NAPI ordering on netdev->napi_list (Jakub Kicinski) [Orabug: 38667152]
- net: add netdev->up protected by netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: add helpers for lookup and walking netdevs under netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: warn during dump if NAPI list is not sorted (Jakub Kicinski) [Orabug: 38667152]
- net: make netdev_lock() protect netdev->reg_state (Jakub Kicinski) [Orabug: 38667152]
- net: add netdev_lock() / netdev_unlock() helpers (Jakub Kicinski) [Orabug: 38667152]
- eth: iavf: extend the netdev_lock usage (Jakub Kicinski) [Orabug: 38667152]
- net: cleanup init_dummy_netdev_core() (Jakub Kicinski) [Orabug: 38667152]
- net: remove init_dummy_netdev() (Jakub Kicinski) [Orabug: 38667152]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Return int from rtnl_af_register(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Clean up rtnl_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Clean up rtnl_dellink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move ops->validate to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call validate_linkmsg() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Kuniyuki Iwashima) [Orabug: 38667152]
- iavf: add support to exchange qos capabilities (Sudheer Mogilappagari) [Orabug: 38667152]
- testing: net-drv: add basic shaper test (Paolo Abeni) [Orabug: 38667152]
- iavf: Add net_shaper_ops support (Sudheer Mogilappagari) [Orabug: 38667152]
- mm/hmm: provide generic DMA managing logic (Leon Romanovsky) [Orabug: 38667152]
- mm/hmm: let users to tag specific PFN with DMA mapped bit (Leon Romanovsky) [Orabug: 38667152]
- docs: core-api: document the IOVA-based API (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: add a dma_need_unmap helper (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: Implement link/unlink ranges API (Leon Romanovsky) [Orabug: 38667152]
- iommu/dma: Factor out a iommu_dma_map_swiotlb helper (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: Provide an interface to allow allocate IOVA (Leon Romanovsky) [Orabug: 38667152]
- iommu: add kernel-doc for iommu_unmap_fast (Leon Romanovsky) [Orabug: 38667152]
- iommu: generalize the batched sync after map interface (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: move the PCI P2PDMA mapping helpers to pci-p2pdma.h (Christoph Hellwig) [Orabug: 38667152]
- PCI/P2PDMA: Refactor the p2pdma mapping helpers (Christoph Hellwig) [Orabug: 38667152]
- net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Kees Cook) [Orabug: 38667152]
- compiler_types: Introduce __nonstring_array (Kees Cook) [Orabug: 38667152]
- net: freescale: use ethtool string helpers (Rosen Penev) [Orabug: 38667152]
- vfio/pci: drop nth_page() usage within SG entry (David Hildenbrand) [Orabug: 38667152]
- mm: alloc_pages_bulk: rename API (Luiz Capitulino) [Orabug: 38667152]
- mm: alloc_pages_bulk_noprof: drop page_list argument (Luiz Capitulino) [Orabug: 38667152]
- vfio/virtio: Add PRE_COPY support for live migration (Yishai Hadas) [Orabug: 38667152]
- vfio/virtio: Add support for the basic live migration functionality (Yishai Hadas) [Orabug: 38667152]
- virtio-pci: Introduce APIs to execute device parts admin commands (Yishai Hadas) [Orabug: 38667152]
- virtio: Manage device and driver capabilities via the admin commands (Yishai Hadas) [Orabug: 38667152]
- virtio: Extend the admin command to include the result size (Yishai Hadas) [Orabug: 38667152]
- virtio_pci: Introduce device parts access commands (Yishai Hadas) [Orabug: 38667152]
ELSA-2026-53451 Moderate: Oracle Linux 10 gstreamer1-plugins-good security update
Oracle Linux Security Advisory ELSA-2026-53451
http://linux.oracle.com/errata/ELSA-2026-53451.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
gstreamer1-plugins-good-1.26.7-2.el10_2.3.x86_64.rpm
gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.3.x86_64.rpm
aarch64:
gstreamer1-plugins-good-1.26.7-2.el10_2.3.aarch64.rpm
gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.3.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gstreamer1-plugins-good-1.26.7-2.el10_2.3.src.rpm
Related CVEs:
CVE-2026-18649
Description of changes:
[1.26.7-2.3]
- Fix excessive memory allocation from malicious RTP fragmentation unit
packets in rtph264depay/rtph265depay (CVE-2026-18649)
Resolves: RHEL-224158
ELSA-2026-53435 Important: Oracle Linux 10 udisks2 security update
Oracle Linux Security Advisory ELSA-2026-53435
http://linux.oracle.com/errata/ELSA-2026-53435.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
libudisks2-2.11.0-2.0.1.el10_2.1.x86_64.rpm
libudisks2-devel-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-iscsi-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-lsm-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-lvm2-2.11.0-2.0.1.el10_2.1.x86_64.rpm
aarch64:
libudisks2-2.11.0-2.0.1.el10_2.1.aarch64.rpm
libudisks2-devel-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-iscsi-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-lsm-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-lvm2-2.11.0-2.0.1.el10_2.1.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/udisks2-2.11.0-2.0.1.el10_2.1.src.rpm
Related CVEs:
CVE-2026-7867
Description of changes:
[2.11.0-2.0.1.el10_2.1]
- Enable btrfs support for OL supported arches [Orabug: 37464632]
[2.11.0-2.1]
- Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)
ELSA-2026-53846 Important: Oracle Linux 10 isns-utils security update
Oracle Linux Security Advisory ELSA-2026-53846
http://linux.oracle.com/errata/ELSA-2026-53846.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
isns-utils-0.103-1.el10_2.1.x86_64.rpm
isns-utils-libs-0.103-1.el10_2.1.x86_64.rpm
aarch64:
isns-utils-0.103-1.el10_2.1.aarch64.rpm
isns-utils-libs-0.103-1.el10_2.1.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/isns-utils-0.103-1.el10_2.1.src.rpm
Related CVEs:
CVE-2026-55995
Description of changes:
[0.103-1.1]
- Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995)
Resolves: RHEL-219472
ELSA-2026-53330 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
Oracle Linux Security Advisory ELSA-2026-53330
http://linux.oracle.com/errata/ELSA-2026-53330.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.46.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.46.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.46.1.el10_2.x86_64.rpm
libperf-6.12.0-211.46.1.el10_2.x86_64.rpm
perf-6.12.0-211.46.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.46.1.el10_2.x86_64.rpm
rtla-6.12.0-211.46.1.el10_2.x86_64.rpm
rv-6.12.0-211.46.1.el10_2.x86_64.rpm
aarch64:
kernel-cross-headers-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.aarch64.rpm
libperf-6.12.0-211.46.1.el10_2.aarch64.rpm
perf-6.12.0-211.46.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.46.1.el10_2.aarch64.rpm
rtla-6.12.0-211.46.1.el10_2.aarch64.rpm
rv-6.12.0-211.46.1.el10_2.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.46.1.el10_2.src.rpm
Related CVEs:
CVE-2024-53143
CVE-2025-71072
CVE-2026-23415
CVE-2026-31488
CVE-2026-52923
CVE-2026-64368
CVE-2026-64531
Description of changes:
[6.12.0-211.46.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64
