ELSA-2026-63129-0
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-63129-0
ELSA-2026-63129-0 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-08 |
Description
[5.14.0-687.44.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-687.44.1]
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069}
- locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684]
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808}
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073}
[5.14.0-687.43.1]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887}
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130}
- sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496]
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304}
- tpm: tpm_tis: stop transmit if retries are exhausted (Stepan Horacek) [RHEL-213940]
- tpm: tpm_tis: add error logging for data transfer (Stepan Horacek) [RHEL-213940]
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Stepan Horacek) [RHEL-213940]
- tpm_tis: Resend command to recover from data transfer errors (Stepan Horacek) [RHEL-213940]
- tpm_tis: Use responseRetry to recover from data transfer errors (Stepan Horacek) [RHEL-213940]
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387}
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Stepan Horacek) [RHEL-189953] {CVE-2025-71147}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_aarch64_appstream |
| kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.44.1.el9_8.aarch64.rpm | 9e849c84d15d8c23e80f8f804d822b8fcb35889e9ee0b8f9f196ebe6538e44ca | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-687.44.1.el9_8.aarch64.rpm | 6526b6d3d10d9e4ccf23ac7a4c8191eac18d238b3f71d0129670be583bfdcb64 | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-687.44.1.el9_8.aarch64.rpm | 453f64cd764bdcd0d689f4c951960c7465c4f2ff5c6d740fc9e3c7a173eb88d6 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-687.44.1.el9_8.aarch64.rpm | 453f64cd764bdcd0d689f4c951960c7465c4f2ff5c6d740fc9e3c7a173eb88d6 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.44.1.el9_8.aarch64.rpm | 01badda22d227fbbee1dc93290c2882f2f6ee928e5e1b9827c1413a137c845d3 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.44.1.el9_8.aarch64.rpm | 01badda22d227fbbee1dc93290c2882f2f6ee928e5e1b9827c1413a137c845d3 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.44.1.el9_8.aarch64.rpm | 447c8ed7bb54722cc0938ed22d2cc58becba987ed37872e72e0ed5d621effeef | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-687.44.1.el9_8.aarch64.rpm | c1f0c6c61cf90f90701f61f1d59e9e605e8b71b08f42e437d67588b96388d410 | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-687.44.1.el9_8.aarch64.rpm | 8fec30ac01e83ff14de8f1e76978c52f994d8fff89c26c071be55c41081dc1f1 | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-687.44.1.el9_8.aarch64.rpm | f07efa2930c196c0693fb52ea4e69a7fd7332e1860660952a84f89b609191ec1 | - | ol9_aarch64_appstream | |
| rtla-5.14.0-687.44.1.el9_8.aarch64.rpm | 8a3487cc9eb3c8a3b508f591314b79a8ec33d7b1347e949a119a53ce8d4019a3 | - | ol9_aarch64_appstream | |
| rv-5.14.0-687.44.1.el9_8.aarch64.rpm | 3fff23b242b4a93602a37994a27bb34accbb4c111ea7f160fb9620aebb323e47 | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_x86_64_appstream |
| kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-687.44.1.el9_8.src.rpm | 9068ca33e88df66a585074af74e16f164ec0d0fe59c1733fdb932aea9f5a0f05 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-5.14.0-687.44.1.el9_8.x86_64.rpm | cb7e0e852b09f2599dfa2910d76fe9307cd1818b15d2749b67f6e333ac013443 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.44.1.el9_8.x86_64.rpm | cb7e0e852b09f2599dfa2910d76fe9307cd1818b15d2749b67f6e333ac013443 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-abi-stablelists-5.14.0-687.44.1.el9_8.noarch.rpm | c8639a5e58224a6112e802751157cef3a3caa96f49dfbcbf46d6c9a28ed1ad9c | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-687.44.1.el9_8.noarch.rpm | c8639a5e58224a6112e802751157cef3a3caa96f49dfbcbf46d6c9a28ed1ad9c | - | ol9_x86_64_u8_baseos_patch | |
| kernel-core-5.14.0-687.44.1.el9_8.x86_64.rpm | f90d0f0b544db09907b3d55417ff7086df51ad735e434e2f42edd1aa61970734 | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-687.44.1.el9_8.x86_64.rpm | f90d0f0b544db09907b3d55417ff7086df51ad735e434e2f42edd1aa61970734 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.44.1.el9_8.x86_64.rpm | de874db53ff5b5f10d11145da58a4b0cc017219bb243cd6131cc617c73c2dec0 | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-687.44.1.el9_8.x86_64.rpm | 7ac1e30d107d097faf9a271615b3ace9f7bd711cdfe6c0b8f298fbcc1048dc9f | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-687.44.1.el9_8.x86_64.rpm | 7ac1e30d107d097faf9a271615b3ace9f7bd711cdfe6c0b8f298fbcc1048dc9f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-core-5.14.0-687.44.1.el9_8.x86_64.rpm | e0473e11edbabc03e596ff0ea0afc4b069d7dbcc510d2e066334a1d667a28c0f | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-687.44.1.el9_8.x86_64.rpm | e0473e11edbabc03e596ff0ea0afc4b069d7dbcc510d2e066334a1d667a28c0f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-devel-5.14.0-687.44.1.el9_8.x86_64.rpm | 208a900694888074df30f6e953fdbd080600519d0921a1b240624d6abc05939d | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-687.44.1.el9_8.x86_64.rpm | d5441d193a884ca9f02a527c89b3d43f81e0ace8edf16e4b34ee1f6c01a1f935 | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-687.44.1.el9_8.x86_64.rpm | b95c1f630275658e6c656a7155693cfd3f8e8ac14a639630b1a8402dfbcb816b | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-687.44.1.el9_8.x86_64.rpm | b95c1f630275658e6c656a7155693cfd3f8e8ac14a639630b1a8402dfbcb816b | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm | 5d2895e3d8630b21701efe78a67adcfeda6c9febbd144fcb66e175fb134b4545 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm | 5d2895e3d8630b21701efe78a67adcfeda6c9febbd144fcb66e175fb134b4545 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm | f3e5713e0ea355ac77b43ca272ad5c298f8103a1e55fbe2bfc81415166e0c0cf | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm | f3e5713e0ea355ac77b43ca272ad5c298f8103a1e55fbe2bfc81415166e0c0cf | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-687.44.1.el9_8.x86_64.rpm | c44c1e46f7b45b6b02f4d742e902d9a4d9286c589039f82143a2210df3db6a05 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-687.44.1.el9_8.x86_64.rpm | c44c1e46f7b45b6b02f4d742e902d9a4d9286c589039f82143a2210df3db6a05 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-devel-5.14.0-687.44.1.el9_8.x86_64.rpm | 7041d9d0cc9572ba47452076047d131aa0ed3dbed0b3c6aa34d1eb91b52839f7 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-687.44.1.el9_8.x86_64.rpm | c708acd3a9f1b6c95d8ecb74741d8ba74aa435ad31dfd5f63c9c4a400d8676d6 | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-687.44.1.el9_8.noarch.rpm | 977cd924d9182299f767482fb54910dc15e400f6714eb99dea1d83c96019770c | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-687.44.1.el9_8.x86_64.rpm | d3b9c5abebc69b348634a2bfc885cfb5e3107022a511d6f1e456a705692e2074 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-687.44.1.el9_8.x86_64.rpm | d6e777d5ec70265b230c2c3a1b378655b6c0444591a53fabc3f6fda328c3ca40 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-687.44.1.el9_8.x86_64.rpm | d6e777d5ec70265b230c2c3a1b378655b6c0444591a53fabc3f6fda328c3ca40 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm | de8a3e564cfd0e95131ac5d27ebd4b6c82b1d26723f11f38bf69baba17e4aa53 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm | de8a3e564cfd0e95131ac5d27ebd4b6c82b1d26723f11f38bf69baba17e4aa53 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm | 1c4a0d89aae80532d153fa6c689f2b8d7981b70a4a7934b4c98e24995d9bb746 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm | 1c4a0d89aae80532d153fa6c689f2b8d7981b70a4a7934b4c98e24995d9bb746 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-5.14.0-687.44.1.el9_8.x86_64.rpm | 47e00fb40146810a2c330108cf76bcf9a8192c92f6d1a31b8fbc682c3169b685 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-687.44.1.el9_8.x86_64.rpm | 47e00fb40146810a2c330108cf76bcf9a8192c92f6d1a31b8fbc682c3169b685 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.44.1.el9_8.x86_64.rpm | 66eb0f2070630f04bad489f9f5cd551a2b25cf350815762959261983eaa6824c | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.44.1.el9_8.x86_64.rpm | 66eb0f2070630f04bad489f9f5cd551a2b25cf350815762959261983eaa6824c | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.44.1.el9_8.x86_64.rpm | 2a15453cd73554886085fd4c9c2b016a6d89a7e2c440ccc29be349ebd6c01836 | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-687.44.1.el9_8.x86_64.rpm | 32ac5a1e0af3502947dc3fb0bcf24d365ebd144df796534d95c9df124d68cca3 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-687.44.1.el9_8.x86_64.rpm | 32ac5a1e0af3502947dc3fb0bcf24d365ebd144df796534d95c9df124d68cca3 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-687.44.1.el9_8.x86_64.rpm | b6bc7a09711c30ca52a77e722af91fbe0ec0bd22986d74d15ea99669c93a6b83 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-687.44.1.el9_8.x86_64.rpm | b6bc7a09711c30ca52a77e722af91fbe0ec0bd22986d74d15ea99669c93a6b83 | - | ol9_x86_64_u8_baseos_patch | |
| libperf-5.14.0-687.44.1.el9_8.x86_64.rpm | 8591071c3c0695475506eae7a2e05ab03ef882f8434995c9cd33a14477b1e6fe | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-687.44.1.el9_8.x86_64.rpm | bf9813b695b1d1d798e87af2373bf8bd38f26db82f50c0f8d9104552a4ca8a93 | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-687.44.1.el9_8.x86_64.rpm | 0d1428bba9cdfa1902b1a9dc66f64664cc99149c0b3691464a0425a1fdd3fc1c | - | ol9_x86_64_appstream | |
| rtla-5.14.0-687.44.1.el9_8.x86_64.rpm | 26878d89e3c44a8a05a34d969575051da49ddbd08886c1a6af181dca5046da1c | - | ol9_x86_64_appstream | |
| rv-5.14.0-687.44.1.el9_8.x86_64.rpm | afde0cd9b4a0a19efde4eb43dcc448f71c205d18533eb6da568d13f456c35ec6 | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
