ELBA-2026-74438-1

ELBA-2026-74438-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-10-06

Description

[5.14.0-687.54.1.0.1]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-687.54.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.54.1]
- Revert 'mm/memcg: refactor try_charge_memcg retry logic to use for loop' (Audra Mitchell) [RHEL-269060]
- futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003}
- futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481]
- futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775}
- futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778}
- futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758}
- futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776}
- futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658}
- futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481]
- compiler_types.h: add 'auto' as a macro for '__auto_type' (Waiman Long) [RHEL-263481]
- selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936]
- selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936]
- selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936]
- net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936]
- net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936]
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856}
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794}

[5.14.0-687.53.1]
- arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875}
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556}
- ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942}
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972}
- fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437]
- crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522}
- RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325}
- RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788]
- RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788]
- Revert 'RDMA/rxe: RHEL-only revert for page size vars in rxe' (Kamal Heib) [RHEL-230788]
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656]
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563]
- rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-687.54.1.0.1.el9_8.src.rpm	54e2e750764623e3bf5d5c41f4526ab03e679eafed695bc5602e95aaa4705d34	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	dd2806b3ae29b04d79c84bf9f035533b160379301fb0f1d1025ff23e93ddd74a	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-687.54.1.0.1.el9_8.noarch.rpm	afd70c956c5974a510ce434218d10aa03417fb8012a3558f1037c4ee0d7f0295	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	5bf2a686620c01971470806959c3ed1c62c730662b228714a8af298504420bd7	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	448477a0db39a8026e278b52275a5d0165dab502963de242b96c00ab26b68a5e	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	f42eb2000e671f32f67b2b080b93fac555a78cad8b225e2a422ced2b1ea591cc	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	2dc6172187f30c637b81a1df507ede98e568fbe0a11e934d28f2943e0548000e	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	b2273277c0f498a7424510e1a8b8e96f359e5e649877b88d32d5f607e3398719	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	6e01d0ac05bc8e796877dfb0a9defa6e113d5e712fe98629c9844b0c3cb4de46	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	94e3eac5bc35eb1e370b7843a6457169263b2d530bbb243a05da2d57d87697d2	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	74f3470ea5ff76a7535ba972ab030072ab74cfa31877be1e03e267cad2e59f6f	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	08c9d585b936a2aee911fab166716734719ce30fb66e356efec748ac6429bf3d	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	a950e84a5f1d7a21d5429b73912807195960329b6ff387b0cb529c242ef72211	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	79f2c85adca108d48482a4c113daf672a993623881ce1b39cc2f63b2356a15e6	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	9a5f572437a54c4c35545a6dab60525c178ee9935478e7041b01f94e1e188bda	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-687.54.1.0.1.el9_8.noarch.rpm	9a01464df84c55bebee9138f0297e83009bf06550d303e3c684226aee31acf42	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	b5bb8cbab10c75050a8eb8461523da00114502d43e1ba688f4f47298ee4f1e07	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	be585c834f28c250ac227a1fe4e2c090bea593ed50acd98de198b552f988773e	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	b329b570ff69513a8cbeb2fff8544e953ef46b42b4543b99760bf067668b958c	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	9c70687eb36fc477a28497d9e3d1b46a98b03c4d9c1571ec56ff539de7d21286	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	d1196de3afc3b677dc34d5e26ae8a04f299c4dc1d25ae8782a0cd0f5e863cf6e	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	6083b41599631723e8f58a5b74ab60e15a94356dc98ddebe30fc8b0749a308bb	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	2f46160f2d644d3d904a51499acd93c2ed9b44c1c5d21126d2e1fb8dbf99f9a0	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	bb555bafd3a37a89c9c22e313ca53081c259747597d6dbfdfa3cd66494161085	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	3592c73afb671be2b44aefb135c3819e5653e8ccf7dc870eaeb61b3ab966613c	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	bed9e1e74538b93e5b0219ffcdfd59c38df484002a9fe63ea899ee6344d10da2	-	ol9_x86_64_MODRHCK
	perf-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	3afcf9d1193abec22cc50eeeecc69190fcf1e65206d429c6dcdc7e7e62e28a0a	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	5ebd88caf4384d8c5b184c275d6a3fdeeb81036295ee5645aa4c268e8a9f057c	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	09d24f6d8c917057ab2735d54422e6c39719efbe7e5ca32cf4d84a882fb5ed40	-	ol9_x86_64_MODRHCK
	rv-5.14.0-687.54.1.0.1.el9_8.x86_64.rpm	25fc364314ba497e910a1d7028b1205274fc33f9cbb0189a43749d3985e09dac	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team