ELBA-2026-33285-1

ELBA-2026-33285-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-14

Description

[5.14.0-687.20.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-687.20.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.20.1]
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-687.20.1.0.1.el9_8.src.rpm	ff97792c3be822da6edc55e1bbdbc7340a1bb06beb1d391f09027494d396f303	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	90bd76daaefc2b2d00c22397c4755d26324bfce70817be7b46c583c308fc5e97	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-687.20.1.0.1.el9_8.noarch.rpm	8f3aa5cd2b598638334d5907079ec4a6d2d94355f7a2676f76acd7a2d7b66d94	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	24b3c97b513c8f83debc482f5c542902378d5721f1d5a8b71eddb2e066af2079	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	04405edbb8a5da468f8b1d65bb20690c5b1b52adc5baa6d03302ee6d79a71808	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	fb0ef3daff596ccf062ffc05eb44d96d898b4cbbf730d23c8311f23d7aece31b	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	ba265089d9630721f2c9da249b3c880d664c3ca8ce45f95c6f95b9d285f4f933	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	2b46e30a4a92bda2e5613725035886a0ac8c422e2631ca4a4f2a662b318bbea5	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	755668785b191443bafc5f53cb884fb598d995e955c1efcfe877bad1e9399ccb	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	ce71b27bfda85ffcd250d5a222ceda872a42fbdf53e3d2777c3bc1ea0efe57d6	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	d5a1bd3718dc59e048063c45e9a73d122ed68701095ba58b4cadd69372e7a059	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	7d1c82221ce7f0fd41f3bf1d1870912523b29ee4486afbac6f1c5aebe1cc78a6	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	3da376b6a5f6c1da5eb98b951a4d911160513755101ed71dac37ddb255403bf6	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	693a9e29ff38135974d0aa8c1cc4ca69028909a9a6a5a4149c9fb1b9e941603d	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	80392c4187227f98bc1d55bf1831a9cc0353676e871c0c9a45eb8ab83c5d99ba	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-687.20.1.0.1.el9_8.noarch.rpm	133f4161a2d04af01435e4f8a4b8881271f41edb30f008bed3000dada90a9d3e	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	350d829f8d71554bc15813345558d9fb0c81f9abca8b3f9ae4f63993398d3f24	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	c0d0dc95cbaef6dc5522bb782ac634ad476b655459ea9d96c86a97952d24e11f	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	59d4ba1b4b5c6de7b261abc1c8dd18bea9a1e4836c3a5ad810da76099bb6af20	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	c64fa4a50b9abb6a0585ca2176cc66364544c9cafffd8fc133d0a9600fddbc43	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	45ae2eed8890670500b93fdca913678a971825bd76c9fc9bda7e9e8cea230aa9	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	dbe799c197b90bfdf34233e157410d90bd12e380b5bc8f050523f70e147bec01	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	27b9d3f0b0195b38874973e2f1cbe4c382d7ea21c17f1fe7460eac98f573440b	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	0066255fa3118120dc10146e22766c8af7d144904d5782a57ac4e2e0457fc861	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	aa06d6bbef239a9c833c9e35d57c3b1517ff339370df9d5cbd2feccf2bafa4fb	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	1e2c5dcbcb96e7836a28183ae3e9b6d3da722000caef3aac414156ea0843e79b	-	ol9_x86_64_MODRHCK
	perf-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	30f4351d6d343655bd88b7592ce728e57414614959c08e3d5c2946884b597dcc	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	9212ece77772edde745956f75dc246791dd53b7c5526085d89de9f1e3b391d32	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	fad9552334ecb4dcddb31e5de54cfa1a3fc67f0dfba1c9c6b5c3ab6965c8fb4c	-	ol9_x86_64_MODRHCK
	rv-5.14.0-687.20.1.0.1.el9_8.x86_64.rpm	b3606631f3d98008b43bb17bf9014715ef0c6ac3df3462bc8ad594030f9ec6ba	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team