ELSA-2026-13565

ELSA-2026-13565 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-05-05

Description

[5.14.0-611.54.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.54.1]
- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172201]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172201]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172201]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172201]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172201] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172201] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172201]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172201] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172201] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172201]

[5.14.0-611.53.1]
- tracing: Fix a warning when allocating buffered events fails (CKI KWF BOT) [RHEL-169366]
- tracing: Fix a possible race when disabling buffered events (CKI KWF BOT) [RHEL-169366]
- tracing: Fix incomplete locking when disabling buffered events (CKI KWF BOT) [RHEL-169366]
- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-104807]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-104807]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-104807]
- i2c: i801: Revert 'i2c: i801: replace acpi_lock with I2C bus lock' (David Arcari) [RHEL-155311]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157327] {CVE-2026-23270}

[5.14.0-611.52.1]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-150464] {CVE-2026-23136}

[5.14.0-611.51.1]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167016] {CVE-2026-31402}
- i40e: support generic devlink param 'max_mac_per_vf' (Mohammad Heib) [RHEL-121643]
- devlink: Add new 'max_mac_per_vf' generic device param (Mohammad Heib) [RHEL-121643]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121643]

[5.14.0-611.50.1]
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158987]
- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143624]

Related CVEs

CVE-2026-23136

CVE-2026-23270

CVE-2026-31402

CVE-2026-31431

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_aarch64_appstream
	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_aarch64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.54.1.el9_7.aarch64.rpm	7a88197d29e562cb1ef5aefccaa89437449be3f416787c4bb27bbc5144b4bffe	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-611.54.1.el9_7.aarch64.rpm	da3def39508479d888738af5e15dcdbf97f6766b2caf80e8a184b543221e359e	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-611.54.1.el9_7.aarch64.rpm	20d26c865d4b084957112eac68a23356585a8371b37b5222a7561477b862d91e	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-611.54.1.el9_7.aarch64.rpm	20d26c865d4b084957112eac68a23356585a8371b37b5222a7561477b862d91e	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.54.1.el9_7.aarch64.rpm	c267f6c34a9bb951c2439de58bebe64aca5c769cc27bb296f89bc32035b98d2b	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-611.54.1.el9_7.aarch64.rpm	c267f6c34a9bb951c2439de58bebe64aca5c769cc27bb296f89bc32035b98d2b	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.54.1.el9_7.aarch64.rpm	3cddafcd25024ea22f0d9e404dd83dc11c2d1e49556a32310eaf6ced9d8fc481	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-611.54.1.el9_7.aarch64.rpm	d602d5d81cc56c0475c4e916c353ec9b0605a6ea45dc052c6e39825edaebb8a3	-	ol9_aarch64_codeready_builder
	perf-5.14.0-611.54.1.el9_7.aarch64.rpm	6b577c73ad3f3467554ceff683aa1e920d7d18530fa773e07fb1de5486031231	-	ol9_aarch64_appstream
	python3-perf-5.14.0-611.54.1.el9_7.aarch64.rpm	e72ac33975b3895c72ced7775277ac53fccb01cfadef37d9990954ef415cdfb5	-	ol9_aarch64_appstream
	rtla-5.14.0-611.54.1.el9_7.aarch64.rpm	f11a95c84121ade01ed020958a917a7dc637019c06fe37a2aebe072f053fa8eb	-	ol9_aarch64_appstream
	rv-5.14.0-611.54.1.el9_7.aarch64.rpm	3b301c9eea87c0b96db75b92aa83e578a2ff4c587e6f60d1b9a537a8814d87ca	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_x86_64_appstream
	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-611.54.1.el9_7.src.rpm	b809d0403b4ec29129ca02af6d34f99f2a920d8939948002eeabdd48b3aa69ae	-	ol9_x86_64_u7_baseos_patch
	kernel-5.14.0-611.54.1.el9_7.x86_64.rpm	c93e48d7611fc263cd1ceb1a2ce3ab0cd1043a9976c0326b30a96fc86f349fa6	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.54.1.el9_7.x86_64.rpm	c93e48d7611fc263cd1ceb1a2ce3ab0cd1043a9976c0326b30a96fc86f349fa6	-	ol9_x86_64_u7_baseos_patch
	kernel-abi-stablelists-5.14.0-611.54.1.el9_7.noarch.rpm	397610a36f1d0d50e07ff5453da541a6a28148b95303db182ac590ddcbc40ad1	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-611.54.1.el9_7.noarch.rpm	397610a36f1d0d50e07ff5453da541a6a28148b95303db182ac590ddcbc40ad1	-	ol9_x86_64_u7_baseos_patch
	kernel-core-5.14.0-611.54.1.el9_7.x86_64.rpm	7c826a2634411f7d59148e8bb59d5fd9869bac448df6c792b64c0d5ed8798bbc	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-611.54.1.el9_7.x86_64.rpm	7c826a2634411f7d59148e8bb59d5fd9869bac448df6c792b64c0d5ed8798bbc	-	ol9_x86_64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.54.1.el9_7.x86_64.rpm	7cbdcc206c7a4f8260c485a79c8d65314c99f938de83085a6cea48aa8295eb22	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-611.54.1.el9_7.x86_64.rpm	c47af95d94f7a36195f1aa2fc134847cc0bf0b4c3cc86a04b61b5722f61c6eab	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-611.54.1.el9_7.x86_64.rpm	c47af95d94f7a36195f1aa2fc134847cc0bf0b4c3cc86a04b61b5722f61c6eab	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-core-5.14.0-611.54.1.el9_7.x86_64.rpm	d76fac32a0bfb06fe59aa03affa2a0e7f2265722c87c967d68a3490b20e659be	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-611.54.1.el9_7.x86_64.rpm	d76fac32a0bfb06fe59aa03affa2a0e7f2265722c87c967d68a3490b20e659be	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-devel-5.14.0-611.54.1.el9_7.x86_64.rpm	e6e461540d3921233552e18822d3d5ca75cfb30ed58ca5e68f456a2c89a200ff	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-611.54.1.el9_7.x86_64.rpm	d7398d2cc5960995876d991943210667b7d907f44d1a97ef6cb4747bf081ba4a	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-611.54.1.el9_7.x86_64.rpm	f933ab840f925a2a118824d1882c938651c65f39a21ae62b76c138c2f945b1b6	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-611.54.1.el9_7.x86_64.rpm	f933ab840f925a2a118824d1882c938651c65f39a21ae62b76c138c2f945b1b6	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm	5af09fa4500e7839080f2f5f9383f40a8f4d620acfb2629b63740973b0b34cc1	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm	5af09fa4500e7839080f2f5f9383f40a8f4d620acfb2629b63740973b0b34cc1	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm	907324761e6adbfd158c4ffb605bfa5ca3f9607a6893cbf5ecd90924bbd8535a	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm	907324761e6adbfd158c4ffb605bfa5ca3f9607a6893cbf5ecd90924bbd8535a	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-uki-virt-5.14.0-611.54.1.el9_7.x86_64.rpm	9fcd38383788850ac25a88e07e5a3a14f398124a775095803e2b76b05c10bf05	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-611.54.1.el9_7.x86_64.rpm	9fcd38383788850ac25a88e07e5a3a14f398124a775095803e2b76b05c10bf05	-	ol9_x86_64_u7_baseos_patch
	kernel-devel-5.14.0-611.54.1.el9_7.x86_64.rpm	d3de73a0a9359e9d17eb41a641c10ad63ec86ee7bd8319a0c55b8d6bcd4a096d	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-611.54.1.el9_7.x86_64.rpm	983f5a355ceea47ff4cd9d90d7507229440e6c8f1a110fe159fb9c736c923fd5	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-611.54.1.el9_7.noarch.rpm	b4591864885388b05f07cd8f24abe8ed1eda56ec6a8c5c95da4759a64b6be022	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-611.54.1.el9_7.x86_64.rpm	d12f5b72dcef49b813082b57745cc1d11cca6338689f1609e5a408c110436d32	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-611.54.1.el9_7.x86_64.rpm	14cf64c360d06359212ecec2fde1876caaf1d99e56624df14f263031bd49cb2a	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-611.54.1.el9_7.x86_64.rpm	14cf64c360d06359212ecec2fde1876caaf1d99e56624df14f263031bd49cb2a	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm	530201b1424781e6f2265fb4b14915f24288be3c7b8005b2bf14319275c99d73	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm	530201b1424781e6f2265fb4b14915f24288be3c7b8005b2bf14319275c99d73	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm	8181b924c0329c8ff49a74e4f871eeb65af1c35e1238e1110499263dcef9ae1f	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm	8181b924c0329c8ff49a74e4f871eeb65af1c35e1238e1110499263dcef9ae1f	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-5.14.0-611.54.1.el9_7.x86_64.rpm	c9723c3c4defd9cdbe2eadf34dae4f813b301378b343d10e7a279b09a2942820	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-611.54.1.el9_7.x86_64.rpm	c9723c3c4defd9cdbe2eadf34dae4f813b301378b343d10e7a279b09a2942820	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.54.1.el9_7.x86_64.rpm	0a8605212bed7c9ea112bcd4c8295c00d90f8b4264a4794fb67a4eb5477b98dc	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-611.54.1.el9_7.x86_64.rpm	0a8605212bed7c9ea112bcd4c8295c00d90f8b4264a4794fb67a4eb5477b98dc	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.54.1.el9_7.x86_64.rpm	e328724904b836dfe03de4e45a8eae4255726a49e24628faa8a5743d95b5c525	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-611.54.1.el9_7.x86_64.rpm	297655067b0a3cb76914eca415ea5d7364198773e93a19d8c4aefa2cfcd04f18	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-611.54.1.el9_7.x86_64.rpm	297655067b0a3cb76914eca415ea5d7364198773e93a19d8c4aefa2cfcd04f18	-	ol9_x86_64_u7_baseos_patch
	kernel-uki-virt-addons-5.14.0-611.54.1.el9_7.x86_64.rpm	c9705f1fc443aa020a2b2b77e2724e63999d4dd575a774a7b170a8535c8f4712	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-611.54.1.el9_7.x86_64.rpm	c9705f1fc443aa020a2b2b77e2724e63999d4dd575a774a7b170a8535c8f4712	-	ol9_x86_64_u7_baseos_patch
	libperf-5.14.0-611.54.1.el9_7.x86_64.rpm	8cec11f07ac536dfa8f80d6a11cd9bdbfe34b31345672e9e8c485579c3f0ab75	-	ol9_x86_64_codeready_builder
	perf-5.14.0-611.54.1.el9_7.x86_64.rpm	1f6f4cd80473fa5f4498157aa97b35a0e51687976e65260e6369993d7d2a760c	-	ol9_x86_64_appstream
	python3-perf-5.14.0-611.54.1.el9_7.x86_64.rpm	072c35acf40dc429de111f3989924ef459312b8e44e235a07af7b871d6e22d5e	-	ol9_x86_64_appstream
	rtla-5.14.0-611.54.1.el9_7.x86_64.rpm	ede6d9ce0c504b7c4bbe02dd6348848fef175eba77b45435b54489455b8b0235	-	ol9_x86_64_appstream
	rv-5.14.0-611.54.1.el9_7.x86_64.rpm	a5d6b3baec78fa16d7e6b3cd2dfe230e71fd0432619e1a6cceeef17512ece6f7	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team