Stay Connected:

ELSA-2026-3488

ELSA-2026-3488 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-03-02

Description


[5.14.0-611.36.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.36.1]
- net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-143718]
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-149495]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147266] {CVE-2026-23097}
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148166]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144987]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144987]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144987]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144987]
- fou: fix initialization of grc (Xin Long) [RHEL-144987]
- fou: Fix null-ptr-deref in GRO. (Xin Long) [RHEL-144987]
- fou: remove warn in gue_gro_receive on unsupported protocol (Xin Long) [RHEL-144987]
- fou: Remove XRFM from NET_FOU Kconfig (Xin Long) [RHEL-144987]
- fou: remove sparse errors (Xin Long) [RHEL-144987]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144987]
- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143713]
- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146357]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-147459]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-147459]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-147459]
- i40e: add rh_phys_port_name mod option to behave like upstream (CKI Backport Bot) [RHEL-128237]
- ice: add rh_phys_port_name mod option to behave like upstream (CKI Backport Bot) [RHEL-128237]
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-146049]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143545] {CVE-2025-71085}
- tick/sched: Limit non-timekeeper CPUs calling jiffies update (Phil Auld) [RHEL-141462]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130017] {CVE-2025-40168}


Related CVEs


CVE-2025-40168
CVE-2025-71085
CVE-2026-23097

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_aarch64_appstream
kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_aarch64_baseos_latest
kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_aarch64_codeready_builder
kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_aarch64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.36.1.el9_7.aarch64.rpm0521709523f10d09f205d6f413eeb6fe447c34bd99a131558d4baf7fc37387e9-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-611.36.1.el9_7.aarch64.rpm6744063285f508aff314193b95d5dad98d41f8ea4f0de970e53d986a4a074c9d-ol9_aarch64_appstream
kernel-tools-5.14.0-611.36.1.el9_7.aarch64.rpm2c9ff460c32b2c4c36501e0ac28686463797a04db8371bbac145c5fa626c5a75-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-611.36.1.el9_7.aarch64.rpm2c9ff460c32b2c4c36501e0ac28686463797a04db8371bbac145c5fa626c5a75-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.36.1.el9_7.aarch64.rpmc086f2aecb6b823e3dbe10564381bbe16bc4872fc36d6489bebe2753c3a6633e-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-611.36.1.el9_7.aarch64.rpmc086f2aecb6b823e3dbe10564381bbe16bc4872fc36d6489bebe2753c3a6633e-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.36.1.el9_7.aarch64.rpm78a284638dd24579ee241a98b0cc63a4eeedb87f439f6d23c01c71e84dba652b-ol9_aarch64_codeready_builder
libperf-5.14.0-611.36.1.el9_7.aarch64.rpmb1ee3c06f48a3ca80b520954745e2b5e4d685a03e0eecf01020b62b3f549e237-ol9_aarch64_codeready_builder
perf-5.14.0-611.36.1.el9_7.aarch64.rpmd05491f8e709ecfe78e19659e165807ce54f2c5855e44da2d4d2dd805cc2f34c-ol9_aarch64_appstream
python3-perf-5.14.0-611.36.1.el9_7.aarch64.rpm0dafc0c74c7f1450605a28a4a32e7f743607138591e318a6f99832bfb47b82d7-ol9_aarch64_appstream
rtla-5.14.0-611.36.1.el9_7.aarch64.rpmeb5e00bcf72d6070811a40c0721a16558302afb5e54df41e2d9a905e3cec99d8-ol9_aarch64_appstream
rv-5.14.0-611.36.1.el9_7.aarch64.rpmb86112ee067a5788167fc1a18cbc990641a55b5a6bb0bac257b8d1f927c9e83d-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_x86_64_appstream
kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_x86_64_baseos_latest
kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_x86_64_codeready_builder
kernel-5.14.0-611.36.1.el9_7.src.rpm60e0d689254ad81227dfcf08324dcf301a5c53ea04ba01232129eb95bbf19703-ol9_x86_64_u7_baseos_patch
kernel-5.14.0-611.36.1.el9_7.x86_64.rpm19aee56b225976311c24420790a92274303b4a3b8f7321d09d9ae6ecbddb3efd-ol9_x86_64_baseos_latest
kernel-5.14.0-611.36.1.el9_7.x86_64.rpm19aee56b225976311c24420790a92274303b4a3b8f7321d09d9ae6ecbddb3efd-ol9_x86_64_u7_baseos_patch
kernel-abi-stablelists-5.14.0-611.36.1.el9_7.noarch.rpmfb712f1ef0c0bce0d14d0fc95c88d24f95cee84cf98a8d8735d12230939cec4f-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-611.36.1.el9_7.noarch.rpmfb712f1ef0c0bce0d14d0fc95c88d24f95cee84cf98a8d8735d12230939cec4f-ol9_x86_64_u7_baseos_patch
kernel-core-5.14.0-611.36.1.el9_7.x86_64.rpm4ff4e4a314a832a36096edbfb60120ed026f9a7f7694c8adbaa65ec712db96d0-ol9_x86_64_baseos_latest
kernel-core-5.14.0-611.36.1.el9_7.x86_64.rpm4ff4e4a314a832a36096edbfb60120ed026f9a7f7694c8adbaa65ec712db96d0-ol9_x86_64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.36.1.el9_7.x86_64.rpm034f2fc521ba277ed340b9f56720517d9d30ccbd8569f1f0eb9869e27ea887bc-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-611.36.1.el9_7.x86_64.rpmcbc6935060dd4cfc508a96178e4dd6ce7160ce2a8a9d02abfbe20e9722aaf970-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-611.36.1.el9_7.x86_64.rpmcbc6935060dd4cfc508a96178e4dd6ce7160ce2a8a9d02abfbe20e9722aaf970-ol9_x86_64_u7_baseos_patch
kernel-debug-core-5.14.0-611.36.1.el9_7.x86_64.rpm05910be58ad4d9b9d671ea9bc7c53215cd152d505f9b670098f6dd1497047d4e-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-611.36.1.el9_7.x86_64.rpm05910be58ad4d9b9d671ea9bc7c53215cd152d505f9b670098f6dd1497047d4e-ol9_x86_64_u7_baseos_patch
kernel-debug-devel-5.14.0-611.36.1.el9_7.x86_64.rpm31789107bf8dbb5498f172f353470d220a1858e7105229bd8e13eb899a1acaec-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-611.36.1.el9_7.x86_64.rpmc64edf7fe98db5c96dbf5298ecfc79ec076ec4c991ba7b0c129c3436dd421324-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-611.36.1.el9_7.x86_64.rpm23d60c3bbc97f3f3fb0d96fb441a82adfd5d17c221394230fd13478f5887c89e-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-611.36.1.el9_7.x86_64.rpm23d60c3bbc97f3f3fb0d96fb441a82adfd5d17c221394230fd13478f5887c89e-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm903dc03bac23135e291f67756d6b02455d1de8a5e6ff91634e331e1beef3ab20-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm903dc03bac23135e291f67756d6b02455d1de8a5e6ff91634e331e1beef3ab20-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm749e1e7df0389d28ae7f5e212e40565821dc3aa6c9229747f666358d959c4277-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm749e1e7df0389d28ae7f5e212e40565821dc3aa6c9229747f666358d959c4277-ol9_x86_64_u7_baseos_patch
kernel-debug-uki-virt-5.14.0-611.36.1.el9_7.x86_64.rpm7780ecc70e99af9b79ae464319605440527a0468c61c2340018428d036377077-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-611.36.1.el9_7.x86_64.rpm7780ecc70e99af9b79ae464319605440527a0468c61c2340018428d036377077-ol9_x86_64_u7_baseos_patch
kernel-devel-5.14.0-611.36.1.el9_7.x86_64.rpm636881da02ec703ff7d4bdbd2f6f7d5920816d382932bc31f1b8ff83ec021f87-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-611.36.1.el9_7.x86_64.rpme11dc3ddb5bc5b6bdb60492c9a070be8705509fba111b8bfa20416c9c92c6e87-ol9_x86_64_appstream
kernel-doc-5.14.0-611.36.1.el9_7.noarch.rpmb757e2e7519360e543fc35fc038e8565d872a8716850d2e25d748b32d2bd1bff-ol9_x86_64_appstream
kernel-headers-5.14.0-611.36.1.el9_7.x86_64.rpm4c45fc54be989c7e843070e1bf467131bb1d637a05775b242556ed07a59fad2a-ol9_x86_64_appstream
kernel-modules-5.14.0-611.36.1.el9_7.x86_64.rpm6631f28f2b7fd4765ab3e8b5b6407dd8668ac189f127b6689ac1459eaa8ca4ea-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-611.36.1.el9_7.x86_64.rpm6631f28f2b7fd4765ab3e8b5b6407dd8668ac189f127b6689ac1459eaa8ca4ea-ol9_x86_64_u7_baseos_patch
kernel-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm0e1dfbf3feeed7843b3863b6782c2f8db7d65799e010b8d5c8d1afa902838e5b-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm0e1dfbf3feeed7843b3863b6782c2f8db7d65799e010b8d5c8d1afa902838e5b-ol9_x86_64_u7_baseos_patch
kernel-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm9f0dd0438da1f618250c8a8232e209c0ab8bcc4b9c9e201a5dc0529e6fafe656-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm9f0dd0438da1f618250c8a8232e209c0ab8bcc4b9c9e201a5dc0529e6fafe656-ol9_x86_64_u7_baseos_patch
kernel-tools-5.14.0-611.36.1.el9_7.x86_64.rpm6038894a06f15c98319fdf0b4330a43d0fefe3a520d40933c335a3789081301a-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-611.36.1.el9_7.x86_64.rpm6038894a06f15c98319fdf0b4330a43d0fefe3a520d40933c335a3789081301a-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.36.1.el9_7.x86_64.rpm02b06517031ce6fa9ad7b40c1da8623f486576dd75ad3f316ba616b6f199384e-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-611.36.1.el9_7.x86_64.rpm02b06517031ce6fa9ad7b40c1da8623f486576dd75ad3f316ba616b6f199384e-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.36.1.el9_7.x86_64.rpm7c7c3c417d6dbe2ab3c58d2dc1abfd5a595d504ad95eb28c22468bb64f0d4ff2-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-611.36.1.el9_7.x86_64.rpm79bd5b428351ce15a0e3610217ea9ea1b04e1ac42742d732a02a940d045f41b5-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-611.36.1.el9_7.x86_64.rpm79bd5b428351ce15a0e3610217ea9ea1b04e1ac42742d732a02a940d045f41b5-ol9_x86_64_u7_baseos_patch
kernel-uki-virt-addons-5.14.0-611.36.1.el9_7.x86_64.rpm10d38ec73c3f8f898335bb7944ab89bb702cf81fbd968c8ca18ac4a40b2e27df-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-611.36.1.el9_7.x86_64.rpm10d38ec73c3f8f898335bb7944ab89bb702cf81fbd968c8ca18ac4a40b2e27df-ol9_x86_64_u7_baseos_patch
libperf-5.14.0-611.36.1.el9_7.x86_64.rpm372cab87a8441c909b6e409e4c9d1b6f205c1173685d1d55e990df48c1604798-ol9_x86_64_codeready_builder
perf-5.14.0-611.36.1.el9_7.x86_64.rpm4689d1586bbf4bdcb285243001bd025bf61a46db37454218da5758273c274221-ol9_x86_64_appstream
python3-perf-5.14.0-611.36.1.el9_7.x86_64.rpm18348c9de5824ad5921f074e0337e2a67370936d79b4f6f36782845b57d0e87f-ol9_x86_64_appstream
rtla-5.14.0-611.36.1.el9_7.x86_64.rpm30e5232fe0539e7b7f45b9581ea3a92c289946bf43e1d305513909138751236e-ol9_x86_64_appstream
rv-5.14.0-611.36.1.el9_7.x86_64.rpmc31c710f34680a0803673c82aa0a62483f9ff3edda123f366feccad0f22c49a6-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights