ELSA-2026-2722

ELSA-2026-2722 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-02-16

Description


[5.14.0-611.34.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.34.1]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-145183]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-127498]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-127498]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-127498]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-127498]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126890] {CVE-2025-40064}

[5.14.0-611.33.1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141877]
- x86/sev: Guard sev_evict_cache() with CONFIG_AMD_MEM_ENCRYPT (Paolo Bonzini) [RHEL-128030]
- x86/sev: Evict cache lines during SNP memory validation (Paolo Bonzini) [RHEL-128030]
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132891] {CVE-2023-53034}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137683] {CVE-2025-40304}
- crypto: iaa - Optimize rebalance_wq_table() (Jay Shin) [RHEL-137272]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136942] {CVE-2025-40322}
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135137]

[5.14.0-611.32.1]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142790] {CVE-2025-68811}
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140260] {CVE-2025-68349}

[5.14.0-611.31.1]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144332] {CVE-2026-22998}


Related CVEs


CVE-2023-53034
CVE-2025-40064
CVE-2025-40304
CVE-2025-40322
CVE-2025-68349
CVE-2025-68811
CVE-2026-22998

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_aarch64_appstream
kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_aarch64_baseos_latest
kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_aarch64_codeready_builder
kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_aarch64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.34.1.el9_7.aarch64.rpmb073cbefffb2a1f3032e8706b0c1d14b1dbc66d81172bd9eb5533bf8282eb1f0-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-611.34.1.el9_7.aarch64.rpme3ef5365aea71865288208276a62c825a50266a2bbb2d3bc9f18c5bffe22dac6-ol9_aarch64_appstream
kernel-tools-5.14.0-611.34.1.el9_7.aarch64.rpmef36630af2ae7b3ad451331551f4f846a889330c31fbc5ea8d1465a99456dd35-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-611.34.1.el9_7.aarch64.rpmef36630af2ae7b3ad451331551f4f846a889330c31fbc5ea8d1465a99456dd35-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.34.1.el9_7.aarch64.rpm607008b24ff5cc46fe451844a232c26e2d20d913f257e60b6e51d0d578019089-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-611.34.1.el9_7.aarch64.rpm607008b24ff5cc46fe451844a232c26e2d20d913f257e60b6e51d0d578019089-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.34.1.el9_7.aarch64.rpm5a6284e7437517c4df239aee0eca3913c2d0701a24d81192993c36b883e1a784-ol9_aarch64_codeready_builder
libperf-5.14.0-611.34.1.el9_7.aarch64.rpmd507d245114d7433727e4d7dbbf4a24e495924317f3f9bd0208f203b18852f5d-ol9_aarch64_codeready_builder
perf-5.14.0-611.34.1.el9_7.aarch64.rpm0512b1e9bbdb5dfc00e0a3b1493815ba7b3bff0a161f008022a8c903a19180de-ol9_aarch64_appstream
python3-perf-5.14.0-611.34.1.el9_7.aarch64.rpmc6b7860ea7d4c084ca007de13f9e82f992f606fc31f84dbba565dc27c5cbd075-ol9_aarch64_appstream
rtla-5.14.0-611.34.1.el9_7.aarch64.rpm0f6f8efc5d953030ed480c2f6fcfd55bef7121bf7bef7f0dadc52c15c3883c84-ol9_aarch64_appstream
rv-5.14.0-611.34.1.el9_7.aarch64.rpmb75a893f3ce5fbeebeb88f1ec367498580c072a6632b0274676c5d7a877e71cd-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_x86_64_appstream
kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_x86_64_baseos_latest
kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_x86_64_codeready_builder
kernel-5.14.0-611.34.1.el9_7.src.rpm6fd772d7f85d444803cef973c259c1e03c77814295f463a5b5fe4dd484155b2d-ol9_x86_64_u7_baseos_patch
kernel-5.14.0-611.34.1.el9_7.x86_64.rpm7c6eb4ea7ab6b50fd137f3a2f4c69288842ee4f1ccae652d200692d7f3a29e9c-ol9_x86_64_baseos_latest
kernel-5.14.0-611.34.1.el9_7.x86_64.rpm7c6eb4ea7ab6b50fd137f3a2f4c69288842ee4f1ccae652d200692d7f3a29e9c-ol9_x86_64_u7_baseos_patch
kernel-abi-stablelists-5.14.0-611.34.1.el9_7.noarch.rpm58b286f153cbd027b4b766c6895bec123d6099c2686746ca6413810e12b29b75-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-611.34.1.el9_7.noarch.rpm58b286f153cbd027b4b766c6895bec123d6099c2686746ca6413810e12b29b75-ol9_x86_64_u7_baseos_patch
kernel-core-5.14.0-611.34.1.el9_7.x86_64.rpm8030c19de1585cfe297c49a746a2e9cbd799e29baf1a1221c19cfbbe33bc5f09-ol9_x86_64_baseos_latest
kernel-core-5.14.0-611.34.1.el9_7.x86_64.rpm8030c19de1585cfe297c49a746a2e9cbd799e29baf1a1221c19cfbbe33bc5f09-ol9_x86_64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.34.1.el9_7.x86_64.rpm82661da9b44959b490d2eee7b68b8beb4b735094a60586494ed864d3eda9a860-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-611.34.1.el9_7.x86_64.rpm620c81d7bf9fb898297f5ea95bb52371c56e93a40b674c46b084296b862ab53d-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-611.34.1.el9_7.x86_64.rpm620c81d7bf9fb898297f5ea95bb52371c56e93a40b674c46b084296b862ab53d-ol9_x86_64_u7_baseos_patch
kernel-debug-core-5.14.0-611.34.1.el9_7.x86_64.rpm725fc320357bd4c6de0d25224b1a804eb0f4ab758a284d084ba75d49248fd61e-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-611.34.1.el9_7.x86_64.rpm725fc320357bd4c6de0d25224b1a804eb0f4ab758a284d084ba75d49248fd61e-ol9_x86_64_u7_baseos_patch
kernel-debug-devel-5.14.0-611.34.1.el9_7.x86_64.rpm2ff66b0d5f15d5141b9f88dc399528001f4f5141fecb17b777df226d8ebf9bdf-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-611.34.1.el9_7.x86_64.rpm6d68dda872a2ec5147d716a0ed52c7506f88c99edeb5bce0752a8b2dd3d049d8-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-611.34.1.el9_7.x86_64.rpm7e017c09cc90a9f69d5817b2b7f5bb8c9be94ccd257e4195b5a66afb2e82e625-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-611.34.1.el9_7.x86_64.rpm7e017c09cc90a9f69d5817b2b7f5bb8c9be94ccd257e4195b5a66afb2e82e625-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpmc98dd4ca44bfe18bfa241e32de1e5bbc072d04325e1ec3334f6366e7d7ced2bd-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpmc98dd4ca44bfe18bfa241e32de1e5bbc072d04325e1ec3334f6366e7d7ced2bd-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpmdf3f646a9c51e219d3251e43fb47f47252470c160e68b3a450855019f54de0da-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpmdf3f646a9c51e219d3251e43fb47f47252470c160e68b3a450855019f54de0da-ol9_x86_64_u7_baseos_patch
kernel-debug-uki-virt-5.14.0-611.34.1.el9_7.x86_64.rpm58886e8e48b365ac182f0221471c24e89832096a351d47ebb1399bea7cad228e-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-611.34.1.el9_7.x86_64.rpm58886e8e48b365ac182f0221471c24e89832096a351d47ebb1399bea7cad228e-ol9_x86_64_u7_baseos_patch
kernel-devel-5.14.0-611.34.1.el9_7.x86_64.rpm08d2515a4677ab3ea6cffef110a083bf2c2892eba472bc76255d1292e9781cff-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-611.34.1.el9_7.x86_64.rpm727bd55ed01a3ae52820da51efceef8b7ecc6c81102a63774d52fee0ba870a2c-ol9_x86_64_appstream
kernel-doc-5.14.0-611.34.1.el9_7.noarch.rpmad5fe3fcc7c2440ed55580b73d647d6e0ee95e90ffaf4a65b98bdbc08e6d644d-ol9_x86_64_appstream
kernel-headers-5.14.0-611.34.1.el9_7.x86_64.rpm3a650ed3df2776f9547b0f8b3e09972aff66970ae1cb63b7ba6cca99be42e3b8-ol9_x86_64_appstream
kernel-modules-5.14.0-611.34.1.el9_7.x86_64.rpm732c7ece32bfba5a7b290d709bf1f8cf8aa81f883792035b7596ca0506967ff5-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-611.34.1.el9_7.x86_64.rpm732c7ece32bfba5a7b290d709bf1f8cf8aa81f883792035b7596ca0506967ff5-ol9_x86_64_u7_baseos_patch
kernel-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpmac23f49e8d34a0993616ffe224e6ec919419864891d0f5cd16368def6b21eaab-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpmac23f49e8d34a0993616ffe224e6ec919419864891d0f5cd16368def6b21eaab-ol9_x86_64_u7_baseos_patch
kernel-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm7da8a3bdb9bacf00095f9962a5e3988a4564c539d84112d4a72fe2288206b540-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm7da8a3bdb9bacf00095f9962a5e3988a4564c539d84112d4a72fe2288206b540-ol9_x86_64_u7_baseos_patch
kernel-tools-5.14.0-611.34.1.el9_7.x86_64.rpm152f21fbc3780762d2d7d027191bee82181f936d7f9c79b58543fda715c6ead2-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-611.34.1.el9_7.x86_64.rpm152f21fbc3780762d2d7d027191bee82181f936d7f9c79b58543fda715c6ead2-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.34.1.el9_7.x86_64.rpm8f47805056c8fa83fd97899b6622f294b658e7ab68a265442358d1c74b0f72b8-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-611.34.1.el9_7.x86_64.rpm8f47805056c8fa83fd97899b6622f294b658e7ab68a265442358d1c74b0f72b8-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.34.1.el9_7.x86_64.rpmb1a0ca04e894a8d048e8d516dd09b302ecb0bad4510b941517b3e35d316da98f-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-611.34.1.el9_7.x86_64.rpm86b8e4dc9be393490855ff98bef31407858a24fc3586d1ce4d77f037c3d6fc92-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-611.34.1.el9_7.x86_64.rpm86b8e4dc9be393490855ff98bef31407858a24fc3586d1ce4d77f037c3d6fc92-ol9_x86_64_u7_baseos_patch
kernel-uki-virt-addons-5.14.0-611.34.1.el9_7.x86_64.rpmb732464bac0951f897cff10d795b2d928e46fccc0e41307886b3e91845ffe64c-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-611.34.1.el9_7.x86_64.rpmb732464bac0951f897cff10d795b2d928e46fccc0e41307886b3e91845ffe64c-ol9_x86_64_u7_baseos_patch
libperf-5.14.0-611.34.1.el9_7.x86_64.rpmed94b2ab222f57a49e74ad18ead164d64fe7d5f6008fe8746e8aebbff59209f0-ol9_x86_64_codeready_builder
perf-5.14.0-611.34.1.el9_7.x86_64.rpma632005f76957871006370f78fe1a5938f9884d0de05fdac646aa17e823f3093-ol9_x86_64_appstream
python3-perf-5.14.0-611.34.1.el9_7.x86_64.rpmad68532c09a96d8835eca91628ebb8dff78952f64da926b3ebb10cca481c209e-ol9_x86_64_appstream
rtla-5.14.0-611.34.1.el9_7.x86_64.rpm5ab4f22dfc9ca9bdca7e7e0cd622f1755f5db18a415810bdc7e58b96028533eb-ol9_x86_64_appstream
rv-5.14.0-611.34.1.el9_7.x86_64.rpm21ef576388de113b6b819d2d1494e526e52d28442aef2e49d96711d74f25bc7e-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete