# CVE-2025-68737: kernel-uek: [6.12.0-201.74.2.1] - Revert 'rds: Drop rds conn in connect worker if not in down state.' (Vijayendra Suman) [Orabug... CVE-2025-68737 is fixed in 35 products on 1 platform, first by ELSA-2026-50232, released April 15, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2025-68737 - Priority: High - CVSS: n/a (IMPORTANT) - EPSS: 0.0017 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Apr 15, 2026 ## Description [6.12.0-201.74.2.1] - Revert 'rds: Drop rds conn in connect worker if not in down state.' (Vijayendra Suman) [Orabug: 39200413] - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jens Axboe) [Orabug: 39202438] - ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 39202432] {CVE-2025-40135} - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [Orabug: 39202431] {CVE-2026-23004} [6.12.0-201.74.2] - kabi: update kABI files for FIPS (Saeed Mirzamohammadi) [Orabug: 38667144] - RDMA/mlx5: Fix ucaps init error flow (Maher Sanalla) [Orabug: 38667144] - eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring (Miaoqian Lin) [Orabug: 38667144] - RDMA/ucaps: Avoid format-security warning (Arnd Bergmann) [Orabug: 38667144] - net/mlx5: fs, fix UAF in flow counter release (Moshe Shemesh) [Orabug: 38667144] - net/mlx5: Not returning mlx5_link_info table when speed is unknown (Li Tian) [Orabug: 38667144] - net/mlx5: CT: Use the correct counter offset (Vlad Dogaru) [Orabug: 38667144] - net/mlx5: Reset bw_share field when changing a node's parent (Carolina Jubran) [Orabug: 38667144] - net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Shahar Shitrit) [Orabug: 38667144] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Carolina Jubran) [Orabug: 38667144] - mlx5: Fix default values in create CQ (Akiva Goldberger) [Orabug: 38667144] - net/mlx5e: Prepare for using different CQ doorbells (Cosmin Ratiu) [Orabug: 38667144] - net/mlx5: Store the global doorbell in mlx5_priv (Cosmin Ratiu) [Orabug: 38667144] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Cosmin Ratiu) [Orabug: 38667144] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Yishai Hadas) [Orabug: 38667144] - RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Mark Bloch) [Orabug: 38667144] - eth: mlx4: select PAGE_POOL (Greg Thelen) [Orabug: 38667144] - net/mlx5e: TC, Don't offload CT commit if it's the last action (Jianbo Liu) [Orabug: 38667144] - net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Paul Blakey) [Orabug: 38667144] - net/mlx5: Update pfnum retrieval for devlink port attributes (Shay Drory) [Orabug: 38667144] - net/mlx5: fw reset, check bridge accessibility at earlier stage (Amir Tzin) [Orabug: 38667144] - net/mlx5: Lag, use port selection tables when available (Mark Bloch) [Orabug: 38667144] - net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Tariq Toukan) [Orabug: 38667144] - net/mlx5: Start health poll after enable hca (Moshe Shemesh) [Orabug: 38667144] - net/mlx5: LAG, reload representors on LAG creation failure (Mark Bloch) [Orabug: 38667144] - mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions (WangYuli) [Orabug: 38667144] - mlxsw: Add VXLAN bridge ports to same hardware domain as physical bridge ports (Amit Cohen) [Orabug: 38667144] - mlxsw: spectrum_switchdev: Move mlxsw_sp_bridge_vxlan_join() (Amit Cohen) [Orabug: 38667144] - mlxsw: spectrum_switchdev: Add an internal API for VXLAN leave (Amit Cohen) [Orabug: 38667144] - mlxsw: spectrum: Call mlxsw_sp_bridge_vxlan_{join, leave}() for VLAN-aware bridge (Amit Cohen) [Orabug: 38667144] - mlxsw: Trap ARP packets at layer 2 instead of layer 3 (Amit Cohen) [Orabug: 38667144] - net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Tariq Toukan) [Orabug: 38667144] - net/mlx5e: Use right API to free bitmap memory (Mark Zhang) [Orabug: 38667144] - net/mlx5: Remove NULL check before dev_{put, hold} (Gal Pressman) [Orabug: 38667144] - net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Maxim Mikityanskiy) [Orabug: 38667144] - i2c: mlxbf: Use readl_poll_timeout_atomic() for polling (Andy Shevchenko) [Orabug: 38667144] - net/mlx5e: Expose port reset cycle recovery counter via ethtool (Yael Chemla) [Orabug: 38667144] - net/mlx5e: Get counter group size by FW capability (Yael Chemla) [Orabug: 38667144] - net/mlx5e: Access PHY layer counter group as other counter groups (Yael Chemla) [Orabug: 38667144] - net/mlx5e: Ensure each counter group uses its PCAM bit (Yael Chemla) [Orabug: 38667144] - leds: mlxcpld: Remove unused ACPI header inclusion (Andy Shevchenko) [Orabug: 38667144] - net/mlx5: HWS, log the unsupported mask in definer (Yevgeny Kliteynik) [Orabug: 38667144] - net/mlx5: HWS, use list_move() instead of del/add (Yevgeny Kliteynik) [Orabug: 38667144] - net/mlx5: HWS, remove unused code for alias flow tables (Yevgeny Kliteynik) [Orabug: 38667144] - RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Michael Guralnik) [Orabug: 38667144] - RDMA/mlx5: Support optional-counters binding for QPs (Patrisious Haddad) [Orabug: 38667144] - RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Patrisious Haddad) [Orabug: 38667144] - RDMA/ionic: Implement device stats ops (Abhijit Gangurde) [Orabug: 38667144] - RDMA/core: Pass port to counter bind/unbind operations (Patrisious Haddad) [Orabug: 38667144] - Revert 'RDMA/ionic: Implement device stats ops' (Qing Huang) [Orabug: 38667144] - RDMA/core: Add support to optional-counters binding configuration (Patrisious Haddad) [Orabug: 38667144] - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Patrisious Haddad) [Orabug: 38667144] - RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Patrisious Haddad) [Orabug: 38667144] - net/mlx5: Add support for setting parent of nodes (Carolina Jubran) [Orabug: 38667144] - net/mlx5: Preserve rate settings when creating a rate node (Carolina Jubran) [Orabug: 38667144] - net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Carolina Jubran) [Orabug: 38667144] - net/mlx5: Rename devlink rate parent set function for leaf nodes (Carolina Jubran) [Orabug: 38667144] - net/mlx5: fs, add support for dest flow sampler HWS action (Moshe Shemesh) [Orabug: 38667144] - net/mlx5: fs, add support for flow meters HWS action (Moshe Shemesh) [Orabug: 38667144] - net/mlx5: fs, add API for sharing HWS action by refcount (Moshe Shemesh) [Orabug: 38667144] - netdevsim: 'support' multi-buf XDP (Jakub Kicinski) [Orabug: 38667144] - net/mlx5: Avoid unnecessary use of comma operator (Simon Horman) [Orabug: 38667144] - mmc: sdhci-of-dwcmshc: Change to dwcmshc_phy_init for reusing codes (Jaehoon Chung) [Orabug: 38667144] - net/mlx5: Add IFC bits for PPCNT recovery counters group (Yael Chemla) [Orabug: 38667144] - RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Patrisious Haddad) [Orabug: 38667144] - RDMA/mlx5: Check enabled UCAPs when creating ucontext (Chiara Meiohas) [Orabug: 38667144] - RDMA/uverbs: Add support for UCAPs in context creation (Chiara Meiohas) [Orabug: 38667144] - RDMA/mlx5: Create UCAP char devices for supported device capabilities (Chiara Meiohas) [Orabug: 38667144] - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Chiara Meiohas) [Orabug: 38667144] - net/mlx5: fs, add RDMA TRANSPORT steering domain support (Patrisious Haddad) [Orabug: 38667144] - net/mlx5: Query ADV_RDMA capabilities (Patrisious Haddad) [Orabug: 38667144] - net/mlx5: Limit non-privileged commands (Chiara Meiohas) [Orabug: 38667144] - net/mlx5: Allow the throttle mechanism to be more dynamic (Chiara Meiohas) [Orabug: 38667144] - net/mlx5: Add RDMA_CTRL HW capabilities (Chiara Meiohas) [Orabug: 38667144] - net/mlx5e: Properly match IPsec subnet addresses (Leon Romanovsky) [Orabug: 38667144] - net/mlx5e: Separate address related variables to be in struct (Leon Romanovsky) [Orabug: 38667144] - net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Amir Tzin) [Orabug: 38667144] - net/mlx5e: Enable lanes configuration when auto-negotiation is off (Shahar Shitrit) [Orabug: 38667144] - net/mlx5: Refactor link speed handling with mlx5_link_info struct (Shahar Shitrit) [Orabug: 38667144] - net: rename netns_local to netns_immutable (Nicolas Dichtel) [Orabug: 38667144] - RDMA/mlx5: Reorder capability check last (Christian Gottsche) [Orabug: 38667144] - net/mlx5: Add trust lockdown error to health syndrome print function (Shahar Shitrit) [Orabug: 38667144] - net/mlx5: Expose crr in health buffer (Shahar Shitrit) [Orabug: 38667144] - net/mlx5: Log health buffer data on any syndrome (Moshe Shemesh) [Orabug: 38667144] - net/mlx5: Remove newline at the end of a netlink error message (Gal Pressman) [Orabug: 38667144] - net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva) [Orabug: 38667144] - net/mlx5e: Symmetric OR-XOR RSS hash control (Gal Pressman) [Orabug: 38667144] - ethtool: Symmetric OR-XOR RSS hash (Gal Pressman) [Orabug: 38667144] - net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Thorsten Blum) [Orabug: 38667144] - net/mlx5: Add new health syndrome error and crr bit offset (Shahar Shitrit) [Orabug: 38667144] - xfrm: provide common xdo_dev_offload_ok callback implementation (Leon Romanovsky) [Orabug: 38667144] - xfrm: rely on XFRM offload (Leon Romanovsky) [Orabug: 38667144] - net/mlx5e: Separate extended link modes request from link modes type selection (Shahar Shitrit) [Orabug: 38667144] - net/mlx5e: Change eth_proto parameter naming (Shahar Shitrit) [Orabug: 38667144] - net/mlx5e: Introduce ptys2ethtool_process_link() (Shahar Shitrit) [Orabug: 38667144] - net/mlx5e: Refactor ptys2ethtool_adver_link() (Shahar Shitrit) [Orabug: 38667144] - net/mlx5: Bridge, correct config option description (Cosmin Ratiu) [Orabug: 38667144] - netdevsim: call napi_schedule from a timer context (Breno Leitao) [Orabug: 38667144] - eth: mlx4: use the page pool for Rx buffers (Jakub Kicinski) [Orabug: 38667144] - eth: mlx4: remove the local XDP fast-recycling ring (Jakub Kicinski) [Orabug: 38667144] - eth: mlx4: create a page pool for Rx (Jakub Kicinski) [Orabug: 38667144] - net/mlx5: Add sensor name to temperature event message (Shahar Shitrit) [Orabug: 38667144] - net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Shahar Shitrit) [Orabug: 38667144] - net/mlx5e: Expose RSS via devlink rx reporter diagnose (Amir Tzin) [Orabug: 38667144] - net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Amir Tzin) [Orabug: 38667144] - net/mlx5e: Move RQs diagnose to a dedicated function (Amir Tzin) [Orabug: 38667144] - mlxsw: Enable Tx checksum offload (Ido Schimmel) [Orabug: 38667144] - net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Gal Pressman) [Orabug: 38667144] - net/mlx5: Remove stray semicolon in LAG port selection table creation (Gal Pressman) [Orabug: 38667144] - net/mlx5e: Support FEC settings for 200G per lane link modes (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Add support for 200Gbps per lane link modes (Jianbo Liu) [Orabug: 38667144] - ethtool: Add support for 200Gbps per lane link modes (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Generate PPS IN event on new function for shared clock (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Support one PTP device per hardware clock (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Move PPS notifier and out_work to clock_state (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Add devcom component for the clock shared by functions (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Add init and destruction functions for a single HW clock (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Change parameters for PTP internal functions (Jianbo Liu) [Orabug: 38667144] - net/mlx5: Add helper functions for PTP callbacks (Jianbo Liu) [Orabug: 38667144] - mlxsw: spectrum_router: Remove unused functions (Dr. David Alan Gilbert) [Orabug: 38667144] - net/mlx5: Remove unused mlx5dr_domain_sync (Dr. David Alan Gilbert) [Orabug: 38667144] - mlx4: Remove unused functions (Dr. David Alan Gilbert) [Orabug: 38667144] - platform: mellanox: mlx-platform: Change register name (Vadim Pasternak) [Orabug: 38667144] - platform: mellanox: mlx-platform: Cosmetic changes (Vadim Pasternak) [Orabug: 38667144] - mellanox: Relocate mlx-platform driver (Vadim Pasternak) [Orabug: 38667144] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Easwar Hariharan) [Orabug: 38667144] - ktime: Add us_to_ktime() (David Howells) [Orabug: 38667144] - Revert 'mlx5: Fix default values in create CQ' (Qing Huang) [Orabug: 38667144] - net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju) [Orabug: 38915249] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Inseo An) [Orabug: 39044468] {CVE-2026-23231} - scsi: core: Fix error handling for scsi_alloc_sdev() (Junxiao Bi) [Orabug: 39104869] - scsi: core: Fix refcount leak for tagset_refcnt (Junxiao Bi) [Orabug: 39104869] - scsi: core: Move two statements (Bart Van Assche) [Orabug: 39104869] - vfio: Adapt to upstream uAPI for VFIO_PRECOPY_INFO_REINIT (Maciej S. Szmigiero) [Orabug: 39121644] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson) [Orabug: 39153394] {CVE-2026-23401} [6.12.0-201.74.1] - selftests/bpf: Add overwrite mode test for BPF ring buffer (Xu Kuohai) [Orabug: 38717758] - bpf: Add overwrite mode for BPF ring buffer (Xu Kuohai) [Orabug: 38717758] - uek-rpm: Ensure --with onosonly skips building container rpms (Vijay Kumar) [Orabug: 38905604] - nvme-auth: use hkdf_expand_label() (Chris Leech) [Orabug: 38993277] - nvme: spelling fixes (Yi Zhang) [Orabug: 38993277] - nvme-auth: add hkdf_expand_label() (Chris Leech) [Orabug: 38993277] - nvme-auth: update bi_directional flag (Martin George) [Orabug: 38993277] - nvme-auth: update sc_c in host response (Martin George) [Orabug: 38993277] - nvme-tcp: remove redundant check to ctrl->opts (Hannes Reinecke) [Orabug: 38993277] - nvme-tcp: send only permitted commands for secure concat (Martin George) [Orabug: 38993277] - nvme-fabrics: reset admin connection for secure concatenation (Hannes Reinecke) [Orabug: 38993277] - nvme-tcp: request secure channel concatenation (Hannes Reinecke) [Orabug: 38993277] - nvme-keyring: add nvme_tls_psk_refresh() (Hannes Reinecke) [Orabug: 38993277] - nvme: add nvme_auth_derive_tls_psk() (Hannes Reinecke) [Orabug: 38993277] - nvme: add nvme_auth_generate_digest() (Hannes Reinecke) [Orabug: 38993277] - nvme: add nvme_auth_generate_psk() (Hannes Reinecke) [Orabug: 38993277] - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Hannes Reinecke) [Orabug: 38993277] - ONOS: Enable OPTOE EEPROM and ASF I2C modules (Vijay Kumar) [Orabug: 39001522] - eeprom: optoe: drop i2c_device_id from probe() (Vijay Kumar) [Orabug: 39001522] - ext4: show 'shutdown' hint when ext4 is forced to shutdown (Baokun Li) [Orabug: 39002345] - ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Baokun Li) [Orabug: 39002345] - ext4: correct behavior under errors=remount-ro mode (Baokun Li) [Orabug: 39002345] - ext4: add more ext4_emergency_state() checks around sb_rdonly() (Baokun Li) [Orabug: 39002345] - ext4: add ext4_emergency_state() helper function (Baokun Li) [Orabug: 39002345] - ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Baokun Li) [Orabug: 39002345] - ext4: convert EXT4_FLAGS_* defines to enum (Baokun Li) [Orabug: 39002345] - PCI: Fix BUILD_BUG_ON usage for old gcc (Alex Williamson) [Orabug: 39021289] - PCI: Batch BAR sizing operations (Alex Williamson) [Orabug: 39021289] - uek-rpm: Turn USB_XHCI_PCI_RENESAS to a builtin option (Harshit Mogalapalli) [Orabug: 39022939] - mm/page_alloc: ignore the exact initial compaction result (Vlastimil Babka) [Orabug: 39037823] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Vlastimil Babka) [Orabug: 39037823] - ONOS: Replace strlcpy with strscpy in bcm-hsdk-gpl (Vijay Kumar) [Orabug: 39042061] - ONOS: Build fix for bcm-hsdk-gpl drivers (Vijay Kumar) [Orabug: 39042061] - uek-rpm/config-x86_64-onos: Add configs for Broadcom HSDK GPL drivers (Vijay Kumar) [Orabug: 39042061] - bcm-hsdk-gpl: Build Broadcom HSDK GPL drivers (Vijay Kumar) [Orabug: 39042061] - drivers/platform: Add Broadcom HSDK GPL drivers (Vijay Kumar) [Orabug: 39042061] - minke-fan-cpld: support partial fan insertion (Divyarajsinh Jhala) [Orabug: 39043148] - src: scale pwm to respect pali2 cpld min pwm req (arista-hpandya) [Orabug: 39043148] - src: add support for FAN-7311H-RED (arista-hpandya) [Orabug: 39043148] - minke-fan-cpld: support platform specific addresses (Divyarajsinh Jhala) [Orabug: 39043148] - drivers: add rundle support to minke fan driver (arista-hpandya) [Orabug: 39043148] - driver: fix rook fan present read in cpld_init and cpld_update (Calvin Laverty) [Orabug: 39043148] - driver: fix scd gpio active low clear (Calvin Laverty) [Orabug: 39043148] - driver: mask_green_red --> mask_red_led in scd-fan.h (Calvin Laverty) [Orabug: 39043148] - leds: use Linux LED device classes as intended (Fraser Gordon) [Orabug: 39043148] - amax31732: Fix error in setting primary threshold (arista-hpandya) [Orabug: 39043148] - amax31732: Enable beta comp on all 4 channels (arista-hpandya) [Orabug: 39043148] - rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39045033] - uek-rpm: Enable FPROBE and FPROBE_EVENTS in UEK (Harshit Mogalapalli) [Orabug: 39050941] - uek-rpm: T93: disable CONFIG_CPU_FREQ and CONFIG_ARM_SCMI_CPUFREQ (Thomas Tai) [Orabug: 39052955] - mailbox: mvl-mhu: Refactor MHU RX interrupt handling (George Cherian) [Orabug: 39052955] - driver: mmc: ACPI support added for eMMC driver for T9x. (Piyush Malgujar) [Orabug: 39052955] - driver: mmc: Resolve issues reported by static analysis (Wojciech Bartczak) [Orabug: 39052955] - driver: marvell: mmc: Removes static variables in tuning code (Wojciech Bartczak) [Orabug: 39052955] - mmc: cavium: Add MMC polling method to support kmsg panic/oops write (Bhaskara Budiredla) [Orabug: 39052955] - drivers: mmc: cleanup mmc_oops driver (Bhaskara Budiredla) [Orabug: 39052955] - driver: mmc: Adds CMD tuning for eMMC HS200 mode (Wojciech Bartczak) [Orabug: 39052955] - driver: mmc: Cleans up mmc code and prepare it for HS200 tuning update (Wojciech Bartczak) [Orabug: 39052955] - driver: mmc: Adds device tree entries to control eMMC input timings (Wojciech Bartczak) [Orabug: 39052955] - driver: mmc: Adds a way to dynamically control eMMC bus input timings (Wojciech Bartczak) [Orabug: 39052955] - driver: mmc: Adds new overrides for eMMC bus output timings (Wojciech Bartczak) [Orabug: 39052955] - octeontx2: mmc: Adds mechanism to modify output timings for MMC bus (Wojciech Bartczak) [Orabug: 39052955] - drivers: mmc: enables mmc polling for pstore path (Bhaskara Budiredla) [Orabug: 39052955] - mmc: octeontx2: fix handling calibration glitch (Aaron Williams) [Orabug: 39052955] - mmc: octeontx2: Configure flags for T96 pass B0 (Chandrakala Chavva) [Orabug: 39052955] - mmc: octeontx2: Use flags for hardware differences (Aaron Williams) [Orabug: 39052955] - mmc: octeontx2: Fix tuning for T96 C0 (Chandrakala Chavva) [Orabug: 39052955] - mmc: octeontx2: Add tuning support for HS400 mode (Aaron Williams) [Orabug: 39052955] - mmc: octeontx2: speed limit for tx2-c0 (Sujeet Baranwal) [Orabug: 39052955] - mmc: cavium: use calibrated timing taps (Peter Swain) [Orabug: 39052955] - mmc: cavium: do not drop bus lock in tuning (Peter Swain) [Orabug: 39052955] - mmc: cavium: slot switch by vqmmc/gpio (Peter Swain) [Orabug: 39052955] - mmc: cavium: reorganize before vqmmc switching (Peter Swain) [Orabug: 39052955] - mmc: octeontx2: cmd and data out values fixture (Sujeet Baranwal) [Orabug: 39052955] - mmc: cavium: amend hs400 tuning (Peter Swain) [Orabug: 39052955] - mmc: cavium: correct clock divisor (Peter Swain) [Orabug: 39052955] - mmc: cavium: fix swiotlb buffer is full (Peter Swain) [Orabug: 39052955] - mmc: cavium: avoid single-slot startup issues (Peter Swain) [Orabug: 39052955] - mmc: cavium: execute_tuning for octeontx2 (Peter Swain) [Orabug: 39052955] - mmc: cavium: track & apply CMD6 bus changes ASAP (Peter Swain) [Orabug: 39052955] - mmc: octeontx2: cn96xx HS200-8wide-100MHz (Peter Swain) [Orabug: 39052955] - mmc: cavium: CMD19/21 type correction (Peter Swain) [Orabug: 39052955] - mmc: cavium: skip unavailable slots (Peter Swain) [Orabug: 39052955] - mmc: cavium: finish_dma_single() should teardown/unmap (Peter Swain) [Orabug: 39052955] - mmc: octeontx2: use device tree entries (Sujeet Baranwal) [Orabug: 39052955] - mmc: octeontx2: emmc tuning for delay (Sujeet Baranwal) [Orabug: 39052955] - mmc: octeontx2: calibrate tap delay (Sujeet Baranwal) [Orabug: 39052955] - mmc: octeontx2: incorporate hw interface io ctl params (Sujeet Baranwal) [Orabug: 39052955] - mmc: octeontx2: interrupt addition for ncb fault (Sujeet Baranwal) [Orabug: 39052955] - mmc: octeontx2: emmc operation limited to 100 MHz (Sujeet Baranwal) [Orabug: 39052955] - mmc: cavium: Use proper register to clear interrupts (Chandrakala Chavva) [Orabug: 39052955] - mmc: cavium: fix shutdown deadlock with active sd-card (Peter Swain) [Orabug: 39052955] - mmc: cavium: Configure sample command and data directly (Sujeet Baranwal) [Orabug: 39052955] - mmc: octeontx2: add check for 8/9xxx chips (Sujeet Baranwal) [Orabug: 39052955] - uek-rpm: T93: Configure EDAC & GHES support (Dave Kleikamp) [Orabug: 39052955] - efi/Marvell: Work-around for bootefi memmap errors (Henry Willard) [Orabug: 39052955] - soc: marvell: Add BERT support for OTX2/CN10K (Szymon Balcerak) [Orabug: 39052955] - EDAC/mc: Modify memory error reporting print (Jaiprakash Singh) [Orabug: 39052955] - edac: octeontx_edac: Reduce the log level for ghes prints (George Cherian) [Orabug: 39052955] - ras:cn10k:BCP issue fix where CE errors are read as UE in kernel (Ashwin Kumar Sundararamakrishnan) [Orabug: 39052955] - EDAC/mc: Common print format for CE and UE error (Jaiprakash Singh) [Orabug: 39052955] - ras:edac: Modify processor_arm structure (Jaiprakash Singh) [Orabug: 39052955] - ras:cn10k: Add support for external abort(EA) work queue (Jaiprakash Singh) [Orabug: 39052955] - driver: edac: octeontx: Add CRC support. (Szymon Balcerak) [Orabug: 39052955] - drivers: octeontx-edac: Refactor work thread to have common handler (Vasyl Gomonovych) [Orabug: 39052955] - drivers: octeontx-edac: Add gic error decoder (Jayanthi Annadurai) [Orabug: 39052955] - driver: edac: octeontx: offline/poison page on fatal/UE (Wladislav Wiebe) [Orabug: 39052955] - driver: edac: octeontx: Improvements to GIC RAS handler (Chandrakala Chavva) [Orabug: 39052955] - edac: octeontx: Add support for GIC RAS reporting (Jayanthi Annadurai) [Orabug: 39052955] - edac: octeontx: Add error syndrome (Jayanthi Annadurai) [Orabug: 39052955] - driver: edac: octeontx: Init MC grain (Vasyl Gomonovych) [Orabug: 39052955] - driver: edac: octeontx: Add revision check for new pass of the chip (Chandrakala Chavva) [Orabug: 39052955] - EDAC: Octeon: Init SDEI (Vasyl Gomonovych) [Orabug: 39052955] - EDAC: Octeon: Add Marvell's OcteonTx2 SoC and CN10KA SoC EDAC driver (Vasyl Gomonovych) [Orabug: 39052955] - octeontx2-af: Fix PF driver crash with kexec kernel booting (Anshumali Gaur) [Orabug: 39052955] - octeontx2-af: add max_vfs module param (Tom Saeger) [Orabug: 39052955] - PCI: boot time optimization (Harman Kalra) [Orabug: 39052955] - uek-rpm: T93: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE (Dave Kleikamp) [Orabug: 39052955] - hv_netvsc: Use VF's tso_max_size value when data path is VF (Shradha Gupta) [Orabug: 39065406] - net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shradha Gupta) [Orabug: 39065406] - vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Yishai Hadas) [Orabug: 39065602] - vfio/mlx5: consider inflight SAVE during PRE_COPY (Yishai Hadas) [Orabug: 39065602] - net/mlx5: Add IFC bits for migration state (Yishai Hadas) [Orabug: 39065602] - vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Yishai Hadas) [Orabug: 39065602] - vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Yishai Hadas) [Orabug: 39065602] - vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Yishai Hadas) [Orabug: 39065602] - exadata: tools: perf: use comm_ignore_digit for report, top (Stephen Brennan) [Orabug: 39071703] - tools: perf: add comm_ignore_digit column (Stephen Brennan) [Orabug: 39071703] - uek: kabi: Only do size allignment check on kabi_use when in 64 bit environment. (Yifei Liu) [Orabug: 39089297] - scsi: target: core: Add emulation for REPORT IDENTIFYING INFORMATION (Gulam Mohamed) [Orabug: 39098803] ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | kernel-uek ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-devel ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-devel ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-deprecated ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-deprecated ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-desktop ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-desktop ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra-netfilter ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra-netfilter ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-usb ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-usb ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-wireless ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-wireless ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-devel ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-devel ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-doc ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-doc ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-deprecated ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-deprecated ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-desktop ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-desktop ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra-netfilter ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra-netfilter ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-usb ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-usb ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-wireless ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-wireless ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-tools ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-tools ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-devel ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-devel ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-deprecated ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-deprecated ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-desktop ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-desktop ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra-netfilter ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra-netfilter ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-usb ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-usb ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-wireless ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-wireless ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | --- Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.