Stay Connected:

ELSA-2026-38491

ELSA-2026-38491 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-15

Description


[5.14.0-687.25.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.25.1]
- futex/requeue: Revert 'Prevent NULL pointer dereference in remove_waiter() on self-deadlock'' (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}


Related CVEs


CVE-2026-22979
CVE-2026-43499
CVE-2026-46086
CVE-2026-53016
CVE-2026-53166

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_aarch64_appstream
kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_aarch64_baseos_latest
kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_aarch64_codeready_builder
kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.25.1.el9_8.aarch64.rpm2a3d16a723b2b54285430405ad7d10b0f78b7cdb0ad31c9ce24a1f3041538ce4-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.25.1.el9_8.aarch64.rpmbd74e3c9212f3639e963f016c3d517e2403cd116c6af22c6937e6dcfd2b6a291-ol9_aarch64_appstream
kernel-tools-5.14.0-687.25.1.el9_8.aarch64.rpmfefa651f77e212f55c84d5e49e0ae15b414de09ff33acab43dd3bf842770fd09-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.25.1.el9_8.aarch64.rpmfefa651f77e212f55c84d5e49e0ae15b414de09ff33acab43dd3bf842770fd09-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.25.1.el9_8.aarch64.rpm2615efe29f468e36aa58754a06e8a9ddc311bc067351f50c36f5b1853e5df201-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.25.1.el9_8.aarch64.rpm2615efe29f468e36aa58754a06e8a9ddc311bc067351f50c36f5b1853e5df201-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.25.1.el9_8.aarch64.rpm077b94e96d5faec379e185eb3ec24fd7d6770d507aee2a021bc0d2d18a8c35a4-ol9_aarch64_codeready_builder
libperf-5.14.0-687.25.1.el9_8.aarch64.rpmd221c13bbe658142d96c1bddf433e803e16ee5ff58259be10ce02220ce3e4825-ol9_aarch64_codeready_builder
perf-5.14.0-687.25.1.el9_8.aarch64.rpm4be00dbf069da4309978e8e775ef35ba29284ce3fd33549f987b1e60e7b21c79-ol9_aarch64_appstream
python3-perf-5.14.0-687.25.1.el9_8.aarch64.rpmfcf1d308a7ef40f92d215199c6dcdc6b95bbcda8faac9f99d22544f58d8e15b6-ol9_aarch64_appstream
rtla-5.14.0-687.25.1.el9_8.aarch64.rpme63340f05d0b3c5efa134559292b4b13b7aadaa4db82be32a82009f3ca5275a5-ol9_aarch64_appstream
rv-5.14.0-687.25.1.el9_8.aarch64.rpma3d09e1e18b03ed40b7380eb4ebb49f88f80c806190386e51119a4a03999dfc8-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_x86_64_appstream
kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_x86_64_baseos_latest
kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_x86_64_codeready_builder
kernel-5.14.0-687.25.1.el9_8.src.rpmcf86f5b061a8fa87e5577246f17cdacc373e2657c4ebf3496926afdcd4cd1d00-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.25.1.el9_8.x86_64.rpmef610d4b366d6eed0e7eccfa7f7884a5e559f2cb979a034d7c519933284acd6a-ol9_x86_64_baseos_latest
kernel-5.14.0-687.25.1.el9_8.x86_64.rpmef610d4b366d6eed0e7eccfa7f7884a5e559f2cb979a034d7c519933284acd6a-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.25.1.el9_8.noarch.rpm67749d546eff80fe16f005be45175e0c3324600434afcc9441b2d14cf94e7ee0-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.25.1.el9_8.noarch.rpm67749d546eff80fe16f005be45175e0c3324600434afcc9441b2d14cf94e7ee0-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.25.1.el9_8.x86_64.rpm54236227600b628f9faa6e2dcc41901d5d5ac5cb76bcfd4a2f428a3eb6425c86-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.25.1.el9_8.x86_64.rpm54236227600b628f9faa6e2dcc41901d5d5ac5cb76bcfd4a2f428a3eb6425c86-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.25.1.el9_8.x86_64.rpmd6d3255f1dd543bd8dba9666b645d74f6174267171bb4ae079a2f05395c0ca60-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.25.1.el9_8.x86_64.rpm0553b2416369e2af6588731fe797b10e39d9a53abc0434c2447be1792de69711-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.25.1.el9_8.x86_64.rpm0553b2416369e2af6588731fe797b10e39d9a53abc0434c2447be1792de69711-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpme1e197582b7d581586b54d12e4de50b8c74198c62159ecbe6814f8fc58f7dcb8-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpme1e197582b7d581586b54d12e4de50b8c74198c62159ecbe6814f8fc58f7dcb8-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.25.1.el9_8.x86_64.rpm447c5f198f4e7a282bd39c3ca37a90e775d2c6e8eb7ba2cd50b9019f6db70819-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.25.1.el9_8.x86_64.rpmc445649940233cad4e8f3dd5ef1a3c28b199e56a1020f78af9aa5623d0f63da6-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.25.1.el9_8.x86_64.rpm5e090a47a514cfe00a8dbdcf8e59d47dbc5a46a323eae7e4faefff336de72d5e-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.25.1.el9_8.x86_64.rpm5e090a47a514cfe00a8dbdcf8e59d47dbc5a46a323eae7e4faefff336de72d5e-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm30cd49a14b4a82031285178cc3149b094d8c52fa3d2d2ff15ae34ff43c99b841-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm30cd49a14b4a82031285178cc3149b094d8c52fa3d2d2ff15ae34ff43c99b841-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm7f10d194a6a33e66ddca356ed64ac718f8a219abe079304605d62775e70c8b60-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm7f10d194a6a33e66ddca356ed64ac718f8a219abe079304605d62775e70c8b60-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpmc57f693ef409280a7fd02daac4bf1f1a75fadbee77e5ba6c6ffe85a0c2cefb62-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpmc57f693ef409280a7fd02daac4bf1f1a75fadbee77e5ba6c6ffe85a0c2cefb62-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.25.1.el9_8.x86_64.rpm233dff428d59e339b1d50d3bea272d32c768208771bd94c039cd80daf247fcf1-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.25.1.el9_8.x86_64.rpm7ff7d61d56b06cfbe9bac8f49d13a7d85dfcea87bbc420bcaa68f800a46f447b-ol9_x86_64_appstream
kernel-doc-5.14.0-687.25.1.el9_8.noarch.rpmf61a26b55668c72a8c86c5c1d8ea78b7dc3d9ba7ccb9689ae1d5a99f36bfea19-ol9_x86_64_appstream
kernel-headers-5.14.0-687.25.1.el9_8.x86_64.rpm5f7b1d29aba83ab833210b7b9f290bd1876a31b45f838dc06452e706a7a0e996-ol9_x86_64_appstream
kernel-modules-5.14.0-687.25.1.el9_8.x86_64.rpm78a32a58a325ba08ae7c0b6a29f0a218b3dc2491d78348d0436da6ee11c5f842-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.25.1.el9_8.x86_64.rpm78a32a58a325ba08ae7c0b6a29f0a218b3dc2491d78348d0436da6ee11c5f842-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm11da37e691ff45b327f85a24ac18a742862ccf02a0e7a4171e63263d8eb8b0bf-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm11da37e691ff45b327f85a24ac18a742862ccf02a0e7a4171e63263d8eb8b0bf-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm3b007d7a4ad10964ce4dbaccc1f0ad295b85c2964ed7f75715aa07de200d2fbc-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm3b007d7a4ad10964ce4dbaccc1f0ad295b85c2964ed7f75715aa07de200d2fbc-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.25.1.el9_8.x86_64.rpmc4cb564c313edb9839b424ab64324c1af84f26436b229649e7720c5663b018d3-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.25.1.el9_8.x86_64.rpmc4cb564c313edb9839b424ab64324c1af84f26436b229649e7720c5663b018d3-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.25.1.el9_8.x86_64.rpm35fd78e9907db0a07ee3f2ca71646b01648cf50256940b01ea9403d4973007c2-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.25.1.el9_8.x86_64.rpm35fd78e9907db0a07ee3f2ca71646b01648cf50256940b01ea9403d4973007c2-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.25.1.el9_8.x86_64.rpm47cd978bb486aa3ad35060c8604826d1cb03ca4d77f3c885143c45b8eca3e933-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpm3b2792651d38b7b5c6e92f49058ddce86e5e3c8623ab99b21f33ba0289504e11-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpm3b2792651d38b7b5c6e92f49058ddce86e5e3c8623ab99b21f33ba0289504e11-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.25.1.el9_8.x86_64.rpm85c8ca77fe754d240dae523851a6fd1af12faaf65ada8357e3bfaa96c89637a3-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.25.1.el9_8.x86_64.rpm85c8ca77fe754d240dae523851a6fd1af12faaf65ada8357e3bfaa96c89637a3-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.25.1.el9_8.x86_64.rpm9296aa546152748d584f7771526fb416c80f0223cfba3887a331840ce6ac6823-ol9_x86_64_codeready_builder
perf-5.14.0-687.25.1.el9_8.x86_64.rpme40546f6c547b779620903e4b8bb2a94fbe23be9748ed00c562136371f038074-ol9_x86_64_appstream
python3-perf-5.14.0-687.25.1.el9_8.x86_64.rpmdf555054822dcaf0de6b7866fe7b7616795dbc1429f3b0f03c3145833b915585-ol9_x86_64_appstream
rtla-5.14.0-687.25.1.el9_8.x86_64.rpm9fb019162c5a96db6a6c91347dc9229c57b8d4781c4db7ae220a5b454d6c6d53-ol9_x86_64_appstream
rv-5.14.0-687.25.1.el9_8.x86_64.rpm520d01b7fe74f2a09b7a2e6ff85d805bea04860ada276cc12466f1639bfcbcba-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights