ELBA-2026-2212-1

ELBA-2026-2212-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-02-10

Description

[5.14.0-611.30.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-611.30.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.30.1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137329] {CVE-2025-38730}
- io_uring/kbuf: add io_kbuf_commit() helper (Jeff Moyer) [RHEL-137329]
- io_uring/kbuf: use 'bl' directly rather than req->buf_list (Jeff Moyer) [RHEL-137329]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143296]
- net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-141404]
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137601] {CVE-2025-38459}
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139699]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139699]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139699]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139699]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139699]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139699]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139699]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139699]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139699]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129084] {CVE-2025-40170}
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-129084]
- net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-129084]
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129018] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128982] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128982]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128982]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128982]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128982]
- bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 (Hangbin Liu) [RHEL-128982]
- vrf: Fix lockdep splat in output path (Hangbin Liu) [RHEL-128982]
- ipv6: remove nexthop_fib6_nh_bh() (Hangbin Liu) [RHEL-128982]
- net: remove rcu_dereference_bh_rtnl() (Hangbin Liu) [RHEL-128982]
- neighbour: switch to standard rcu, instead of rcu_bh (Hangbin Liu) [RHEL-128982]
- ipv6: flowlabel: do not disable BH where not needed (Hangbin Liu) [RHEL-128982]
- ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() (Hangbin Liu) [RHEL-128982]
- neigh: introduce neigh_confirm() helper function (Hangbin Liu) [RHEL-128982]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-132923]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-132923]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-132923]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137697] {CVE-2025-38403}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136909] {CVE-2025-40269}
- nvme: tcp: Fix compilation warning with W=1 (John Meneghini) [RHEL-129928]
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (John Meneghini) [RHEL-129928]

[5.14.0-611.29.1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138015] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138015] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137364] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137069] {CVE-2025-38024}

[5.14.0-611.28.1]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133337]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133337]
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137098] {CVE-2025-40271}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136256] {CVE-2025-40318}
- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (CKI Backport Bot) [RHEL-134352] {CVE-2025-38022}
- cifs: Fix deadlock in cifs_writepages during reconnect (Paulo Alcantara) [RHEL-134234]
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131974] {CVE-2025-37819}
- net: openvswitch: fix nested key length validation in the set() action (CKI Backport Bot) [RHEL-131801] {CVE-2025-37789}
- md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-126532]
- md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-126532]
- md: add legacy_async_del_gendisk mode (Nigel Croxon) [RHEL-126532]
- md: Don't clear MD_CLOSING until mddev is freed (Nigel Croxon) [RHEL-126532]
- md: fix create on open mddev lifetime regression (Nigel Croxon) [RHEL-126532]
- md: call del_gendisk in control path (Nigel Croxon) [RHEL-126532]
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128891] {CVE-2025-40141}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.30.1.0.1.el9_7.src.rpm	62b33e85053e997bfc6d52a97ca3ad70b6de1df5bb48b1931881f99353170203	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	3e0c04c47e7e828c7f85496ce08870cd9fe08c691909736654fa049a08235eef	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-611.30.1.0.1.el9_7.noarch.rpm	36d73ca3facc3cb9a88581c1194b87d00f1da13f8ed2965fb98bb1b86b51a00e	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	6207815894e669e89dfd24d80523f00800350409c47bc8bbb956c51a92fd2eff	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	624ea995c4959a658d1c10122fadbb28fda549cea5dab6a1b7ae8b009bd2a0f8	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	94f4e37d9af770aa4288817ecf30cdb584113a0174afc82b878809b8f26d6300	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	ceb0957bd2414ff816618f7b5cedb7239d31246d00e316b7cde21b6ffc4fd5ad	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	3f8e2cffb2125654d0909a8f57d3a7c70e8d30a3408d82fb20ce29fedede7591	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	49f9fff438a15ac07c5468ca122fcec3d427552dcb5c879fce07f46b0858d984	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	de7cf061fd3d2e5f86ccf06275d2020006acd88cfad8f5affc33dfdaf4a36489	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	89d730b12ee1447e8e7915b9b67ee4e86a1142e7c162bb661276dadb9a6a7a1e	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	581264fc1a67ac4cfa7fe0f965c455fa1a21183d33ccf1d8ebc53d58d5b0af4e	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	68c59bb4f2a1422f48bb4b8226169f639084dcff4fabf11170265d6a5b4a68af	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	35e9345db36ba25c278df684fd2da919264687d7313bf635987a6aeafe114e5b	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	abcf5dde63e7d84e3fd0c475be4b4f005804fcf8986d36effdb1a728bf8dc63b	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-611.30.1.0.1.el9_7.noarch.rpm	eb5a66ad53ca216132a6303591dc3f56d92ad366420f2c0159cd20b2988ae15c	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	a934e9e606919237a5e1da3b71e0420b68c1c6604977999293b7d972386d2414	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	62fbc11e431b42295a4643190b6c30e3bb307b163f3581e3a047ece0d7e72dc5	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	28e16ad5128980b9368636ef648e9e0362300f598aa96ad9c73475c0a08d6a01	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	7f6542243f4f00be7669e606c178c56c0d1a771c3e3b2673edadb58c1df422a4	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	884e689208b48b7b4ce77e260491219d308a2995a1c54fbfc09cdbf4982c7376	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	9eb24014618bb0a410fb9d32b3c8f20e54ca16c7509efcb6a5ee78ec07509d7a	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	c2a5fdab05aa65644c133838a1f76afe5f4a279de18010c703cbc50fbb4da350	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	22671ab5acd098482906bf7e26a928008ff15b2e16081fa06c62eb6359c869f7	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	e76a5783ea71c8f3ec318af18147b2d29e1f1fe6ee9144f7b99e4f27b0ffc830	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	155b5b28c73dddade5c21a98dd4f0480ccf974c932176178778302ac9b05dc08	-	ol9_x86_64_MODRHCK
	perf-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	f4bdde86f1dbd7c0b5177b1809055b6baa01addbc2dd553795b5f0f2ab6ecdfe	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	b56d9a486bb690eff98f1b5509453bc994b7c17416ceac12eca92199c9fb7f56	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	f023cd788dec60bbf8083dccf7ea693417eb4fcf93b2d2be3e4f99be632e6910	-	ol9_x86_64_MODRHCK
	rv-5.14.0-611.30.1.0.1.el9_7.x86_64.rpm	a2ab7a97cad71ef07c481ff179ee3023754ee002f6a15b0592cf0883e2c36fe3	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team