Stay Connected:

ELSA-2026-67470-0

ELSA-2026-67470-0 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-15

Description


[5.14.0-687.48.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.48.1]
- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556}
- gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223]
- gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223]
- gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223]
- gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223]
- octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045}
- octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923}
- net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294}
- net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143}
- security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015}
- vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248}


Related CVEs


CVE-2026-43248
CVE-2026-63923
CVE-2026-64015
CVE-2026-68143
CVE-2026-68294
CVE-2026-72045
CVE-2026-74556

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_aarch64_appstream
kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_aarch64_baseos_latest
kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_aarch64_codeready_builder
kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.48.1.el9_8.aarch64.rpm9868bbe9c1d2cce1557e186ab4ca3f40dfa9a6f39139d20a60d805dbbcdf16b7-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.48.1.el9_8.aarch64.rpm1e0aa172be695072acd94978a75a25470207108548f812ae9fc62c00dbeb40cf-ol9_aarch64_appstream
kernel-tools-5.14.0-687.48.1.el9_8.aarch64.rpmb5bad6d50b9639d30e075564d03e079a75dd7525805366fb6c99763d525ff573-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.48.1.el9_8.aarch64.rpmb5bad6d50b9639d30e075564d03e079a75dd7525805366fb6c99763d525ff573-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.48.1.el9_8.aarch64.rpm391a936097e96758ed84b1013213566b647fdaa34850a73b5d442017b42d4b87-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.48.1.el9_8.aarch64.rpm391a936097e96758ed84b1013213566b647fdaa34850a73b5d442017b42d4b87-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.48.1.el9_8.aarch64.rpma5ef857bf7d595c5386f3b1c7886d1aed484773e9a31819d053d1134701f0cfe-ol9_aarch64_codeready_builder
libperf-5.14.0-687.48.1.el9_8.aarch64.rpmeaf8e2fa45618e3d7c9fec94205196a6798c395a466c48c8e1c175abd645e6d2-ol9_aarch64_codeready_builder
perf-5.14.0-687.48.1.el9_8.aarch64.rpmfbd84319ecf2b6dc1e95eccebd25bcca12a9c099e4220a3fbb9d73ffd9da1cb0-ol9_aarch64_appstream
python3-perf-5.14.0-687.48.1.el9_8.aarch64.rpmaef55f233a756f68fc43f90442b44f36db96dc9e04034f95dc062784db730d9d-ol9_aarch64_appstream
rtla-5.14.0-687.48.1.el9_8.aarch64.rpme7e3e521ac991b8eeb158d782e878f275092e6c4c33772d643c49e63f6b3e69c-ol9_aarch64_appstream
rv-5.14.0-687.48.1.el9_8.aarch64.rpm744899c7ab2d97eab9aff3e9d5c2fc4bf0b9b85bb17607b8dc37ca95da3be465-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_x86_64_appstream
kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_x86_64_baseos_latest
kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_x86_64_codeready_builder
kernel-5.14.0-687.48.1.el9_8.src.rpm6c68239af6d252677af185f641e72ddc814d52d621a64568d1148c4ad9b33aaf-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.48.1.el9_8.x86_64.rpma91610aa7a0bd24d2a7cfd1dfc5467a23f2451dd7aef4b7a69addd836f77a71a-ol9_x86_64_baseos_latest
kernel-5.14.0-687.48.1.el9_8.x86_64.rpma91610aa7a0bd24d2a7cfd1dfc5467a23f2451dd7aef4b7a69addd836f77a71a-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.48.1.el9_8.noarch.rpm332cd2375db501ab2eef3c19ecc8dfe3422cf5f965dc2055efa43852a5895c6c-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.48.1.el9_8.noarch.rpm332cd2375db501ab2eef3c19ecc8dfe3422cf5f965dc2055efa43852a5895c6c-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.48.1.el9_8.x86_64.rpm14851fc6fe62556b873cd6b9fefdad3d25f1cb24cd9f13a0cca7e39da6519490-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.48.1.el9_8.x86_64.rpm14851fc6fe62556b873cd6b9fefdad3d25f1cb24cd9f13a0cca7e39da6519490-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.48.1.el9_8.x86_64.rpm53fff119aaf0c039457582980de31173ddb7644851ece2e9024dbe932586e484-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.48.1.el9_8.x86_64.rpm34fd3881a4abe408ea32725de548cc3424ed9f0bc4589da832b00fff68ff50c0-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.48.1.el9_8.x86_64.rpm34fd3881a4abe408ea32725de548cc3424ed9f0bc4589da832b00fff68ff50c0-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.48.1.el9_8.x86_64.rpm5a04e45550e1d1027228033db04a3aeb901fc99a2678d7c5fa258d587f1aa7d9-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.48.1.el9_8.x86_64.rpm5a04e45550e1d1027228033db04a3aeb901fc99a2678d7c5fa258d587f1aa7d9-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.48.1.el9_8.x86_64.rpm3868346e644013031704e2c41bd5f38d7d19f93581df0508bf5a24eb3efaaf7b-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.48.1.el9_8.x86_64.rpm7e72f3a3a5234ad51af93175ea7d8bb1d0fe0d8a3f22f4ada2c5ffd765bfc0e9-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.48.1.el9_8.x86_64.rpm1502e7564d967abdbaa77e53b36ffb4e845758e94f9b53fa7530aed18b0347f5-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.48.1.el9_8.x86_64.rpm1502e7564d967abdbaa77e53b36ffb4e845758e94f9b53fa7530aed18b0347f5-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm5c7110814888cd0c10e7b93b596c0cc7b04bbfe08dab6b9e4ca44cb00e86a174-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm5c7110814888cd0c10e7b93b596c0cc7b04bbfe08dab6b9e4ca44cb00e86a174-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpmff12532d140f8a3dc1b36d172ef748d1802c59894efeca174f576820e023bf65-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpmff12532d140f8a3dc1b36d172ef748d1802c59894efeca174f576820e023bf65-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.48.1.el9_8.x86_64.rpma085e249a09c78751bd88d35c455e31e2a3395cbe2f1ed9b2f84d4274d8f0737-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.48.1.el9_8.x86_64.rpma085e249a09c78751bd88d35c455e31e2a3395cbe2f1ed9b2f84d4274d8f0737-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.48.1.el9_8.x86_64.rpm10791dabe0675007e68336303ede626af82eb942ef8db59ff28be288312f8db9-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.48.1.el9_8.x86_64.rpm33b4111fcca979c478c50af64e32830c56322345ae7945deef0c3267d5657a53-ol9_x86_64_appstream
kernel-doc-5.14.0-687.48.1.el9_8.noarch.rpmbd9d00aa5a647a866b6f4f3f66b9f719cf2bb47df2f3b68abfb5d31f52189c2a-ol9_x86_64_appstream
kernel-headers-5.14.0-687.48.1.el9_8.x86_64.rpm951c8249b02a16a171d2b31a265f5d331213423b057730e2f1a67000da9c61c8-ol9_x86_64_appstream
kernel-modules-5.14.0-687.48.1.el9_8.x86_64.rpm63b6fa7b5995b12de7b40ec6ee4b25f742dc04d0b45c1dc51010b6e8840356d7-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.48.1.el9_8.x86_64.rpm63b6fa7b5995b12de7b40ec6ee4b25f742dc04d0b45c1dc51010b6e8840356d7-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm80bdd717751842ea5b287fd6d563020fcbb70abe303fa61ddc601d4a0b57ac3e-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm80bdd717751842ea5b287fd6d563020fcbb70abe303fa61ddc601d4a0b57ac3e-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpm2244de176822e061447f04db34c3d11b53ad4f18c6e7924b4bf243e5329b82e0-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpm2244de176822e061447f04db34c3d11b53ad4f18c6e7924b4bf243e5329b82e0-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.48.1.el9_8.x86_64.rpm2c68ad89c2b5350801b5f3f1a5188e78e2cd1ae5ff789ab1083faad4f674b4b5-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.48.1.el9_8.x86_64.rpm2c68ad89c2b5350801b5f3f1a5188e78e2cd1ae5ff789ab1083faad4f674b4b5-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.48.1.el9_8.x86_64.rpm623919d4a843e28b3b43e1aad32a27fe0c4c49a4b9a98f516a34ccbb8b294aeb-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.48.1.el9_8.x86_64.rpm623919d4a843e28b3b43e1aad32a27fe0c4c49a4b9a98f516a34ccbb8b294aeb-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.48.1.el9_8.x86_64.rpm43fe54e267204acc3f63603c7ef334a6161ce7b780ec0be86479c68ca3c3fb76-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.48.1.el9_8.x86_64.rpmda596c06d2e516e79c438be8405077dd814b961bfb931414f17176d608642fe1-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.48.1.el9_8.x86_64.rpmda596c06d2e516e79c438be8405077dd814b961bfb931414f17176d608642fe1-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.48.1.el9_8.x86_64.rpm26ff81b781505ffe70e36d88dcb447c5aca95c4ad674d892a95e8b2850a8de98-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.48.1.el9_8.x86_64.rpm26ff81b781505ffe70e36d88dcb447c5aca95c4ad674d892a95e8b2850a8de98-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.48.1.el9_8.x86_64.rpm028f179342a741cdb0c571fd0998a369558ab0b77834b09c673856e4b021ac02-ol9_x86_64_codeready_builder
perf-5.14.0-687.48.1.el9_8.x86_64.rpmb818b14c37e61377782b7c4ce4751e3ce0b9a29afa5083b26f293a07229a7657-ol9_x86_64_appstream
python3-perf-5.14.0-687.48.1.el9_8.x86_64.rpmc968f891664e3b501db4fd104e35caa3f9ccdd18bb5306364020d84c48f46f4d-ol9_x86_64_appstream
rtla-5.14.0-687.48.1.el9_8.x86_64.rpma1e829b031e91b4bfb7154b0c17e2d7159674c07e5fca1321a34ea863d9de66b-ol9_x86_64_appstream
rv-5.14.0-687.48.1.el9_8.x86_64.rpm022599f42abc23baed7d4be878f4b138abc643fe387ee21b305b090e5855399c-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights