ELBA-2026-13565-1

ELBA-2026-13565-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-05-06

Description

[5.14.0-611.54.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-611.54.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.54.1]
- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172201]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172201]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172201]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172201]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172201] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172201] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172201]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172201] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172201] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172201]

[5.14.0-611.53.1]
- tracing: Fix a warning when allocating buffered events fails (CKI KWF BOT) [RHEL-169366]
- tracing: Fix a possible race when disabling buffered events (CKI KWF BOT) [RHEL-169366]
- tracing: Fix incomplete locking when disabling buffered events (CKI KWF BOT) [RHEL-169366]
- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-104807]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-104807]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-104807]
- i2c: i801: Revert 'i2c: i801: replace acpi_lock with I2C bus lock' (David Arcari) [RHEL-155311]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157327] {CVE-2026-23270}

[5.14.0-611.52.1]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-150464] {CVE-2026-23136}

[5.14.0-611.51.1]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167016] {CVE-2026-31402}
- i40e: support generic devlink param 'max_mac_per_vf' (Mohammad Heib) [RHEL-121643]
- devlink: Add new 'max_mac_per_vf' generic device param (Mohammad Heib) [RHEL-121643]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121643]

[5.14.0-611.50.1]
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158987]
- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143624]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.54.1.0.1.el9_7.src.rpm	2cc33d6ea8ff2cfc93f7bde31673b020bbc64cd3595a69fc09809cbe8a7df6fa	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	c0ea62e83ad995c21a645aac9101516bc9b15270940bd9468ef866b9744c1a4e	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-611.54.1.0.1.el9_7.noarch.rpm	7665bf3906010782331fc66e193798c3ba79d9e6ab5376cfcb6fbe5cbf848f47	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	26a9bdb6c00f516eef6f7a2649767c1d87f5512e059768fa7cb1cd790187f517	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	678ad8a08938c040d33d38872d31e874a51287e337e7520b1e423ef33b87f162	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	474d7c51233197be0a5d822c1ef308f1eb28cfbb65b5e1c2bba18449779b199f	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	688b7ad62247f32df3979eeaee5717ff345e31d97c1a339322c77de76e22fac4	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	791d1078841efd08b7e5e6d4b55c3253c28c60bfd7860ec5bc8dd24534fd8d5c	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	4b516ce804dc88168b5cf171d11857c47a58dda4c2811c9783268beb99a2addd	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	59c56a3da1b3e4d4834691adf97e8689cf36c2548d489987750e2be89cb52d85	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	f905c79df33bb4b237c40646a441222a630649ef0c44bd46a124dea256fc6c2f	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	48a0b101e033d8bc3b33f099403eb73137ec1e78d682e8b996b87c8b73610a4a	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	2fb621ab77668cba104b95ee0690084ce263cff2eaf9bed016b2131743fcdacd	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	960e4e007b019596072cf0e64061f112da5b3fe128c4fb1238f5f04efb9b2328	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	16ca111633e4b020f5029b4182c5694e1b5a0ac2d0164fe81bb49e656247936e	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-611.54.1.0.1.el9_7.noarch.rpm	0d0ec784ed48306fb12fb795ce90ee04738a5e9579dfec130fcb1f9595b31863	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	83a426063eb75dee6eef1c83280e49ea1d5f950e0dce498f59a3dd65e78595bd	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	50b1dd5dd82c96bb68b0c045a038da24fd9667d3914f9830979d413cc96b1ff0	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	0c73e4b977776c7c947bcca21579337ac093c260c7edfd45dd63172d2ff0e913	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	222ed87a0a261140b64160ae2f754b6262d3c7fe311bd7a9c88886305f8b6df2	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	b4710139511ca63bef1acf7dfa0a086dae6139b568b0b8a86d074ddee7c1d70d	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	a52227bb00052d6c2547cf090095741149daa2a432d9b425fc8066f1b974d5fd	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	31310b9a267e38ba6ed54eb258330ede38aa1af356b40091c35f8f0a7490b852	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	02d4dccf96343d6fbee684a0ffe2156f966edbfdaefc060b3a68048f9cbb2b75	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	da5583d5bd1c252f858e6cb15a044ee3ef8258f08f0091f7fef3501e1dc05933	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	e0487fc4629b556a305dec0521e0a4be8ffa8bccbac1f05f8c28a8807bdecc9b	-	ol9_x86_64_MODRHCK
	perf-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	596e7a44d7e69c0e2c47ca37eb2612f1641d3563e4ae6967bdc6a8ca11281506	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	7a1d2165d8fcfd9b2d9b16a22eca350891443a09037c7e4eebacf15367174eaa	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	ebba38846a3a905215c6b24a97fe5dc17e31e39c5b7831ee53d9b8826d57fc68	-	ol9_x86_64_MODRHCK
	rv-5.14.0-611.54.1.0.1.el9_7.x86_64.rpm	ab8c911702d3f1b134f0f061ed2c6d96c39295a7f776d421556038d48121f1fb	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team