ELSA-2026-1143

ELSA-2026-1143 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-01-27

Description

[5.14.0-611.26.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.26.1]
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139462] {CVE-2025-68305}
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137949] {CVE-2025-38141}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136964] {CVE-2025-40294}
- drm/xe: Fix vm_bind_ioctl double free bug (CKI Backport Bot) [RHEL-122309] {CVE-2025-38731}

[5.14.0-611.25.1]
- ice: Fix kernel panic due to page refcount underflow (Mohammad Heib) [RHEL-139731]
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139487] {CVE-2025-68301}
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134767]
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Guillaume Nault) [RHEL-138493]
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139284] {CVE-2025-40248}
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138035] {CVE-2025-38349}
- block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-135268]
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134448] {CVE-2025-40258}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133868]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-129504]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-129504]

Related CVEs

CVE-2025-38141

CVE-2025-38349

CVE-2025-38731

CVE-2025-40248

CVE-2025-40258

CVE-2025-40294

CVE-2025-68301

CVE-2025-68305

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_aarch64_appstream
	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_aarch64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.26.1.el9_7.aarch64.rpm	a7f37cacb116b5b3c2bd5b08dba052c03230596844414e91f71e33f5448c67d5	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-611.26.1.el9_7.aarch64.rpm	84dba952aed6fb53c02ae0976834657a02f595fb9c0862e6264ea6cf685a45eb	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-611.26.1.el9_7.aarch64.rpm	87c5cbd83ffacd840004c4e8bee6317bf7a28e78ea3e5e746b30910495a534f8	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-611.26.1.el9_7.aarch64.rpm	87c5cbd83ffacd840004c4e8bee6317bf7a28e78ea3e5e746b30910495a534f8	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.26.1.el9_7.aarch64.rpm	5640bc2242eeec9f5e5ec29c0b8ee42bf87960ef538c4e8973202996fb23c877	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-611.26.1.el9_7.aarch64.rpm	5640bc2242eeec9f5e5ec29c0b8ee42bf87960ef538c4e8973202996fb23c877	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.26.1.el9_7.aarch64.rpm	fdf39da5d82847c859b6bef7531b22062569b3b7b57bf474bcee0e6cca538126	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-611.26.1.el9_7.aarch64.rpm	bccc0ed01ed4f4e152d579ef8dd1982a962fa8f9fe290daba80ecddeaf5aa4e7	-	ol9_aarch64_codeready_builder
	perf-5.14.0-611.26.1.el9_7.aarch64.rpm	12821635565d672cf0d558b0c1e4bc9aca40d912278fc6fe9db74f4b973747e9	-	ol9_aarch64_appstream
	python3-perf-5.14.0-611.26.1.el9_7.aarch64.rpm	75767833662635dbdf660ee9ec104597bd8700dcc18584988e947e8642180000	-	ol9_aarch64_appstream
	rtla-5.14.0-611.26.1.el9_7.aarch64.rpm	21caf9dadd976f992fd6d13afeb3162db9b625f8f446e04e46ce54fa9efaae26	-	ol9_aarch64_appstream
	rv-5.14.0-611.26.1.el9_7.aarch64.rpm	c95cb6a43a76bc61a7115ca5ecba73447cc2fbeb75c02771da6840697f313052	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_x86_64_appstream
	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-611.26.1.el9_7.src.rpm	2a29b81cc9c723c47c01075dcef8419976e768cd8ccf49c282bef9a5039e6f7a	-	ol9_x86_64_u7_baseos_patch
	kernel-5.14.0-611.26.1.el9_7.x86_64.rpm	dde384967d2c0ea5b6719878468b3d0ed412d31ecb687ab1f812f9654dcfb704	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.26.1.el9_7.x86_64.rpm	dde384967d2c0ea5b6719878468b3d0ed412d31ecb687ab1f812f9654dcfb704	-	ol9_x86_64_u7_baseos_patch
	kernel-abi-stablelists-5.14.0-611.26.1.el9_7.noarch.rpm	12a638347d3453ddbb056695b04e99dd7b4fafa5d87719d601265cf01667b421	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-611.26.1.el9_7.noarch.rpm	12a638347d3453ddbb056695b04e99dd7b4fafa5d87719d601265cf01667b421	-	ol9_x86_64_u7_baseos_patch
	kernel-core-5.14.0-611.26.1.el9_7.x86_64.rpm	b8cd6105cc38f5180f61705a3982c8ff11e4d211d75592b24a320658918e042d	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-611.26.1.el9_7.x86_64.rpm	b8cd6105cc38f5180f61705a3982c8ff11e4d211d75592b24a320658918e042d	-	ol9_x86_64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.26.1.el9_7.x86_64.rpm	62c8d6b281252d2f4b281739ebab6c8f62b8bdb64678e06d7639e3af344f5e80	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-611.26.1.el9_7.x86_64.rpm	c7dadaa254bdd70361d5fe86865fb5589d11ceb4244afd93b301a265ac10c05b	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-611.26.1.el9_7.x86_64.rpm	c7dadaa254bdd70361d5fe86865fb5589d11ceb4244afd93b301a265ac10c05b	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-core-5.14.0-611.26.1.el9_7.x86_64.rpm	1a98dea80aed4dd960c7aa0eb50c7fcc1f3980b97fe35bc5ddc87be358afcccd	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-611.26.1.el9_7.x86_64.rpm	1a98dea80aed4dd960c7aa0eb50c7fcc1f3980b97fe35bc5ddc87be358afcccd	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-devel-5.14.0-611.26.1.el9_7.x86_64.rpm	594e0910205fea10199722f98dfeac0f8e7ea701b033eea71715805a3e3fc59d	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-611.26.1.el9_7.x86_64.rpm	9a6dd00c9a2b579c936b9694a2b437271b9468a82c1cf06fd8ddcce03880e3fc	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-611.26.1.el9_7.x86_64.rpm	e7434ddf7f9c02f2adf0728bacb9833060e288fec30bcbddfaee75cff7d9890e	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-611.26.1.el9_7.x86_64.rpm	e7434ddf7f9c02f2adf0728bacb9833060e288fec30bcbddfaee75cff7d9890e	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm	7f50b640cccb060e5ef3d8ca343668102af8c2dcce909e78f27ad013af2c256a	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm	7f50b640cccb060e5ef3d8ca343668102af8c2dcce909e78f27ad013af2c256a	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm	590d36ce4ad1ffeaf7aafca963ddeb1d51a70b20e02bd8b99625991c31d846d7	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm	590d36ce4ad1ffeaf7aafca963ddeb1d51a70b20e02bd8b99625991c31d846d7	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-uki-virt-5.14.0-611.26.1.el9_7.x86_64.rpm	84444f5eada7bca0881e35aa16fcf400aadbe19c7bea2a3c382fd9791a7b9b03	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-611.26.1.el9_7.x86_64.rpm	84444f5eada7bca0881e35aa16fcf400aadbe19c7bea2a3c382fd9791a7b9b03	-	ol9_x86_64_u7_baseos_patch
	kernel-devel-5.14.0-611.26.1.el9_7.x86_64.rpm	5038507b708bee280156fa2d3609fe174b4bdde2f8f7685e49fc8eef1db4edda	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-611.26.1.el9_7.x86_64.rpm	49dcddb350f92c098b998271ceef9748990fa7004bf9c65456bad2182c9f65c1	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-611.26.1.el9_7.noarch.rpm	7e9b464d14e3e6fd89a317219374eda3335f08e49e9b6b1173f6985481627db1	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-611.26.1.el9_7.x86_64.rpm	521a2add76413b04b952087eddb8634ab4d789eacc2f9108b7b108d74640b9b6	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-611.26.1.el9_7.x86_64.rpm	8aa9cb2c486afba4e278e45aa269cc6c03e0b8a924d15fd53c6f58dc959e9f94	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-611.26.1.el9_7.x86_64.rpm	8aa9cb2c486afba4e278e45aa269cc6c03e0b8a924d15fd53c6f58dc959e9f94	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm	f47debcc95f81de9733050478f50c550f0ee4c8b5387f5fcc4a12abbfab52d1b	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm	f47debcc95f81de9733050478f50c550f0ee4c8b5387f5fcc4a12abbfab52d1b	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm	00d603f8fe1166c900751cc95f5f87d81172a25badaa81f0bd08226d53aab976	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm	00d603f8fe1166c900751cc95f5f87d81172a25badaa81f0bd08226d53aab976	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-5.14.0-611.26.1.el9_7.x86_64.rpm	f0266de7c9abeee43a769601225fd66a8ab1c36f47690eea1048279b0d9b688e	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-611.26.1.el9_7.x86_64.rpm	f0266de7c9abeee43a769601225fd66a8ab1c36f47690eea1048279b0d9b688e	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.26.1.el9_7.x86_64.rpm	8b1fa57db490b0b56746438f1ee331c8d3114c31f7e496b6fc506999f14aafa3	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-611.26.1.el9_7.x86_64.rpm	8b1fa57db490b0b56746438f1ee331c8d3114c31f7e496b6fc506999f14aafa3	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.26.1.el9_7.x86_64.rpm	38fa605a57df6ec354b944498e17d8f0bd1ea5f81bcaa668844360ef05c702ec	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-611.26.1.el9_7.x86_64.rpm	e1c38cca999bf475d9838fcdadf7b349ddaa17e3f224c319562d2f0523a35b1d	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-611.26.1.el9_7.x86_64.rpm	e1c38cca999bf475d9838fcdadf7b349ddaa17e3f224c319562d2f0523a35b1d	-	ol9_x86_64_u7_baseos_patch
	kernel-uki-virt-addons-5.14.0-611.26.1.el9_7.x86_64.rpm	06c65b6cb71c822327e5a996514492fae8a73ccf8ddca06973a8b556baed38fc	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-611.26.1.el9_7.x86_64.rpm	06c65b6cb71c822327e5a996514492fae8a73ccf8ddca06973a8b556baed38fc	-	ol9_x86_64_u7_baseos_patch
	libperf-5.14.0-611.26.1.el9_7.x86_64.rpm	e3072ac2c7794f32641f3ae9358da7df9165b5da1f3d9ed4484ce85c94d52c08	-	ol9_x86_64_codeready_builder
	perf-5.14.0-611.26.1.el9_7.x86_64.rpm	b517ccca46d54df9d5ca8e652d8d05b42733cecc6991a11ece736b5fd2af3f09	-	ol9_x86_64_appstream
	python3-perf-5.14.0-611.26.1.el9_7.x86_64.rpm	59be96a80903b494429f0a0c69d40578752233b4d393430d559a2eb6e95093f4	-	ol9_x86_64_appstream
	rtla-5.14.0-611.26.1.el9_7.x86_64.rpm	9cc864388b513fa10e1be3756418c720bcbc815b618c4a81d0e2d83777c0f965	-	ol9_x86_64_appstream
	rv-5.14.0-611.26.1.el9_7.x86_64.rpm	9a2756eb77bc9f75871aa2155e9a3b6d574686a889a1166c378dd5f9ec7ef11d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team