ELBA-2026-0445-1

ELBA-2026-0445-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-01-13

Description

[5.14.0-611.20.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-611.20.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.20.1]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124607] {CVE-2025-39806}
- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134001] {CVE-2025-40240}
- selftests/landlock: Add a new test for setuid() (Stepan Horacek) [RHEL-132712]
- selftests/landlock: Split signal_scoping_threads tests (Stepan Horacek) [RHEL-132712]
- landlock: Always allow signals between threads of the same process (Stepan Horacek) [RHEL-132712]
- landlock: Prepare to add second errata (Stepan Horacek) [RHEL-132712]
- landlock: Add the errata interface (Stepan Horacek) [RHEL-132712]
- selftests/landlock: Test signal scoping for threads (Stepan Horacek) [RHEL-132712]
- selftests/landlock: Test signal scoping (Stepan Horacek) [RHEL-132712]
- landlock: Add signal scoping (Stepan Horacek) [RHEL-132712]

[5.14.0-611.19.1]
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-133543]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-133543]
- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119176] {CVE-2025-39840}

[5.14.0-611.18.1]
- NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-134237]
- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)

[5.14.0-611.17.1]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126165]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124917]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119150] {CVE-2025-39883}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.20.1.0.1.el9_7.src.rpm	b984317768d1658766d2c5d101c391cae34afb4b186f322a943cbae659f5752e	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	788cceedca03220ced1ad7fc52cc395b1965e1e8c177454092d828b1598a957d	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-611.20.1.0.1.el9_7.noarch.rpm	f82a1557ed63b1ad07510219ea9568be5c9123c026d9b8cbc478a05ead1614bb	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	4e70a8bb66fa9cbcb4b17c7a8458ace15be9e40a4f4b8e6d59bf703a43b19c71	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	a244a0eb6563a1bef2a01f4fe5afc8c6714266e73ce17b24d44725a93c6dab83	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	431d1e1504a3a420e5a8345aaf0dcb65570d67ebbc77ee846e6dcf09a4449f7b	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	85d625738f266bec049fc0fbfd8dd1ec1c476e53589bca6be7a3c45b3a151981	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	c5f27cf437efc9f6748d027e35079efe22fb6c527397e8d59ed5dfd8cab71931	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	6761e2001ae43b93603980c5ba1c00c93c3bef446a3fce41643e56057aca40ce	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	0a58a022221fd7b2c23c2d70e3bdbee8f0e6cbf0689cfc06647fc74bac225f03	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	af4c09c6ce323d73ed146b2e5368636836dd249a364347e2ec7e879cdac0de00	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	fd0b24820b5c9fc4bad84fdcf417b237c984da42fb1d0373dc18463474faa03c	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	6eeaf8cc3f1e10793101773c4d0e3a901aa3112686eb792190923b6e48ddfdc2	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	3ea260c258292715b090e65153990c3607981114eac5647a32462a969541585e	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	f7691b8356a54d06d1e60026eafa1b9815a9438bf3373bf954f86e5f66200da2	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-611.20.1.0.1.el9_7.noarch.rpm	dd59b9fab640aee32a7626b850c5c4dd0b642b7ebbc6bc9bd83683d1aff3f686	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	ac6035b35423d2cc69fe6c6c57a4040e5d8c5e7435e3a233769f59a6d26fa62d	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	85788e955d892750b2a61a523d9e1f80f92666a061e3d80e6882307249e4ed3e	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	a973167e96f0bf14244711c2aac8456fda3e7829bd5708c2e12455526b8ab3a2	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	7c567c084db7b02c7cf468d5ac851b0df1f17b9a886d86dbf61d55613fe0a722	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	291d0942ae57599643d5e378de1bf2aa340f6ee6a5f338d34a5bfe191278b33f	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	317fecb2d8353ab1844086f258d7f40f80b27f412bb8cdb5dafd136e2d531f02	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	664b4403c27c757b5c5d36eca940091de066a853a0fad0b7e0508d29aed488d3	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	99bdf1f57581660cff132132e1558413ab1f15c426c0a903ba15084ff06c3787	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	860470ae3857ee8824e09503140ab979386651c60bd93f5031074476d0657471	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	f9cac10531da2b8c574e49d5ad6b4279633be16689987957ae1cae2408c53aa8	-	ol9_x86_64_MODRHCK
	perf-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	91532b369798138cd49c75e3629f2f5c19c6db0a9ccc90632fac21653d90ca92	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	daa21361e6cec84918334e53470669a2ea39140c9665c2ba10b66d6bdfd42890	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	5025054d34fd4976788b6ef3cdab5dca06614ec0a3f6cc866906432fa8a6ddff	-	ol9_x86_64_MODRHCK
	rv-5.14.0-611.20.1.0.1.el9_7.x86_64.rpm	3ee16c2e949562edf6c91897619b61efe3e63404feb926819d035722b2e2193a	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team