Stay Connected:

ELSA-2026-51035

ELSA-2026-51035 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:MODERATE
Release Date:2026-08-06

Description


[5.14.0-687.36.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.36.1]
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}

[5.14.0-687.35.1]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}


Related CVEs


CVE-2026-23415
CVE-2026-43450

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_aarch64_appstream
kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_aarch64_baseos_latest
kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_aarch64_codeready_builder
kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.36.1.el9_8.aarch64.rpmd382015bd983901a7fb548997ca0d9b0a0104102b28cf2ad4f9f27970936495f-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.36.1.el9_8.aarch64.rpmc20216a95e5c9f012b7a1c3f75484239631393c739a7fa825704adb5a49a9f6f-ol9_aarch64_appstream
kernel-tools-5.14.0-687.36.1.el9_8.aarch64.rpm52e944aa169006139d8f4b4ac714a052e0cdef114f46473c5065973d714abca1-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.36.1.el9_8.aarch64.rpm52e944aa169006139d8f4b4ac714a052e0cdef114f46473c5065973d714abca1-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.36.1.el9_8.aarch64.rpm25d903a3f6f845e03fc24a773b50e57bb70cd0bfe1d01a429c08507bc0c4422b-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.36.1.el9_8.aarch64.rpm25d903a3f6f845e03fc24a773b50e57bb70cd0bfe1d01a429c08507bc0c4422b-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.36.1.el9_8.aarch64.rpma6c2f46fb55e92e8ad12a9eeac6424d4e74ab2285da7ac60c087412ab0812584-ol9_aarch64_codeready_builder
libperf-5.14.0-687.36.1.el9_8.aarch64.rpm1e61103e6446e75dc7e437b6615f148e1c0c00c2d243748afffe4d95c7c58098-ol9_aarch64_codeready_builder
perf-5.14.0-687.36.1.el9_8.aarch64.rpm35b69f8e113f54e71723e70c0af407ee5d0956136392d553d013f6f4977fa1df-ol9_aarch64_appstream
python3-perf-5.14.0-687.36.1.el9_8.aarch64.rpm4ef801a78d5df9a70a1b688883c04fb31b67fa0d10533037ae15b65d00d3977f-ol9_aarch64_appstream
rtla-5.14.0-687.36.1.el9_8.aarch64.rpme84357f08be0cc62670fef409b095f9c2fa58a449a5aa76e05c58ae627120dc9-ol9_aarch64_appstream
rv-5.14.0-687.36.1.el9_8.aarch64.rpm4a7c352c6fda08d98d2540e5d3532906cc1584b0eaca36fc79e7700abcd395e6-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_x86_64_appstream
kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_x86_64_baseos_latest
kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_x86_64_codeready_builder
kernel-5.14.0-687.36.1.el9_8.src.rpm4f9897a1e8042959cd9e8ecd7c39d4caa28bd9a606d87f202b0d6feab3158acb-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.36.1.el9_8.x86_64.rpmb5ef3768481e217d7c8f2cdc137d2ef59b057c8ac46f68448ecb6cdd82cac854-ol9_x86_64_baseos_latest
kernel-5.14.0-687.36.1.el9_8.x86_64.rpmb5ef3768481e217d7c8f2cdc137d2ef59b057c8ac46f68448ecb6cdd82cac854-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.36.1.el9_8.noarch.rpm2556a9d1860e6526168a04d67dfd217d0d9bf207f90efdde42fff143cd5ed2fe-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.36.1.el9_8.noarch.rpm2556a9d1860e6526168a04d67dfd217d0d9bf207f90efdde42fff143cd5ed2fe-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.36.1.el9_8.x86_64.rpmcfdaca54ed3978b216022ac13d4518ef7a90a04871ad7ba0b18895c47ed2329e-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.36.1.el9_8.x86_64.rpmcfdaca54ed3978b216022ac13d4518ef7a90a04871ad7ba0b18895c47ed2329e-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.36.1.el9_8.x86_64.rpm3341255d0816a66144917e141a58a8ed2ac402c89be4f2da8cf2e6b6f50f55fc-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.36.1.el9_8.x86_64.rpm4a128048969d18b16bbd9df20980bd0bd43dac4746a36fb8f8141592c06bbe50-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.36.1.el9_8.x86_64.rpm4a128048969d18b16bbd9df20980bd0bd43dac4746a36fb8f8141592c06bbe50-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.36.1.el9_8.x86_64.rpm9bfe64e1922a054ceaed36cf71974910e2697eb72b96c6828604aa4dfd63de29-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.36.1.el9_8.x86_64.rpm9bfe64e1922a054ceaed36cf71974910e2697eb72b96c6828604aa4dfd63de29-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.36.1.el9_8.x86_64.rpm0c9de897b98e87e8f79f60502b5dcb03cd143cf183aaa0dc8a300fa63e76ee10-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.36.1.el9_8.x86_64.rpmad2902b5a02fdf8123abb75a4026468c2b77b70611ce369d14199e6e2d4ea6ae-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.36.1.el9_8.x86_64.rpm532cb880a774db187537c13299299bae8ca71a21eeb3712fb495c1c15f85914e-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.36.1.el9_8.x86_64.rpm532cb880a774db187537c13299299bae8ca71a21eeb3712fb495c1c15f85914e-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpmed5e454358136a4fdec1b14c127945d2d7653d8a1c8ccee4f5105ec690ffd9eb-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpmed5e454358136a4fdec1b14c127945d2d7653d8a1c8ccee4f5105ec690ffd9eb-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm0ef66b760fd5547efd108f3678fd024fc154e389ef69afb2f109eb413dc4078c-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm0ef66b760fd5547efd108f3678fd024fc154e389ef69afb2f109eb413dc4078c-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm1cb03060d66ac61abe6b51d36a094440b6a4db933144b1f88261eb9fd50738c0-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm1cb03060d66ac61abe6b51d36a094440b6a4db933144b1f88261eb9fd50738c0-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.36.1.el9_8.x86_64.rpmbe7bb29cd6bcd39bbdf888181ca6844c4ea41bef591462b83e2d1bb1e062af3a-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.36.1.el9_8.x86_64.rpm337ea4b52da9f2c58b34d36bc23eca5b640a6865ebc3781de497dbf7dc34278a-ol9_x86_64_appstream
kernel-doc-5.14.0-687.36.1.el9_8.noarch.rpm88fd9f95249c3f89aaa8660e1117e16d64a9526222ed31f380e264c326978ee3-ol9_x86_64_appstream
kernel-headers-5.14.0-687.36.1.el9_8.x86_64.rpm8ffb9162d3ddf1ab5122cb0f3ed207c72b418ba642ee5ec976d59da805a2c27b-ol9_x86_64_appstream
kernel-modules-5.14.0-687.36.1.el9_8.x86_64.rpmea81679861ad7f83e233a3cf8c7b24e8f6eb27d7b1031516021ba9dba4e06eac-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.36.1.el9_8.x86_64.rpmea81679861ad7f83e233a3cf8c7b24e8f6eb27d7b1031516021ba9dba4e06eac-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm16f198b3666355f99f71206b1e7e15aa2a099d084232d9ee4715edcadd287e10-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm16f198b3666355f99f71206b1e7e15aa2a099d084232d9ee4715edcadd287e10-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm2a57ead8dc3969275236d15b36f80c80a9e70589ab8e2f5cec33255486c14100-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm2a57ead8dc3969275236d15b36f80c80a9e70589ab8e2f5cec33255486c14100-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.36.1.el9_8.x86_64.rpm5d4ed919461cdc9396ecdeec06b08b1dde16c8fbfb05508cedeec6a2b296137c-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.36.1.el9_8.x86_64.rpm5d4ed919461cdc9396ecdeec06b08b1dde16c8fbfb05508cedeec6a2b296137c-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.36.1.el9_8.x86_64.rpma06cf4c9084c46aae8814be8d692247a2405b02e797772ada59277e86856cd45-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.36.1.el9_8.x86_64.rpma06cf4c9084c46aae8814be8d692247a2405b02e797772ada59277e86856cd45-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.36.1.el9_8.x86_64.rpmae196b3efd630f80c290eb8af8c3b6508e7f786922c6fe968b327abaae702144-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm6c848bbe68feec24840ddf321c729b3fb720c4c09a24ebcfa0541db55975e4b8-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm6c848bbe68feec24840ddf321c729b3fb720c4c09a24ebcfa0541db55975e4b8-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.36.1.el9_8.x86_64.rpmd2bbbe98cce97ebcdd7bf2b128a7e30976bf6515f3674d5036a4282a2b2ebe99-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.36.1.el9_8.x86_64.rpmd2bbbe98cce97ebcdd7bf2b128a7e30976bf6515f3674d5036a4282a2b2ebe99-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.36.1.el9_8.x86_64.rpm44b1ad6715f1d5f45bdca273793dabb5e71d96f9475c63ce572fd5b7aefd0537-ol9_x86_64_codeready_builder
perf-5.14.0-687.36.1.el9_8.x86_64.rpma4bf74c3e0e6fd2a6f1eedad554ee612c3c9b5d2155085e0c20e0b7011294879-ol9_x86_64_appstream
python3-perf-5.14.0-687.36.1.el9_8.x86_64.rpm463096ec02265ec0fe37dfe905a493c106644c9e498b321cdd327bd8ae863f29-ol9_x86_64_appstream
rtla-5.14.0-687.36.1.el9_8.x86_64.rpmcdba1650184c882184a6e969d663ea694840eeb988c08b5c8344b3b00e9cb55e-ol9_x86_64_appstream
rv-5.14.0-687.36.1.el9_8.x86_64.rpm5b735e9d91b8a5be7bb344ad41ea1eb65b4f6d6fe17a1c0a20a3099736edd5e1-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights