ELBA-2026-45192-1

ELBA-2026-45192-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-08-03

Description

[5.14.0-687.30.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-687.30.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.30.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-687.30.1.0.1.el9_8.src.rpm	389760a65c254d18ee6dc0000ed978ac092f770997c214e63c6140b83b262298	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	52c7dad6b5f78a4a36b9b67071674acbf4589cfac72d2ade6c0fc3b1d2f23172	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-687.30.1.0.1.el9_8.noarch.rpm	bfe814c32e2c4641269b702dd0dc66bf256f505d4b85c0fbc59bf302330ad1cb	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	a220920d4a7ef39629e0235a6ffbb3fe68d06a85a819b981bbd561f526e71c3c	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	a76da512191766bed9224fe56b785f5fcf3af7b70befe178ba06dedb25811daa	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	377a6dff1b1bbba7e5968b356fafaba4daf8a9a2f0c7628903f9f5a03dc37cf8	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	60368cc5e3ed8558fbaabd33c2ad94fb7161b3ac3d4a26882890e80171a5ea95	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	881945ce0cfc62d521b468425be8f1a776dbd499bab50cc72108eccf385adab4	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	d7548cc84530702e7b861f3105b5a357ffe2c6363e4704ad12207e0f91555857	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	435e58187b91b2902c976dfa20e972f355ab8ad0cfdbf4773fc4b8aab578f419	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	178b504696d3c91c05e7beb949e6ec58a76cf2d3bb903c94268c14273fad0e2c	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	a5e1044649d2200ff4aaeff30997a6ad58023cb2f71137d583256a6c057c5d0e	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	7e3dfd1e1ed954e157c8eff603354a70f06bb50f047508fb46f074433bf7b40c	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	73deb26144727ab5d64821cf14c76a25f1c1927722712d137cf1a45f01b533ab	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	d4723a544fef9463f792eaed26263be5cef152170cc10c8665f4b74226d1abec	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-687.30.1.0.1.el9_8.noarch.rpm	a904ff09823228267e88c089164faa719c728dbce2ca80093984447afe21dea8	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	1a9190107413000778e2c9d54b47962c4efd11ba5961f2978ce2c4418ebb6154	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	56567bc9f5495f8a3455c171cfa888bed0473a6553ea40c3c2464d1f5b91cab1	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	582eb35a89afc288e0ee2bf7021afdfa95acd27e4a382a984be461fbe006ce3d	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	ae9f9419e1d921db8273d981c99c2eaa16f1ec2b9b5a51d5cb176c5f11b07042	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	956e7a5ed898997075190b4f81af578d08dcc65e3af1e111495699fb95b660da	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	cef7c1d55aff333c0c7953993f24d36d90790baf64d335c1213ef3323035ae79	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	9209198f0f472f091802d0865b1481a5e484889d2e9e223e966d6f0eb74efdf0	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	c3115294fc8c34c59b4b89e1017fe9d7286151c696e75c4583f6a826c4066b45	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	c13971b8b1090b89d1c52d78b4d7d3a0eab757be42c9df4eb97feb622cfa67cb	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	4d2723646ea8b0c161e35041080b49a07f45830fa98a3938c50c756632685c29	-	ol9_x86_64_MODRHCK
	perf-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	5e26fedf0e16c22cf352efaa94dc2f32e10925468072325040060820525dd413	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	6b9abbdbe87c153c5d710d14bece7eadb85747e3e68d299ea079095541a081a6	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	6267bc23d6c9184a752d7e18de03b2bc97f5d701c0df5b6802fd1d0308549f56	-	ol9_x86_64_MODRHCK
	rv-5.14.0-687.30.1.0.1.el9_8.x86_64.rpm	647b9c6d2a28e313771cc8cf95d54511eb5390a394f760271fdc1801d417c658	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team