ELSA-2026-1617

ELSA-2026-1617 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-02-02

Description

[5.14.0-611.27.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.27.1]
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136822] {CVE-2025-38568}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134923] {CVE-2025-40251}
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129112] {CVE-2025-40154}

Related CVEs

CVE-2025-38568

CVE-2025-40154

CVE-2025-40251

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_aarch64_appstream
	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_aarch64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.27.1.el9_7.aarch64.rpm	841d7b89f0e2eefa97ba45d0860c28814c9be664850a5e90e34daffc04dc2e0f	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-611.27.1.el9_7.aarch64.rpm	6a99e43149582ca92de2921a788bdfa0007054af7122431e4ec7e7370f450e46	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-611.27.1.el9_7.aarch64.rpm	ddab2f8b2242b6c5e9b6d812128c6732d0dfe46d5ba65765b6214e8a5ac89ac5	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-611.27.1.el9_7.aarch64.rpm	ddab2f8b2242b6c5e9b6d812128c6732d0dfe46d5ba65765b6214e8a5ac89ac5	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.27.1.el9_7.aarch64.rpm	1fd87bddef90967c890b1ac9d03bca82fbd93ea1845e08c18be578555131870c	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-611.27.1.el9_7.aarch64.rpm	1fd87bddef90967c890b1ac9d03bca82fbd93ea1845e08c18be578555131870c	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.27.1.el9_7.aarch64.rpm	7d13f6aedfa49f7c5980934eed724fe2bc4bc943279f354fe7baf44397bfa491	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-611.27.1.el9_7.aarch64.rpm	e36e2d8a663234a0919e8e275708ef2a85a238a60bd09665d0ee94f8eb85ba4c	-	ol9_aarch64_codeready_builder
	perf-5.14.0-611.27.1.el9_7.aarch64.rpm	a5b8b30431e7c961c026dcebddcce09c400a55b3ed8d0060ea27e59c467ed904	-	ol9_aarch64_appstream
	python3-perf-5.14.0-611.27.1.el9_7.aarch64.rpm	0b957da9915c6753d3638f8fdf541a15dd49a15926bcb44092d796a18b2ceba3	-	ol9_aarch64_appstream
	rtla-5.14.0-611.27.1.el9_7.aarch64.rpm	10316e87757d956d1feae18da371830ca2f7de86ee0b8f8936d3326f4b5cbb19	-	ol9_aarch64_appstream
	rv-5.14.0-611.27.1.el9_7.aarch64.rpm	c34113afcc16f947cddc68f2b24a3b57d0422725bfe44248c42f05891c7b7e5f	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_x86_64_appstream
	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-611.27.1.el9_7.src.rpm	cdedbe4d9fad64b65efe13f7aa4cf37ffa7e739e00f5739aef45a6b79a4b0083	-	ol9_x86_64_u7_baseos_patch
	kernel-5.14.0-611.27.1.el9_7.x86_64.rpm	d488c9884e6feae764c0fe22e7e81b98929deeee94189841dc9d2b884b11bce4	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.27.1.el9_7.x86_64.rpm	d488c9884e6feae764c0fe22e7e81b98929deeee94189841dc9d2b884b11bce4	-	ol9_x86_64_u7_baseos_patch
	kernel-abi-stablelists-5.14.0-611.27.1.el9_7.noarch.rpm	78bcc24e66fc16d9e657102a5dadd46a7fa963c5d46114c74151594d81d20f65	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-611.27.1.el9_7.noarch.rpm	78bcc24e66fc16d9e657102a5dadd46a7fa963c5d46114c74151594d81d20f65	-	ol9_x86_64_u7_baseos_patch
	kernel-core-5.14.0-611.27.1.el9_7.x86_64.rpm	049c11b79d32623cdfaac6bd2ebf3b0780ed7e9f7bdd69d2c63d3a2be3f20458	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-611.27.1.el9_7.x86_64.rpm	049c11b79d32623cdfaac6bd2ebf3b0780ed7e9f7bdd69d2c63d3a2be3f20458	-	ol9_x86_64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.27.1.el9_7.x86_64.rpm	5086ef907d10437374a9a4e861828c1d2562f6d014f61a5caa16339c0709d1df	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-611.27.1.el9_7.x86_64.rpm	035f8290f1917fe3d250e444a01cf9e8b695c24c42432707b015862f4e1996f0	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-611.27.1.el9_7.x86_64.rpm	035f8290f1917fe3d250e444a01cf9e8b695c24c42432707b015862f4e1996f0	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-core-5.14.0-611.27.1.el9_7.x86_64.rpm	091a9c3635bfda00e0a11b9f183593fcdc8c22591b545f4acabe176c4eec6fc7	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-611.27.1.el9_7.x86_64.rpm	091a9c3635bfda00e0a11b9f183593fcdc8c22591b545f4acabe176c4eec6fc7	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-devel-5.14.0-611.27.1.el9_7.x86_64.rpm	becd18d2faddfe8c9f666ee66de000ae13adfa732db269af2ed6786893c62b58	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-611.27.1.el9_7.x86_64.rpm	14b04ed810b8b1d43e22039a3d83ac3d40a91b7cf25d20c587c054a6fb2e499a	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-611.27.1.el9_7.x86_64.rpm	92496bea71ecad21acac59deabb4a2f995f45e91dcd408e8b59b36969389634f	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-611.27.1.el9_7.x86_64.rpm	92496bea71ecad21acac59deabb4a2f995f45e91dcd408e8b59b36969389634f	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm	9b9ca3c304d4251a7dc63f76fe8fae03e4242519c0595118fdc42858eabe1f3b	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm	9b9ca3c304d4251a7dc63f76fe8fae03e4242519c0595118fdc42858eabe1f3b	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm	7d5226f6e591d4483cb67ba895e29399e04851754a5ffb963f3fd366f88d88fb	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm	7d5226f6e591d4483cb67ba895e29399e04851754a5ffb963f3fd366f88d88fb	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-uki-virt-5.14.0-611.27.1.el9_7.x86_64.rpm	108db5400f58723c38ba9f27930a47504432cf9508dcf3b1ddb57ccc13eda3d4	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-611.27.1.el9_7.x86_64.rpm	108db5400f58723c38ba9f27930a47504432cf9508dcf3b1ddb57ccc13eda3d4	-	ol9_x86_64_u7_baseos_patch
	kernel-devel-5.14.0-611.27.1.el9_7.x86_64.rpm	ee9d1b1cf2a9cccbfd13ef6e140256bbad0a2daf20fb8e378b38b55ce0833960	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-611.27.1.el9_7.x86_64.rpm	2c3ee6bde41d06ff1fcec73e84947da99209186edec3277802b07a64c28c98dc	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-611.27.1.el9_7.noarch.rpm	e18da16248a28a7bb5b5c7a0ee50808adb94cb57d7c7981da2cdff042e06b206	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-611.27.1.el9_7.x86_64.rpm	9300a96a4fca616488f3067f2ff382d82ce0c4b3f75f40343cf6eafa7da6060c	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-611.27.1.el9_7.x86_64.rpm	b0ed2ea3e84025968456c1596434d14f5be4741f0b7402c4149e712bee895c4c	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-611.27.1.el9_7.x86_64.rpm	b0ed2ea3e84025968456c1596434d14f5be4741f0b7402c4149e712bee895c4c	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm	7feb068b84f1b764eb2556d88286f0f24d8f15de740a4b21b2a3b6d51508af93	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm	7feb068b84f1b764eb2556d88286f0f24d8f15de740a4b21b2a3b6d51508af93	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm	0701b9eccbfab3f2e1ee844959644427a4124d1b1adf09b67d948f43d00c5366	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm	0701b9eccbfab3f2e1ee844959644427a4124d1b1adf09b67d948f43d00c5366	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-5.14.0-611.27.1.el9_7.x86_64.rpm	b6ee55d2444a6be8fc3ef04ff5f99f78dc5688ceaf38bfb0540adf46488c37bc	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-611.27.1.el9_7.x86_64.rpm	b6ee55d2444a6be8fc3ef04ff5f99f78dc5688ceaf38bfb0540adf46488c37bc	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.27.1.el9_7.x86_64.rpm	32f6b9845ed9867cdfece075ee203c27573fea0d274dc290c321d55847cbf7aa	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-611.27.1.el9_7.x86_64.rpm	32f6b9845ed9867cdfece075ee203c27573fea0d274dc290c321d55847cbf7aa	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.27.1.el9_7.x86_64.rpm	54f3f367fe5262267b738c134d42d80bb4d2d6413f76e49e829ffb8d3a3cafbc	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-611.27.1.el9_7.x86_64.rpm	ed830fc55287df1b5d7a218050a2ad1d1d84915794a206b9a5c78ef03fd22b0f	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-611.27.1.el9_7.x86_64.rpm	ed830fc55287df1b5d7a218050a2ad1d1d84915794a206b9a5c78ef03fd22b0f	-	ol9_x86_64_u7_baseos_patch
	kernel-uki-virt-addons-5.14.0-611.27.1.el9_7.x86_64.rpm	a49f231de4c3ac74af2d80935b06fc257dd0dc4fa231767c956676efbae73bfb	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-611.27.1.el9_7.x86_64.rpm	a49f231de4c3ac74af2d80935b06fc257dd0dc4fa231767c956676efbae73bfb	-	ol9_x86_64_u7_baseos_patch
	libperf-5.14.0-611.27.1.el9_7.x86_64.rpm	553337eb8b8aca224bc848550fb05e548c0e4ab7ddf47bb53e1dbb3137b2d8eb	-	ol9_x86_64_codeready_builder
	perf-5.14.0-611.27.1.el9_7.x86_64.rpm	fa4bd457398d5d43657e8a6579cefe5c3f3f67a3ee1634c21cb9cc31a793b2b2	-	ol9_x86_64_appstream
	python3-perf-5.14.0-611.27.1.el9_7.x86_64.rpm	a059db2a03638603a40d0801fa0fed83596e6057bf4ebb65cb24ca6a513f6039	-	ol9_x86_64_appstream
	rtla-5.14.0-611.27.1.el9_7.x86_64.rpm	519ddf8e50c6836e12c97bc0bfd6f698780712d3edab79b9576ee725977dfa5d	-	ol9_x86_64_appstream
	rv-5.14.0-611.27.1.el9_7.x86_64.rpm	429c0305cd98aff7d2ef7b7dbbe85b3d4832153626bdd2ab6ceb1e16fafd8de9	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team