ELBA-2026-47040-1

ELBA-2026-47040-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-08-03

Description

[5.14.0-687.31.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-687.31.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.31.1]
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]

[5.14.0-687.30.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-687.31.1.0.1.el9_8.src.rpm	7f327a056d38d78d15a296b16163b11a8a405aa4f953f31ea0439bcefcb284ee	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	7e665fd9d61ed7cbc00c6a1989b91c3acd877bc8b2c72dc108afae6d8be98530	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-687.31.1.0.1.el9_8.noarch.rpm	617cddf269bf9c2cdfc2f4664472636abf18c803bd88ec6bbd1e2eeed3414fe7	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	bb2a394a808e5f457a6a5a49777e58b81c5b6338a4d4ee8e9480709fb93464ec	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	f435568a1bb9fec7214eab7a071366bfd81d12298407a5e9bb36ac25b3a94b80	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	5841fbcbb819be4d4a8df8dae1c6f133b8486449769d79b07a2e15c594605f72	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	9a2c51f98ba2ef1064be474d06c4c3f42589078b5551efc40fb2855272191a51	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	c88e56d27302b5d2941af724e81aa4fbdf13d2e3312e44f91729325728d97321	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	fd2abb1ae34a5537a5db1d417b0dde365b26b73a8b3e370fad8739bd66638e53	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	f699be1dfb8777f3eab3a73b28be0e5da585cf799b114a9fd8511c3984dac982	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	3a002b6ec1da00183f82a4925ad203832fe4cf171c4d792128ae63db0160355f	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	02fadd030907032f54a8d69b14eef22906ca2547b50522856d268740ba6527ab	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	528eccfce97abcfae82948343d0f757bba810dab96b89d7732ef19c3b1ab5847	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	10bbbac35a910210ccaab0291b6446abef48a5cadc14cb9b2975334106c13854	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	355fdac430a711017d3ccef387a0d3ec3671ae7d7f4de81a60dcc2ab260c9caa	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-687.31.1.0.1.el9_8.noarch.rpm	6387437ceed72bf34cf397ed9e855c2c0efe2c19113242dd0a052edeece48144	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	42524c14f7af4ec3a16d6941477cb761115df48429060de3117af81d89371c40	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	8ffc2e367153f2d998d89a7c94d57d292d2c6ed8b07a75b30d55f8de7581cf8b	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	3cf1b05ad1488c47404d3d8d03fdb1f1b9b0ad80ce2b9d8f7969bc0191ea3898	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	a0427fd0a07e87771100b417b275f0aca81b09d9727d4aa44461cb2cc4446a4b	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	9b44a451d90352dfda6d58823b4e797c9eafbf7fe09232222ad73189ca481338	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	af6d80e352632e303036f8ecb16f168dbe4f71ef89c876d225c6f9bdcdc72661	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	d3f02d04177e73e7860a12a30d162ef5ad44aae8859c3246c447edcfe1ac21d6	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	d5d4a3db9d9946fc7d7e56c85bc93c32b42084d22dfd631b4ff15615b8881c7e	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	bb2e4c543b4f9b08a86fd3d7740b31894d5f4e7d2f70fe338786578edafa4d04	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	d36e3ac40f8f600e29085f100aba249a776fa1f99bc0c10b72e6946e159634e7	-	ol9_x86_64_MODRHCK
	perf-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	16d5395affdf3e1a16b693f3a52bc4d698061f3eb8d185e01ece1c356c4cd004	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	2cd4184c8734cc2cd4ffe54842656861e267a892192d85d745589e54167b3c93	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	760b6bb614f5a1ef33b4853bf8c43fb5f6b067e079ec64d97cfff8f22547dfbe	-	ol9_x86_64_MODRHCK
	rv-5.14.0-687.31.1.0.1.el9_8.x86_64.rpm	37544360ba2707d252e599228bbf363d32218695719bbdaec4a801b46abdcd56	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team