Stay Connected:

ELSA-2026-36645

ELSA-2026-36645 - kernel update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-14

Description


[5.14.0-687.23.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.23.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]


Related CVEs


CVE-2026-43074
CVE-2026-46242
CVE-2026-53266

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_aarch64_appstream
kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_aarch64_baseos_latest
kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_aarch64_codeready_builder
kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.23.1.el9_8.aarch64.rpm9601e4bf6e80d18149fc95311a703c4e2638da4b02db776bfd7aac0e48b666db-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.23.1.el9_8.aarch64.rpm06f45d464740a843f4c232a6081e27c57509beec2974342fa37dc768a71455a1-ol9_aarch64_appstream
kernel-tools-5.14.0-687.23.1.el9_8.aarch64.rpmfac0cc5624b216ea923b82c4394bd584a7f91f6b88097541045df63c09909c73-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.23.1.el9_8.aarch64.rpmfac0cc5624b216ea923b82c4394bd584a7f91f6b88097541045df63c09909c73-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.23.1.el9_8.aarch64.rpm2488db782010ad5e05c4f94ceed8f8f87b907020e7fec4a717d98d06e00d1f76-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.23.1.el9_8.aarch64.rpm2488db782010ad5e05c4f94ceed8f8f87b907020e7fec4a717d98d06e00d1f76-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.23.1.el9_8.aarch64.rpme11d60fa094ce1df42ed0e1db2d02b0e82fc460755e6f0b2e8670c8366ac52d6-ol9_aarch64_codeready_builder
libperf-5.14.0-687.23.1.el9_8.aarch64.rpm79e6140095f883693a9348e224bd420d6b322d6104c2ea530cfd3ba9c5821b97-ol9_aarch64_codeready_builder
perf-5.14.0-687.23.1.el9_8.aarch64.rpm56d496cc146f5f894bb7b44b79ed43fcf0d56394b02ad1126c317845d1399253-ol9_aarch64_appstream
python3-perf-5.14.0-687.23.1.el9_8.aarch64.rpm2146a1407ae981ef61c93df1582d8cbd2a851aefbdb71aab534cc1242b82be05-ol9_aarch64_appstream
rtla-5.14.0-687.23.1.el9_8.aarch64.rpm22d6132707f78035d6619a29821f1462a233e8c0889e704807c19dae81628076-ol9_aarch64_appstream
rv-5.14.0-687.23.1.el9_8.aarch64.rpm5cfdb20f3f30f407464369368b921ada5fbb82355777aa0ce9d676fed5c1fe19-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_x86_64_appstream
kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_x86_64_baseos_latest
kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_x86_64_codeready_builder
kernel-5.14.0-687.23.1.el9_8.src.rpmcdba8c0a855264329f29fc4a2c7f59d718e1e01285a94f4e52e66493a9681f25-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.23.1.el9_8.x86_64.rpme3b966cb3f3c78affdc07240d1ad481fdcf08a0bf5913dc3c4b2fdb1f1b92cb7-ol9_x86_64_baseos_latest
kernel-5.14.0-687.23.1.el9_8.x86_64.rpme3b966cb3f3c78affdc07240d1ad481fdcf08a0bf5913dc3c4b2fdb1f1b92cb7-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.23.1.el9_8.noarch.rpm746a8a6b4e5fdb31f0140ccfeed175be8d9eb206da8d50f36ca9129af686b66a-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.23.1.el9_8.noarch.rpm746a8a6b4e5fdb31f0140ccfeed175be8d9eb206da8d50f36ca9129af686b66a-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.23.1.el9_8.x86_64.rpm7154e08f1f97cffe473f72440a6aca1aa4484978871c8b3b0cc8ef37d7ab4b38-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.23.1.el9_8.x86_64.rpm7154e08f1f97cffe473f72440a6aca1aa4484978871c8b3b0cc8ef37d7ab4b38-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.23.1.el9_8.x86_64.rpme3b0d23817ae0bf82b4115ed13db14d13adfcd20d64b6a751f41affd9a393550-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.23.1.el9_8.x86_64.rpm1a621bd51b4ba076af793bfdf64f71ce162671a5ff999ae4ce581b5dffb22ec1-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.23.1.el9_8.x86_64.rpm1a621bd51b4ba076af793bfdf64f71ce162671a5ff999ae4ce581b5dffb22ec1-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm3b6adac9d5ed1338605570a94b80512276a77921e70153750a887c2ab4f15100-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm3b6adac9d5ed1338605570a94b80512276a77921e70153750a887c2ab4f15100-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm9c3f0c2786b206fbb9d347aeda6a225d92b8db96341e4c4164466088eb5af843-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.23.1.el9_8.x86_64.rpma343040378ba8105bf97d85456e8174a44097326ed079a79bf226b8c984de2d5-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm5da7533dfdee2131199f7d953c742c213f6033f72b155a5e02aea3503b68a9a8-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm5da7533dfdee2131199f7d953c742c213f6033f72b155a5e02aea3503b68a9a8-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpmf6b194113e5c52cb0cacb838c79bb6508e0b3f087bc1b1c7fc373318184eb3b2-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpmf6b194113e5c52cb0cacb838c79bb6508e0b3f087bc1b1c7fc373318184eb3b2-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm4c078653b26a4668cc8937243feb35f5409805f8deaf05d56d3e11e714c178ae-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm4c078653b26a4668cc8937243feb35f5409805f8deaf05d56d3e11e714c178ae-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm9e76a94095e03868d9a7c4c003641d8a0ea3448902e097985ad0b1c263b23965-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm9e76a94095e03868d9a7c4c003641d8a0ea3448902e097985ad0b1c263b23965-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.23.1.el9_8.x86_64.rpmf6c1b42a5f81829d103c0644e4344db38e799c9335007e07a890fbf84aeffd80-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.23.1.el9_8.x86_64.rpma76bb9c099adf3a4f8154ae58c086f8ce7707d70b27ed5f727d20ddb767ebd69-ol9_x86_64_appstream
kernel-doc-5.14.0-687.23.1.el9_8.noarch.rpmc0b4915f880eab34ba390c7d2fa81fa248533bd0aa8531af5a78725fccd84de2-ol9_x86_64_appstream
kernel-headers-5.14.0-687.23.1.el9_8.x86_64.rpm611547228258c147bdb0c10ed3add102ab7df9efa17541d63cb91f4e0fefd4f0-ol9_x86_64_appstream
kernel-modules-5.14.0-687.23.1.el9_8.x86_64.rpm93b5bc4067cc4779caac17d0ed0bc5d8afd8bf5f2a2590691af340662fcc495f-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.23.1.el9_8.x86_64.rpm93b5bc4067cc4779caac17d0ed0bc5d8afd8bf5f2a2590691af340662fcc495f-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm2dd4b915a016511a263df5de392444311557bc989380902257e07e7fde38c428-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm2dd4b915a016511a263df5de392444311557bc989380902257e07e7fde38c428-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpmc4426b412025f6a8cff0cc9419a1f104980e62cf70568f9e6d900e3f5285240f-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpmc4426b412025f6a8cff0cc9419a1f104980e62cf70568f9e6d900e3f5285240f-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.23.1.el9_8.x86_64.rpm4c4335d65d892680e3b85a1a5e12bd064b44c96ba588108b0eb8b371474d944a-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.23.1.el9_8.x86_64.rpm4c4335d65d892680e3b85a1a5e12bd064b44c96ba588108b0eb8b371474d944a-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.23.1.el9_8.x86_64.rpmb444887245449aa21a6b05ec09a8d4a26958da2ad315e2e6cc23d54628b8ffcd-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.23.1.el9_8.x86_64.rpmb444887245449aa21a6b05ec09a8d4a26958da2ad315e2e6cc23d54628b8ffcd-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.23.1.el9_8.x86_64.rpm525082bf35644ba39edfc8bc341639c67932515854a4766945b746aeee5e4649-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm7b7f1ca8e791e81722c5096a13ccf396689fcd6b6cc426d1c2b97e6f5a3629d7-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm7b7f1ca8e791e81722c5096a13ccf396689fcd6b6cc426d1c2b97e6f5a3629d7-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.23.1.el9_8.x86_64.rpmcfca4d564afe6ac91eae2f45a41fe015c32973cc1c8654da504dd61bdca2cbfe-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.23.1.el9_8.x86_64.rpmcfca4d564afe6ac91eae2f45a41fe015c32973cc1c8654da504dd61bdca2cbfe-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.23.1.el9_8.x86_64.rpm97b9535291cfb7c4f225a6cd7f2f058087f822e5698d88ed64bc6af8b7d072b9-ol9_x86_64_codeready_builder
perf-5.14.0-687.23.1.el9_8.x86_64.rpm9fa9c8e5683652f6d5dc7ed1b6c7216c7a61240007e286e24d1909f22a722a94-ol9_x86_64_appstream
python3-perf-5.14.0-687.23.1.el9_8.x86_64.rpm9f39fd22f35936c9234b0867f6a9b11921c31e0e0544c56e06ee062a00df2a15-ol9_x86_64_appstream
rtla-5.14.0-687.23.1.el9_8.x86_64.rpmf21b8344e5e5c81399346e487068fb6be55e07c0abd65b62dc21cd6a88be61d9-ol9_x86_64_appstream
rv-5.14.0-687.23.1.el9_8.x86_64.rpm919a9c2d3831b820924441c5009748012a44bcf8859267884fc9bbf6fba07652-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights