ELSA-2026-3066

ELSA-2026-3066 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-02-24

Description

[5.14.0-611.35.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.35.1]
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Paolo Abeni) [RHEL-137841] {CVE-2025-38129}
- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146403] {CVE-2025-38206}

Related CVEs

CVE-2025-38129

CVE-2025-38206

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_aarch64_appstream
	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_aarch64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.35.1.el9_7.aarch64.rpm	bfcf48e391a12bd013bf061e123e63788c0ff61d5b1eb1e3ef7d9f4188d0656c	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-611.35.1.el9_7.aarch64.rpm	4870519f43d944e92efe5303b7bd38522bf9b4b6d3a8cd03c4249413f9d367ad	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-611.35.1.el9_7.aarch64.rpm	0949e64673be15645cab88c0d0abe66c86efae2bcf44850e348b3f2175826f7e	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-611.35.1.el9_7.aarch64.rpm	0949e64673be15645cab88c0d0abe66c86efae2bcf44850e348b3f2175826f7e	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.35.1.el9_7.aarch64.rpm	8b07495df52fb7f9b73e0580c10aa74c36bc0ab5ed984b4757ae503090aaea2d	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-611.35.1.el9_7.aarch64.rpm	8b07495df52fb7f9b73e0580c10aa74c36bc0ab5ed984b4757ae503090aaea2d	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.35.1.el9_7.aarch64.rpm	a0fcebe7ff249a59416c897bc3d58ffa9ebb7ab8bfd23472e8e1ab70f937ab10	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-611.35.1.el9_7.aarch64.rpm	1df9232e363353d6477fa235368bdbbec6ce86cede81f987cf0ed9634c063288	-	ol9_aarch64_codeready_builder
	perf-5.14.0-611.35.1.el9_7.aarch64.rpm	d0116a71098887ec819a499a48b566bf73c982cf9fdba0a9506799ef56d9cc1c	-	ol9_aarch64_appstream
	python3-perf-5.14.0-611.35.1.el9_7.aarch64.rpm	41c4b8416ed0c2201fdacff787479bccd0041669a4ca4437f1d2ea606633fe16	-	ol9_aarch64_appstream
	rtla-5.14.0-611.35.1.el9_7.aarch64.rpm	d35075c291aea4b1b5bcaf16adc9ce60e59e7a9bb74e6e75942a054cfb59c692	-	ol9_aarch64_appstream
	rv-5.14.0-611.35.1.el9_7.aarch64.rpm	62e5b5474e1336921265686dc1d872007ea8f8f7172d5f56102888330a686579	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_x86_64_appstream
	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-611.35.1.el9_7.src.rpm	e0f5e353c2530d41897abc624d6e8f7725a3f6905e9a2323ceffc2da28803b86	-	ol9_x86_64_u7_baseos_patch
	kernel-5.14.0-611.35.1.el9_7.x86_64.rpm	fa84f384f4002a303c4511036fa1662c11d2d88528ec6d4c782d192cab4f6d61	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.35.1.el9_7.x86_64.rpm	fa84f384f4002a303c4511036fa1662c11d2d88528ec6d4c782d192cab4f6d61	-	ol9_x86_64_u7_baseos_patch
	kernel-abi-stablelists-5.14.0-611.35.1.el9_7.noarch.rpm	d36f6710efa01fb306be9989ea4301cba275b254cabe2309944539951f7f2a1e	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-611.35.1.el9_7.noarch.rpm	d36f6710efa01fb306be9989ea4301cba275b254cabe2309944539951f7f2a1e	-	ol9_x86_64_u7_baseos_patch
	kernel-core-5.14.0-611.35.1.el9_7.x86_64.rpm	28126e2e7c9324065348a563bf35388d51916e84d57d8c0c7f4e969b5ec30fe6	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-611.35.1.el9_7.x86_64.rpm	28126e2e7c9324065348a563bf35388d51916e84d57d8c0c7f4e969b5ec30fe6	-	ol9_x86_64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.35.1.el9_7.x86_64.rpm	4c4830261556a3256003f5654800d3e67684e8a5d3e0b2809470014dd35d835d	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-611.35.1.el9_7.x86_64.rpm	d1b0883defa65107f7ea6477eede596b29519e5314807c5aa5a0ca3c72045b2a	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-611.35.1.el9_7.x86_64.rpm	d1b0883defa65107f7ea6477eede596b29519e5314807c5aa5a0ca3c72045b2a	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-core-5.14.0-611.35.1.el9_7.x86_64.rpm	8e62be5281b6a56071f0a27d017069460fe333b8bd3c67224da9d7a0c814ea9a	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-611.35.1.el9_7.x86_64.rpm	8e62be5281b6a56071f0a27d017069460fe333b8bd3c67224da9d7a0c814ea9a	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-devel-5.14.0-611.35.1.el9_7.x86_64.rpm	aa08de063d8d13982f30875697618f6da4d024bd898ae0c7364cb72321cc1a0b	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-611.35.1.el9_7.x86_64.rpm	516407a0416d673f2543e36f817142eeb63a9325f5198581e77727454b0ff3fc	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-611.35.1.el9_7.x86_64.rpm	8a67eba7f1dc44b219e5b0f87eb9b6f8648ddd6611bec79dc7bd645a8ae9dbe4	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-611.35.1.el9_7.x86_64.rpm	8a67eba7f1dc44b219e5b0f87eb9b6f8648ddd6611bec79dc7bd645a8ae9dbe4	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm	461fc146df03fdd609268c211603429721a1ae2ac97c5673049d244bb563c634	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm	461fc146df03fdd609268c211603429721a1ae2ac97c5673049d244bb563c634	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm	86906ec04f54e098d5d30c4ed61aed8e5e9c74e70d2e42629a8601d5e30eb1fe	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm	86906ec04f54e098d5d30c4ed61aed8e5e9c74e70d2e42629a8601d5e30eb1fe	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-uki-virt-5.14.0-611.35.1.el9_7.x86_64.rpm	6276e41b9d76a41b5f2b564925663c56e69f7161c004cbe89d4e56dd5a7263ef	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-611.35.1.el9_7.x86_64.rpm	6276e41b9d76a41b5f2b564925663c56e69f7161c004cbe89d4e56dd5a7263ef	-	ol9_x86_64_u7_baseos_patch
	kernel-devel-5.14.0-611.35.1.el9_7.x86_64.rpm	b353f0c89c1ce3d636fa405f74d61e43922af72d2b19ab33e334da2abe3c1849	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-611.35.1.el9_7.x86_64.rpm	c329f9cf0b99c717088dd590c5068dc8c73f7c3eabfb84c1efd47e76faf52590	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-611.35.1.el9_7.noarch.rpm	50a726a4065f74572cd84076227fa1aeb8c2b21dc11bf2788428f6a76001448e	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-611.35.1.el9_7.x86_64.rpm	2e0b3b3a246e7205fa54c0b8de19f112656114cff354d8e7552a0c3659954d86	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-611.35.1.el9_7.x86_64.rpm	8d27f06f2998d986c2c0c9c9996dd99d4a1f85dbb2af6e0f0ffd0d3febdd1df5	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-611.35.1.el9_7.x86_64.rpm	8d27f06f2998d986c2c0c9c9996dd99d4a1f85dbb2af6e0f0ffd0d3febdd1df5	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm	29a805a9816ab22c5eb85898cad258cd17c965c02a6ed59e695cc030f3fcb681	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm	29a805a9816ab22c5eb85898cad258cd17c965c02a6ed59e695cc030f3fcb681	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm	0f7d6138ba64a5b1881598d916e55185b88666a649bf1f0090a6478083ecbf3c	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm	0f7d6138ba64a5b1881598d916e55185b88666a649bf1f0090a6478083ecbf3c	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-5.14.0-611.35.1.el9_7.x86_64.rpm	17f918c40f07d1cfdcf15d96b18c371fa4544e1dd1431662d4c22eb70adffe16	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-611.35.1.el9_7.x86_64.rpm	17f918c40f07d1cfdcf15d96b18c371fa4544e1dd1431662d4c22eb70adffe16	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.35.1.el9_7.x86_64.rpm	2d4975bf4ced67fe2f72025350c6257d63b48f7e816a242f3c2fa5f09a9ce0d4	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-611.35.1.el9_7.x86_64.rpm	2d4975bf4ced67fe2f72025350c6257d63b48f7e816a242f3c2fa5f09a9ce0d4	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.35.1.el9_7.x86_64.rpm	959e06c45fbc146c3ccad28fdc869296378a565ce9daddc711d333d7720aec78	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-611.35.1.el9_7.x86_64.rpm	2894e2031b963bc64fa72831775a488194686046f87451470fa83f41958c6059	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-611.35.1.el9_7.x86_64.rpm	2894e2031b963bc64fa72831775a488194686046f87451470fa83f41958c6059	-	ol9_x86_64_u7_baseos_patch
	kernel-uki-virt-addons-5.14.0-611.35.1.el9_7.x86_64.rpm	b53294121196e6e11ba2e80a7b7cdce8cb0dc95467c16ab757044e245f64df3a	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-611.35.1.el9_7.x86_64.rpm	b53294121196e6e11ba2e80a7b7cdce8cb0dc95467c16ab757044e245f64df3a	-	ol9_x86_64_u7_baseos_patch
	libperf-5.14.0-611.35.1.el9_7.x86_64.rpm	48e2de5e3a391ef92d34a28a920843760d284bf3c92834e2c609ad1f64aa52b4	-	ol9_x86_64_codeready_builder
	perf-5.14.0-611.35.1.el9_7.x86_64.rpm	70892a31f833e5b4da430bf880821551b38fbf90e922081b7e4508b64e68eb21	-	ol9_x86_64_appstream
	python3-perf-5.14.0-611.35.1.el9_7.x86_64.rpm	5824f922a0b86aa4f486a64611be3cf33b84b81a036128a990ec60ae779730d5	-	ol9_x86_64_appstream
	rtla-5.14.0-611.35.1.el9_7.x86_64.rpm	8f6e63464a1b1398ad695ba6ce46b9bc1e3652c81bf86c26f4dea6f874b9bd88	-	ol9_x86_64_appstream
	rv-5.14.0-611.35.1.el9_7.x86_64.rpm	204d09612dbfd2514ad35d6f696900550a3a6ff712d181d36f09dcaffad8a789	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team