ELSA-2026-54443

ELSA-2026-54443 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-13

Description

[5.14.0-687.39.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.39.1]
- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}

Related CVEs

CVE-2026-53202

CVE-2026-53264

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_aarch64_appstream
	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_aarch64_u8_baseos_patch
	kernel-cross-headers-5.14.0-687.39.1.el9_8.aarch64.rpm	8952963d19541dcf6e7710ec1a6600268a80ec7148760dc0806686c2c6e43316	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-687.39.1.el9_8.aarch64.rpm	560075835e168524ac9bf8850bc98932c6fe5eda0684d12fb21b6a0b72b962a8	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-687.39.1.el9_8.aarch64.rpm	7cf6bd325fec60d374c441b0879cbcd24503d86fdb4d8323546330040c891ec2	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-687.39.1.el9_8.aarch64.rpm	7cf6bd325fec60d374c441b0879cbcd24503d86fdb4d8323546330040c891ec2	-	ol9_aarch64_u8_baseos_patch
	kernel-tools-libs-5.14.0-687.39.1.el9_8.aarch64.rpm	5e885169de0e2bc83c59cdfbb8ae3492d63966e12628e7d29aea91fe24809f8d	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-687.39.1.el9_8.aarch64.rpm	5e885169de0e2bc83c59cdfbb8ae3492d63966e12628e7d29aea91fe24809f8d	-	ol9_aarch64_u8_baseos_patch
	kernel-tools-libs-devel-5.14.0-687.39.1.el9_8.aarch64.rpm	a2e57f17470431d4d231e31c9daeb26ad7c8c2c4fa4b470633e23fd0ef4e1fe6	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-687.39.1.el9_8.aarch64.rpm	0d19c3bc81b894d51059e96150bb449c7835b1f2757be7af0806abd635c58bf6	-	ol9_aarch64_codeready_builder
	perf-5.14.0-687.39.1.el9_8.aarch64.rpm	3c9453d924f60dd875a3df5425bf898241326f8cce22e24ba0cce89b802bcae1	-	ol9_aarch64_appstream
	python3-perf-5.14.0-687.39.1.el9_8.aarch64.rpm	7f48c7fbe37fa24d70a4756e9da11d00c50b23fef5807aae8bb1bd189f5fe4e1	-	ol9_aarch64_appstream
	rtla-5.14.0-687.39.1.el9_8.aarch64.rpm	e6866b6ac0d0b07d1571817a79937f292f2f801d27f7cc6269b5efc5937ce8e6	-	ol9_aarch64_appstream
	rv-5.14.0-687.39.1.el9_8.aarch64.rpm	fe8cf12478aa6c2914c3c965d72585a634260d191480de68a53c190f550dd4b6	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_x86_64_appstream
	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-687.39.1.el9_8.src.rpm	42f1ec52958de0357482b2808a31062e301c9cdcd00b180046b2bc3de2e25616	-	ol9_x86_64_u8_baseos_patch
	kernel-5.14.0-687.39.1.el9_8.x86_64.rpm	c280d2658abc91943a5e5c0840058d44ab5ebaa57f822afeb606fee1f6d0d079	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-687.39.1.el9_8.x86_64.rpm	c280d2658abc91943a5e5c0840058d44ab5ebaa57f822afeb606fee1f6d0d079	-	ol9_x86_64_u8_baseos_patch
	kernel-abi-stablelists-5.14.0-687.39.1.el9_8.noarch.rpm	42e6257fe4aa479ef95258be4035cbe585d6ff6101db68e51a6d57cf618a7c39	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-687.39.1.el9_8.noarch.rpm	42e6257fe4aa479ef95258be4035cbe585d6ff6101db68e51a6d57cf618a7c39	-	ol9_x86_64_u8_baseos_patch
	kernel-core-5.14.0-687.39.1.el9_8.x86_64.rpm	d09bafb36d360a969b3fd9d366f504ce6c4399cce1acd5ffd6eaf370e635b63a	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-687.39.1.el9_8.x86_64.rpm	d09bafb36d360a969b3fd9d366f504ce6c4399cce1acd5ffd6eaf370e635b63a	-	ol9_x86_64_u8_baseos_patch
	kernel-cross-headers-5.14.0-687.39.1.el9_8.x86_64.rpm	514a642aaf9d3661fdfff8e0fa3099bf4a0c0c1c897ba69c94dfe6d7718731c7	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-687.39.1.el9_8.x86_64.rpm	ae963f1d4c3afb0ee6f32417faba30ce4c4315fc0d258cad00fa1258ca0e30ef	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-687.39.1.el9_8.x86_64.rpm	ae963f1d4c3afb0ee6f32417faba30ce4c4315fc0d258cad00fa1258ca0e30ef	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-core-5.14.0-687.39.1.el9_8.x86_64.rpm	214e9ac8089994dacf9efc4a9e57afef851846cd762f97ff9fa2b17563f51c49	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-687.39.1.el9_8.x86_64.rpm	214e9ac8089994dacf9efc4a9e57afef851846cd762f97ff9fa2b17563f51c49	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-devel-5.14.0-687.39.1.el9_8.x86_64.rpm	95e236e9c6eb39d1a76d4a5cddfc69ef8e69e29fe0920bbcfebd5faaec88656f	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-687.39.1.el9_8.x86_64.rpm	094b243300404add079e0e2353767446221e24c69d35a34d81bbc6715fb3962e	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-687.39.1.el9_8.x86_64.rpm	f69f7b18ee958edb57613b45dc8a26ce824c342c68af2412099b6da7bbd8a835	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-687.39.1.el9_8.x86_64.rpm	f69f7b18ee958edb57613b45dc8a26ce824c342c68af2412099b6da7bbd8a835	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm	0736710475d7544cf9d955a7df5c71db2bb5c8b53b09fae207f38743ea485a56	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm	0736710475d7544cf9d955a7df5c71db2bb5c8b53b09fae207f38743ea485a56	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm	1ba95aedb272995bcc402d05eeb639e010c43107bab7dff7cdd13019a0323b4b	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm	1ba95aedb272995bcc402d05eeb639e010c43107bab7dff7cdd13019a0323b4b	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm	57ed86ec1fab61d65a2b29820de6df7e06c2e823184fdd3930c9d613b0b038d7	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm	57ed86ec1fab61d65a2b29820de6df7e06c2e823184fdd3930c9d613b0b038d7	-	ol9_x86_64_u8_baseos_patch
	kernel-devel-5.14.0-687.39.1.el9_8.x86_64.rpm	798a399c59fd630b5640bf9be6533e238d55847cfc0805cf120b3809aaa90fa6	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-687.39.1.el9_8.x86_64.rpm	a91da32d4d68c04ecf5494b34a759288ab3129dab1386404711ab9fc5d5a2378	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-687.39.1.el9_8.noarch.rpm	57e85a11fe80a14d7c35b0b1cad2726bf99599a7785198c7a04c5726d78b4e5a	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-687.39.1.el9_8.x86_64.rpm	cfb75d04d72b23723db86d28ecbbe098d79ce649dbcbc5498092dda92922966d	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-687.39.1.el9_8.x86_64.rpm	a648267c6e3ef176c77d08d74c52e9eabecfd8203fd5802c0a84389918a344fb	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-687.39.1.el9_8.x86_64.rpm	a648267c6e3ef176c77d08d74c52e9eabecfd8203fd5802c0a84389918a344fb	-	ol9_x86_64_u8_baseos_patch
	kernel-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm	82982e6a025891fa69028c84438bccdd31440e040b21de30bad5080b7ce18dd4	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm	82982e6a025891fa69028c84438bccdd31440e040b21de30bad5080b7ce18dd4	-	ol9_x86_64_u8_baseos_patch
	kernel-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm	05c52ddf43e092d51b40156fb8ca56c441c2b7206357b1a6bde79a1661b8ac53	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm	05c52ddf43e092d51b40156fb8ca56c441c2b7206357b1a6bde79a1661b8ac53	-	ol9_x86_64_u8_baseos_patch
	kernel-tools-5.14.0-687.39.1.el9_8.x86_64.rpm	921a3c7e2743d200e615060f4d963569ee148f9c010b77874067df9364a85549	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-687.39.1.el9_8.x86_64.rpm	921a3c7e2743d200e615060f4d963569ee148f9c010b77874067df9364a85549	-	ol9_x86_64_u8_baseos_patch
	kernel-tools-libs-5.14.0-687.39.1.el9_8.x86_64.rpm	f6a2e1cbd14250d51d3511a133d4b25548175447a2c6e98ee986414259350721	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-687.39.1.el9_8.x86_64.rpm	f6a2e1cbd14250d51d3511a133d4b25548175447a2c6e98ee986414259350721	-	ol9_x86_64_u8_baseos_patch
	kernel-tools-libs-devel-5.14.0-687.39.1.el9_8.x86_64.rpm	e3124deeff0957d0b905b5ae3b0d5750499e5f3f55a5c95432fef7a7bacf9b0f	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm	f884e04a665a1204ae0d3d55937b601331caa18a75a1658caaf5e03f991bd0e3	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm	f884e04a665a1204ae0d3d55937b601331caa18a75a1658caaf5e03f991bd0e3	-	ol9_x86_64_u8_baseos_patch
	kernel-uki-virt-addons-5.14.0-687.39.1.el9_8.x86_64.rpm	f382e3787b77f47e701e0c0cc16e3d7504408c8e98890a47fef8227c62b45c02	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-687.39.1.el9_8.x86_64.rpm	f382e3787b77f47e701e0c0cc16e3d7504408c8e98890a47fef8227c62b45c02	-	ol9_x86_64_u8_baseos_patch
	libperf-5.14.0-687.39.1.el9_8.x86_64.rpm	a3addcea07814f60be301ed1d0b5d41f50690a00aa961ea885a697437d7e3bb0	-	ol9_x86_64_codeready_builder
	perf-5.14.0-687.39.1.el9_8.x86_64.rpm	2430a0753f9b71b2201a762cb24c659f63f45aebb18532e5ea47c80f3ca68954	-	ol9_x86_64_appstream
	python3-perf-5.14.0-687.39.1.el9_8.x86_64.rpm	04f127daf26a4a670c36ab3176b0c4ffce30e32313b70cd0a19aa31ffcc23a7d	-	ol9_x86_64_appstream
	rtla-5.14.0-687.39.1.el9_8.x86_64.rpm	75ff49450131b47e4ae8484362801a7db8b7c7d7d9459ba5b62121fc61f6cd92	-	ol9_x86_64_appstream
	rv-5.14.0-687.39.1.el9_8.x86_64.rpm	2387c644e20d4658d63f747b75f8ea2462a8c6af58a46c283d2a3d9dabbd10b8	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team