ELSA-2026-2212
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-2212
ELSA-2026-2212 - kernel security update
| Type: | SECURITY |
| Impact: | MODERATE |
| Release Date: | 2026-02-09 |
Description
[5.14.0-611.30.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-611.30.1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137329] {CVE-2025-38730}
- io_uring/kbuf: add io_kbuf_commit() helper (Jeff Moyer) [RHEL-137329]
- io_uring/kbuf: use 'bl' directly rather than req->buf_list (Jeff Moyer) [RHEL-137329]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143296]
- net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-141404]
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137601] {CVE-2025-38459}
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139699]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139699]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139699]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139699]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139699]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139699]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139699]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139699]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139699]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139699]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129084] {CVE-2025-40170}
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-129084]
- net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-129084]
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129018] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128982] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128982]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128982]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128982]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128982]
- bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 (Hangbin Liu) [RHEL-128982]
- vrf: Fix lockdep splat in output path (Hangbin Liu) [RHEL-128982]
- ipv6: remove nexthop_fib6_nh_bh() (Hangbin Liu) [RHEL-128982]
- net: remove rcu_dereference_bh_rtnl() (Hangbin Liu) [RHEL-128982]
- neighbour: switch to standard rcu, instead of rcu_bh (Hangbin Liu) [RHEL-128982]
- ipv6: flowlabel: do not disable BH where not needed (Hangbin Liu) [RHEL-128982]
- ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() (Hangbin Liu) [RHEL-128982]
- neigh: introduce neigh_confirm() helper function (Hangbin Liu) [RHEL-128982]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-132923]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-132923]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-132923]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137697] {CVE-2025-38403}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136909] {CVE-2025-40269}
- nvme: tcp: Fix compilation warning with W=1 (John Meneghini) [RHEL-129928]
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (John Meneghini) [RHEL-129928]
[5.14.0-611.29.1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138015] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138015] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137364] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137069] {CVE-2025-38024}
[5.14.0-611.28.1]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133337]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133337]
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137098] {CVE-2025-40271}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136256] {CVE-2025-40318}
- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (CKI Backport Bot) [RHEL-134352] {CVE-2025-38022}
- cifs: Fix deadlock in cifs_writepages during reconnect (Paulo Alcantara) [RHEL-134234]
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131974] {CVE-2025-37819}
- net: openvswitch: fix nested key length validation in the set() action (CKI Backport Bot) [RHEL-131801] {CVE-2025-37789}
- md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-126532]
- md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-126532]
- md: add legacy_async_del_gendisk mode (Nigel Croxon) [RHEL-126532]
- md: Don't clear MD_CLOSING until mddev is freed (Nigel Croxon) [RHEL-126532]
- md: fix create on open mddev lifetime regression (Nigel Croxon) [RHEL-126532]
- md: call del_gendisk in control path (Nigel Croxon) [RHEL-126532]
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128891] {CVE-2025-40141}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_aarch64_appstream |
| kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_aarch64_u7_baseos_patch | |
| kernel-cross-headers-5.14.0-611.30.1.el9_7.aarch64.rpm | 084ccae627ad20d0b54b4f9aae8e1687782686356b6ea1714eaa72068e6f3dfd | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-611.30.1.el9_7.aarch64.rpm | 43135ade75d7bb20de42cc3fe67d80acbf968cfe39a1f3abd24f67eb5bcd8e0e | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-611.30.1.el9_7.aarch64.rpm | bbff6361f70fbd920fb111ca8100484f7e213875e481d5d9dc22cc8eb5ef006a | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-611.30.1.el9_7.aarch64.rpm | bbff6361f70fbd920fb111ca8100484f7e213875e481d5d9dc22cc8eb5ef006a | - | ol9_aarch64_u7_baseos_patch | |
| kernel-tools-libs-5.14.0-611.30.1.el9_7.aarch64.rpm | 4597f61d1ac6a24cc2b8eab536f48e53fd4550c72fca5a8b5e859dc15bf10066 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-611.30.1.el9_7.aarch64.rpm | 4597f61d1ac6a24cc2b8eab536f48e53fd4550c72fca5a8b5e859dc15bf10066 | - | ol9_aarch64_u7_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-611.30.1.el9_7.aarch64.rpm | 144282fe642754f4a04cd517fea3e7ac1eafaf70f75f205d582ee07e2894ecc2 | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-611.30.1.el9_7.aarch64.rpm | 7aed7f0c29b4738874cc89fc76875b4b763a6a8497a3e9d34e8caa1cc58e1d4b | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-611.30.1.el9_7.aarch64.rpm | babc0c74fca75c2ecab34f3475b6127c65423d6eb08557c6818669b3f96060d4 | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-611.30.1.el9_7.aarch64.rpm | 3396cbc490d52a39ff237d27076098660ca90d37fc5f467e83176349ac89efea | - | ol9_aarch64_appstream | |
| rtla-5.14.0-611.30.1.el9_7.aarch64.rpm | afb3e61fba3d1fbb85bff2c70ea00a87a9f31ceea06d3bb0ee6894ffc64d2866 | - | ol9_aarch64_appstream | |
| rv-5.14.0-611.30.1.el9_7.aarch64.rpm | 153df0b794735a0dc0fdf8517aecde4b388ebcf076097ea587aa25bafae7cc3d | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_x86_64_appstream |
| kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-611.30.1.el9_7.src.rpm | 366aafcd58cef49d72a61eeb6915f5d056babff1a870fae7ba371fbe03990830 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-5.14.0-611.30.1.el9_7.x86_64.rpm | a7a36a254a495592beb612594158511bfb3cf09ed6559b6172e413e9e860c562 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-611.30.1.el9_7.x86_64.rpm | a7a36a254a495592beb612594158511bfb3cf09ed6559b6172e413e9e860c562 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-abi-stablelists-5.14.0-611.30.1.el9_7.noarch.rpm | 29112f76efab16f3770ef6cc638ece90f7ae87651e0be20e106554f5b9aa1d39 | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-611.30.1.el9_7.noarch.rpm | 29112f76efab16f3770ef6cc638ece90f7ae87651e0be20e106554f5b9aa1d39 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-core-5.14.0-611.30.1.el9_7.x86_64.rpm | 32503757dae9e2e4f4838f34a7b8a1acd8351682d205a3609d5a08f4d58eda0a | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-611.30.1.el9_7.x86_64.rpm | 32503757dae9e2e4f4838f34a7b8a1acd8351682d205a3609d5a08f4d58eda0a | - | ol9_x86_64_u7_baseos_patch | |
| kernel-cross-headers-5.14.0-611.30.1.el9_7.x86_64.rpm | 07ca6250b731e9ad7303bad2eff02edc13b2ef2901e1263959898bab2a5919dd | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-611.30.1.el9_7.x86_64.rpm | 7c4109b1acffccb02e49b48d3f3dca87618f6ded96db7ab20d2344a29b7a068a | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-611.30.1.el9_7.x86_64.rpm | 7c4109b1acffccb02e49b48d3f3dca87618f6ded96db7ab20d2344a29b7a068a | - | ol9_x86_64_u7_baseos_patch | |
| kernel-debug-core-5.14.0-611.30.1.el9_7.x86_64.rpm | 8b07add40664f97b12b007bbd83cfe1f9781377940dcfeaad56d5eb1423d6cb5 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-611.30.1.el9_7.x86_64.rpm | 8b07add40664f97b12b007bbd83cfe1f9781377940dcfeaad56d5eb1423d6cb5 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-debug-devel-5.14.0-611.30.1.el9_7.x86_64.rpm | deb34389b072bad964420a4b9a0f75e88491a654ed34ac7b8ac83f7590a60ea3 | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-611.30.1.el9_7.x86_64.rpm | 38338e38d54224383f2efcdcfb4ec45b60a70ae331969aede07d3e8966ecb8c3 | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-611.30.1.el9_7.x86_64.rpm | d9ad423c9ba65d13c768ee2f7ccc98e0f13750e7b19f6529cbe7a71389fa7421 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-611.30.1.el9_7.x86_64.rpm | d9ad423c9ba65d13c768ee2f7ccc98e0f13750e7b19f6529cbe7a71389fa7421 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-debug-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm | 75b7183aa3b232660fbaa9a7ee7315a7c6f8d5a8bc1a19850880f948f1e34df5 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm | 75b7183aa3b232660fbaa9a7ee7315a7c6f8d5a8bc1a19850880f948f1e34df5 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm | e736e02c81b40d40c6380f14da6e69ee5196232f7b027ea5c075393ae9b80a24 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm | e736e02c81b40d40c6380f14da6e69ee5196232f7b027ea5c075393ae9b80a24 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-611.30.1.el9_7.x86_64.rpm | ade71c4cd52a8eda57e198cbf2cdb078b338b2366f7fe265b9e684f0da553ded | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-611.30.1.el9_7.x86_64.rpm | ade71c4cd52a8eda57e198cbf2cdb078b338b2366f7fe265b9e684f0da553ded | - | ol9_x86_64_u7_baseos_patch | |
| kernel-devel-5.14.0-611.30.1.el9_7.x86_64.rpm | 3ed3cf05983c4ce6cc26b9bba16956051e18b628d815a0a372cadda7ed8d8d59 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-611.30.1.el9_7.x86_64.rpm | 6746468469909b1bbbc979eccb8311de6b2c53e04ca3e32317759a1296525524 | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-611.30.1.el9_7.noarch.rpm | b10315bb3dc30ec01b34cf3d8e2b2d5f5f2097cec980da4c3efe2767eab8fef9 | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-611.30.1.el9_7.x86_64.rpm | 65a9188b34a11d73b3e8edaaf8942f4b9e24112dce8d5e0b0ab71e6364f24bc6 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-611.30.1.el9_7.x86_64.rpm | 156488872f071730e157575ddf47dfa56d3149e1a0446606c2056929c252c3c2 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-611.30.1.el9_7.x86_64.rpm | 156488872f071730e157575ddf47dfa56d3149e1a0446606c2056929c252c3c2 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm | f45e57a3bfc51f9a200c1c51b87b05589e69e3a686cca225182f05f6043c7e4a | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm | f45e57a3bfc51f9a200c1c51b87b05589e69e3a686cca225182f05f6043c7e4a | - | ol9_x86_64_u7_baseos_patch | |
| kernel-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm | 88b9b0f2c8557ccc6f61a119a7d3c1a458e22b8292383a6809e44a62d4148a78 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm | 88b9b0f2c8557ccc6f61a119a7d3c1a458e22b8292383a6809e44a62d4148a78 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-tools-5.14.0-611.30.1.el9_7.x86_64.rpm | 7ba209f6d80d2d874446dffc528829860b132faf3c2b972885dcff7b67153a99 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-611.30.1.el9_7.x86_64.rpm | 7ba209f6d80d2d874446dffc528829860b132faf3c2b972885dcff7b67153a99 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-tools-libs-5.14.0-611.30.1.el9_7.x86_64.rpm | b768ff64b27bff6778b3a3a75b7094668054f13b36c777cf0c3fcef60c3dd528 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-611.30.1.el9_7.x86_64.rpm | b768ff64b27bff6778b3a3a75b7094668054f13b36c777cf0c3fcef60c3dd528 | - | ol9_x86_64_u7_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-611.30.1.el9_7.x86_64.rpm | 71d5d02bbc5c6c76031bce885a4c5070eec7a46ad3b25cf38262aeaea9325245 | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-611.30.1.el9_7.x86_64.rpm | eb1d8c7b6510935db8ea9bf6fe145d7c9ecfa88a7e5b19daa099fd627e30255d | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-611.30.1.el9_7.x86_64.rpm | eb1d8c7b6510935db8ea9bf6fe145d7c9ecfa88a7e5b19daa099fd627e30255d | - | ol9_x86_64_u7_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-611.30.1.el9_7.x86_64.rpm | 0d48f240137c4cc5a9ffe550430df32a292f456cb934c1ee39dca5b5daca1109 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-611.30.1.el9_7.x86_64.rpm | 0d48f240137c4cc5a9ffe550430df32a292f456cb934c1ee39dca5b5daca1109 | - | ol9_x86_64_u7_baseos_patch | |
| libperf-5.14.0-611.30.1.el9_7.x86_64.rpm | f9ebdb0f767280e64dded79085201e7637c70b738309300e8f6512b6c1c7f1cc | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-611.30.1.el9_7.x86_64.rpm | 130ab6ba215c2e6646eb9efda9b160dd60c062e6151b52182735f4f5ad736a15 | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-611.30.1.el9_7.x86_64.rpm | 21425ab1f81fb6e6b1c432f23e5ffdaf8e5cbdf2b498b43b2b52c4e8b090e027 | - | ol9_x86_64_appstream | |
| rtla-5.14.0-611.30.1.el9_7.x86_64.rpm | e5b7e034521ec2666cac12f876477a783be32aa524e404d3d4d2908883483bf1 | - | ol9_x86_64_appstream | |
| rv-5.14.0-611.30.1.el9_7.x86_64.rpm | a57e208e282967919e3b473ff5646e4a3335848b5a51023c4f14bdd3de065b13 | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
