Stay Connected:

ELSA-2026-33285

ELSA-2026-33285 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-08

Description


[5.14.0-687.20.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.20.1]
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}


Related CVEs


CVE-2026-31411
CVE-2026-43198

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_aarch64_appstream
kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_aarch64_baseos_latest
kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_aarch64_codeready_builder
kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.20.1.el9_8.aarch64.rpm98f72a6d7cec516c7ab98550fcc081c15ab70e0d9388f5aa97c609b74c5d7b12-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.20.1.el9_8.aarch64.rpm95526bdb8b4adb4417e5841a22dfd6c47d09433334e94407647b42e9c451ce48-ol9_aarch64_appstream
kernel-tools-5.14.0-687.20.1.el9_8.aarch64.rpm24d464faeb596bf3cc51c26dcab8c5700db5f3b31604745cbb53a213a5d006e1-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.20.1.el9_8.aarch64.rpm24d464faeb596bf3cc51c26dcab8c5700db5f3b31604745cbb53a213a5d006e1-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.20.1.el9_8.aarch64.rpmd3028249045fe114acf23dd41f337a4244fbca7a61f2114b422dbafa7ecc8201-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.20.1.el9_8.aarch64.rpmd3028249045fe114acf23dd41f337a4244fbca7a61f2114b422dbafa7ecc8201-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.20.1.el9_8.aarch64.rpm99aad012e9c71eebc2f9d40af09ddf023cceb3095838751d0dddf1b49c59662b-ol9_aarch64_codeready_builder
libperf-5.14.0-687.20.1.el9_8.aarch64.rpm0ca5372d1f02b1c4ba64d5e6eca940c9bd817f791a8a03b1d358de16099b0628-ol9_aarch64_codeready_builder
perf-5.14.0-687.20.1.el9_8.aarch64.rpm918afde9e3b06b775c6e625514dcaf8a7d87e93df4eedb70cf45600d74ea0f85-ol9_aarch64_appstream
python3-perf-5.14.0-687.20.1.el9_8.aarch64.rpmc7932fd35bc1609c47c0eefb989c4908aca9d914cc356905fe8690a67f365093-ol9_aarch64_appstream
rtla-5.14.0-687.20.1.el9_8.aarch64.rpma6f3cfda405bd8ca4226c02c8024f3f16affaa56ea7e9d1527ddc0cb042fadb2-ol9_aarch64_appstream
rv-5.14.0-687.20.1.el9_8.aarch64.rpm29bfd3d73bd59faaded747e2b678174e077676fcde60f20a9b70b50d88235351-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_x86_64_appstream
kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_x86_64_baseos_latest
kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_x86_64_codeready_builder
kernel-5.14.0-687.20.1.el9_8.src.rpm53fdcdd3077e9c07892335cfd2818539c9b78fd586ce3b085de488bcec8691e3-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.20.1.el9_8.x86_64.rpm5962b3056dd4154c8e41b45702249ba47c0c49fb61a54e9e008bb0f3d0bf3ba7-ol9_x86_64_baseos_latest
kernel-5.14.0-687.20.1.el9_8.x86_64.rpm5962b3056dd4154c8e41b45702249ba47c0c49fb61a54e9e008bb0f3d0bf3ba7-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.20.1.el9_8.noarch.rpme2e042109ccd08d1604e7f14d9c840812fb6b03e6a415442a8644e1579557feb-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.20.1.el9_8.noarch.rpme2e042109ccd08d1604e7f14d9c840812fb6b03e6a415442a8644e1579557feb-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.20.1.el9_8.x86_64.rpmd64fa8eee274f28fddab017bb1747e7134de5cceb3f8fc86bc8a06b8d3f38128-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.20.1.el9_8.x86_64.rpmd64fa8eee274f28fddab017bb1747e7134de5cceb3f8fc86bc8a06b8d3f38128-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.20.1.el9_8.x86_64.rpmc4cef6af0ddfc2d64a7b1df1d3e48d1e2791554a445baf4a2c5fd62a1c9c0bae-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.20.1.el9_8.x86_64.rpm0bb7025e038e5095b97bfe37dd7f60078878adf8f0080249ff65dd06b56695c6-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.20.1.el9_8.x86_64.rpm0bb7025e038e5095b97bfe37dd7f60078878adf8f0080249ff65dd06b56695c6-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm84edc9a0c936fdfb01517dcf9086489ce2424aa6459a83790989e141b43e2d08-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm84edc9a0c936fdfb01517dcf9086489ce2424aa6459a83790989e141b43e2d08-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm2f7b9a0fcbca1d181a3dc91de67e3cc3344f851807bae73a06f2fa0c4ed38212-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.20.1.el9_8.x86_64.rpm6a4fe0a89d177f89a6a9c15dce649ade8172e30da545d3f2cafb0b201bd77791-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm2ad5e181a6dba41e9648e4f958cb0bd748d412a2b99ca4e19e9e5be6c27b51bd-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm2ad5e181a6dba41e9648e4f958cb0bd748d412a2b99ca4e19e9e5be6c27b51bd-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpma8855429ece2351eb371e75a64448124a8181440648ea742a4f7411594e9e9e4-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpma8855429ece2351eb371e75a64448124a8181440648ea742a4f7411594e9e9e4-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpmfc841824a45d4c0359777a71f8a0677c346f896f2e334ed6a602799af58be20b-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpmfc841824a45d4c0359777a71f8a0677c346f896f2e334ed6a602799af58be20b-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm9a4ee91160f5d9a6a9ec7113e393ac7cdd72382c0774bd6f2650f7458f5c02df-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm9a4ee91160f5d9a6a9ec7113e393ac7cdd72382c0774bd6f2650f7458f5c02df-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.20.1.el9_8.x86_64.rpm34dce15a52cddaaa901e73e234811fdce43108f9335f3434055d42ba7f5038e9-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.20.1.el9_8.x86_64.rpm3786b2ff9c921d7985016686817fcbe4dd765f3195e4d90bb886ea5a028c44d0-ol9_x86_64_appstream
kernel-doc-5.14.0-687.20.1.el9_8.noarch.rpmef0e6c1547ec8d8c5c0711d864002e5b8eb97c68e51e1a5d25e9a28df1903202-ol9_x86_64_appstream
kernel-headers-5.14.0-687.20.1.el9_8.x86_64.rpm92b308fc099f8efa9db83f3f1b59f7967022bdc9c4acdcad44bf2028729e64a6-ol9_x86_64_appstream
kernel-modules-5.14.0-687.20.1.el9_8.x86_64.rpmc6f997299d7ec746c3bc94a5b49bf3d448af1bc82a86d7089075ff8cae99fe69-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.20.1.el9_8.x86_64.rpmc6f997299d7ec746c3bc94a5b49bf3d448af1bc82a86d7089075ff8cae99fe69-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm20435fca4a6749b2139f4942c11239a5a8bf0dc3f2fdaa8cd022a636fe08ddcb-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm20435fca4a6749b2139f4942c11239a5a8bf0dc3f2fdaa8cd022a636fe08ddcb-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm324a9831e28b15f8fd611520669c520485130f2f77abc7ceacb70a93e8f2b72b-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm324a9831e28b15f8fd611520669c520485130f2f77abc7ceacb70a93e8f2b72b-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.20.1.el9_8.x86_64.rpm037ede4c6ceda762849a2478c554188963982fa31721267879d8522943b015f1-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.20.1.el9_8.x86_64.rpm037ede4c6ceda762849a2478c554188963982fa31721267879d8522943b015f1-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.20.1.el9_8.x86_64.rpmd209bd2c0be3ce2b11aab7ed938d5fe4bb00ca1dc8300d9aace84b59ca2465f5-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.20.1.el9_8.x86_64.rpmd209bd2c0be3ce2b11aab7ed938d5fe4bb00ca1dc8300d9aace84b59ca2465f5-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.20.1.el9_8.x86_64.rpm19836ac58335dc8785a7dc9a6517a663503791d43bccefac2565bb0c54af24c6-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm24cf174bb045884969330e8340626f98a8bbb73939d2f2ac503ad7c01759d040-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm24cf174bb045884969330e8340626f98a8bbb73939d2f2ac503ad7c01759d040-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.20.1.el9_8.x86_64.rpm4acc93bd908bddd728882c001dceb8249c75fb08e814317091712e6d927109f2-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.20.1.el9_8.x86_64.rpm4acc93bd908bddd728882c001dceb8249c75fb08e814317091712e6d927109f2-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.20.1.el9_8.x86_64.rpm6205ef6bd1ba7ae8a809ece6020d46b4a442a455d0ca07c4651579808762aa0f-ol9_x86_64_codeready_builder
perf-5.14.0-687.20.1.el9_8.x86_64.rpmc7ef2110709e23a114fd18424427c985181766ff1fb4d68c5ecb382b6cc004e7-ol9_x86_64_appstream
python3-perf-5.14.0-687.20.1.el9_8.x86_64.rpmae4da04a87fdf21f53be517aa980e6cb19310c39b3be8d79a05b1c834babd4be-ol9_x86_64_appstream
rtla-5.14.0-687.20.1.el9_8.x86_64.rpmc142ee6cee7917e767643f10370cef181a96150a7de7e2d1bc6895294373f6ee-ol9_x86_64_appstream
rv-5.14.0-687.20.1.el9_8.x86_64.rpm4ccd4565bd797d6343829b959fde10a89646d6d6c1e53112f88086d8ce75c140-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights