Stay Connected:

ELSA-2026-3966

ELSA-2026-3966 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-03-10

Description


[5.14.0-611.38.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.38.1]
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143194] {CVE-2025-68800}

[5.14.0-611.37.1]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148302]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148302]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148302]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148302]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148302]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148302]
- printk: nbcon: Use raw_cpu_ptr() instead of open coding (CKI Backport Bot) [RHEL-148302]
- backport 'printk: Add helper for flush type logic' and associated changes (CKI Backport Bot) [RHEL-148302]
- printk: Remove redundant deferred check in vprintk() (CKI Backport Bot) [RHEL-148302]
- printk: Introduce force_legacy_kthread() macro (CKI Backport Bot) [RHEL-148302]
- printk: Add is_printk_legacy_deferred() (CKI Backport Bot) [RHEL-148302]
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137988]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137988]
- io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137988] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137988]
- io_uring/sqpoll: annotate debug task == current with data_race() (Jeff Moyer) [RHEL-137988]
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144125] {CVE-2026-23001}
- net/smc: Fix lookup of netdev by using ib_device_get_netdev() (CKI Backport Bot) [RHEL-114786]


Related CVEs


CVE-2025-38106
CVE-2026-23001

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_aarch64_appstream
kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_aarch64_baseos_latest
kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_aarch64_codeready_builder
kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_aarch64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.38.1.el9_7.aarch64.rpm2c659b933fd8c4d303923eab016b3ca72feb707b9865512a8613186706a7ef9b-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-611.38.1.el9_7.aarch64.rpm3cab13d174dff1331807f0d6f1fcb793cc88a9ea71c299b681956f28c40b4454-ol9_aarch64_appstream
kernel-tools-5.14.0-611.38.1.el9_7.aarch64.rpma211d6efaf9f458b28d6b753ed24efe106b31835e45ac7660064f185302b545d-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-611.38.1.el9_7.aarch64.rpma211d6efaf9f458b28d6b753ed24efe106b31835e45ac7660064f185302b545d-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.38.1.el9_7.aarch64.rpm894ae78c2299b7868087c478ed8288e6bcab98462d91f0dc9e0b48ac99ffc235-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-611.38.1.el9_7.aarch64.rpm894ae78c2299b7868087c478ed8288e6bcab98462d91f0dc9e0b48ac99ffc235-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.38.1.el9_7.aarch64.rpmb1d5e24690297d265f0a9d5d84643d4dab881c58a471ea5f00381556082d5641-ol9_aarch64_codeready_builder
libperf-5.14.0-611.38.1.el9_7.aarch64.rpmac2a2e761378e4dea92332e848b56d8b9cdfefdc3d57f21b37a3d05049b3b44f-ol9_aarch64_codeready_builder
perf-5.14.0-611.38.1.el9_7.aarch64.rpme6fe450333269777def04ffadbe8b94638450fa8470cab2c91b4ad613b2bc86b-ol9_aarch64_appstream
python3-perf-5.14.0-611.38.1.el9_7.aarch64.rpm4a415abc34c23cd2dd6b51ad59764efd9d63fa27a5f4342d118d54f6060f6f4b-ol9_aarch64_appstream
rtla-5.14.0-611.38.1.el9_7.aarch64.rpmed65eb44831787cd90a7e4cbfe5051a3baa80f81855832bea66e1d485658419c-ol9_aarch64_appstream
rv-5.14.0-611.38.1.el9_7.aarch64.rpm8114c59a1b641688adcc3850dec520b5e795224bfb7d2821c27282e2709d2e0f-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_x86_64_appstream
kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_x86_64_baseos_latest
kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_x86_64_codeready_builder
kernel-5.14.0-611.38.1.el9_7.src.rpm512036d8a6e67e400d53d8c165b6a0e1066513faca51a344284c1c54717e5259-ol9_x86_64_u7_baseos_patch
kernel-5.14.0-611.38.1.el9_7.x86_64.rpm56840873c84a965a74ccdd517521616598e1982c16d7a466a96fdb7db25a5d4b-ol9_x86_64_baseos_latest
kernel-5.14.0-611.38.1.el9_7.x86_64.rpm56840873c84a965a74ccdd517521616598e1982c16d7a466a96fdb7db25a5d4b-ol9_x86_64_u7_baseos_patch
kernel-abi-stablelists-5.14.0-611.38.1.el9_7.noarch.rpmc1315835e85fb13f8d6d5236182fcc12e4f5ef36694f41e8d07f9cba11f17acd-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-611.38.1.el9_7.noarch.rpmc1315835e85fb13f8d6d5236182fcc12e4f5ef36694f41e8d07f9cba11f17acd-ol9_x86_64_u7_baseos_patch
kernel-core-5.14.0-611.38.1.el9_7.x86_64.rpm3ab72eac897042007f40703414b75d4a5847a34a5906ba27407a5b75b2638fd7-ol9_x86_64_baseos_latest
kernel-core-5.14.0-611.38.1.el9_7.x86_64.rpm3ab72eac897042007f40703414b75d4a5847a34a5906ba27407a5b75b2638fd7-ol9_x86_64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.38.1.el9_7.x86_64.rpm7403d25253957576b5eb20963cc40f378aca87a54f3245aa1e8db5f8c0e335e1-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-611.38.1.el9_7.x86_64.rpmcbd5d9cb2b49f69843aba9672a4f20b501a8a35131a61bc88452229304773837-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-611.38.1.el9_7.x86_64.rpmcbd5d9cb2b49f69843aba9672a4f20b501a8a35131a61bc88452229304773837-ol9_x86_64_u7_baseos_patch
kernel-debug-core-5.14.0-611.38.1.el9_7.x86_64.rpm4de938bab7262525c2d5f06d09a52ce3add104ca70be420d62685589ec199752-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-611.38.1.el9_7.x86_64.rpm4de938bab7262525c2d5f06d09a52ce3add104ca70be420d62685589ec199752-ol9_x86_64_u7_baseos_patch
kernel-debug-devel-5.14.0-611.38.1.el9_7.x86_64.rpmee1255af74dc6e1e078c4d112ed8044716381fbbaeb9fb2c706fbf0e715f7c23-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-611.38.1.el9_7.x86_64.rpm41e7ca36cf54bbb8f6221a413f56b5eea181b31729011d8a3b77561a6b495b45-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-611.38.1.el9_7.x86_64.rpmf42d182a4f24b53d2171c8fe6d1e023df27c7b05c29e495bfd755d366d2c2b37-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-611.38.1.el9_7.x86_64.rpmf42d182a4f24b53d2171c8fe6d1e023df27c7b05c29e495bfd755d366d2c2b37-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm4f0572081cbe99e71acddb037a3ddabe7dff20672994f229ee95df173ac5fe42-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm4f0572081cbe99e71acddb037a3ddabe7dff20672994f229ee95df173ac5fe42-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpmb7253f5d3714933962fc675a89f0265f6c8c87606eaafb8a9dd262a6bd917a49-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpmb7253f5d3714933962fc675a89f0265f6c8c87606eaafb8a9dd262a6bd917a49-ol9_x86_64_u7_baseos_patch
kernel-debug-uki-virt-5.14.0-611.38.1.el9_7.x86_64.rpm4fc77605ba40b0b9dc78e88b90f6f40bf627b19f0c3f6ae7821c9fe7a9268860-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-611.38.1.el9_7.x86_64.rpm4fc77605ba40b0b9dc78e88b90f6f40bf627b19f0c3f6ae7821c9fe7a9268860-ol9_x86_64_u7_baseos_patch
kernel-devel-5.14.0-611.38.1.el9_7.x86_64.rpm016f5356b2d3bdb26c73a912c39bf897dc674599881953a124282826019df38a-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-611.38.1.el9_7.x86_64.rpm5a02c2edc2b970043fa24c45e163eca72fcc0d6bb9561369799ab6097e814a83-ol9_x86_64_appstream
kernel-doc-5.14.0-611.38.1.el9_7.noarch.rpmf617c3233e38741cf68fd91f56dd5a2836c1d095dc53eb7419397cf06014cdba-ol9_x86_64_appstream
kernel-headers-5.14.0-611.38.1.el9_7.x86_64.rpm7f7a0a01992d1cfcf4960daf9e7e17a3b36c8fc02d7bb6ca99ccd1a845d403d2-ol9_x86_64_appstream
kernel-modules-5.14.0-611.38.1.el9_7.x86_64.rpm3ee75c0fd8544dbc8cfa35a0fdaae577667cc02c09c5d82fac26845dac2cc02d-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-611.38.1.el9_7.x86_64.rpm3ee75c0fd8544dbc8cfa35a0fdaae577667cc02c09c5d82fac26845dac2cc02d-ol9_x86_64_u7_baseos_patch
kernel-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpmb90effbedd65d544e99a3265d2a633526bdab339cbc3fa400e377e6cdd7c682b-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpmb90effbedd65d544e99a3265d2a633526bdab339cbc3fa400e377e6cdd7c682b-ol9_x86_64_u7_baseos_patch
kernel-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpmed1a228cf2eed0ad81b668e0f5be659ac86b3388ed8bc5baafa17cc956b0b5c1-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpmed1a228cf2eed0ad81b668e0f5be659ac86b3388ed8bc5baafa17cc956b0b5c1-ol9_x86_64_u7_baseos_patch
kernel-tools-5.14.0-611.38.1.el9_7.x86_64.rpm2c8f4e6adf7e3793e7cb5a09984759853835317059c8fc6c9474c209efc28cab-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-611.38.1.el9_7.x86_64.rpm2c8f4e6adf7e3793e7cb5a09984759853835317059c8fc6c9474c209efc28cab-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.38.1.el9_7.x86_64.rpm1860ef302d88c280055acc3af33abc084b0f91d9aa45d4dd8813b457ce667267-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-611.38.1.el9_7.x86_64.rpm1860ef302d88c280055acc3af33abc084b0f91d9aa45d4dd8813b457ce667267-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.38.1.el9_7.x86_64.rpm66b9981733670b9404762d19c1c5489494ad4c5b08ff1c88e6dcd45bc5f754a6-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-611.38.1.el9_7.x86_64.rpm874bb94860e4dd212e3cb8da579be97d2f6d82cc5f32ab3b4339d5df04db6add-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-611.38.1.el9_7.x86_64.rpm874bb94860e4dd212e3cb8da579be97d2f6d82cc5f32ab3b4339d5df04db6add-ol9_x86_64_u7_baseos_patch
kernel-uki-virt-addons-5.14.0-611.38.1.el9_7.x86_64.rpmc85d437e2908ec2ac64b7e2598cda7d60b748dbd7ce896b94b889e9f69b06e38-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-611.38.1.el9_7.x86_64.rpmc85d437e2908ec2ac64b7e2598cda7d60b748dbd7ce896b94b889e9f69b06e38-ol9_x86_64_u7_baseos_patch
libperf-5.14.0-611.38.1.el9_7.x86_64.rpmc2d7b8f2d08a564320ce7ae4d52738f88cd8adfc59518741cc831f347af3a475-ol9_x86_64_codeready_builder
perf-5.14.0-611.38.1.el9_7.x86_64.rpm8b31571966cb46a5718c8a2f3db6440d66a30392efbf01a8cab175f7f44f7376-ol9_x86_64_appstream
python3-perf-5.14.0-611.38.1.el9_7.x86_64.rpm037597227e5cc8d1c0a28247ac7a4bc78266ed826f76af51c6c6810e6f4811a8-ol9_x86_64_appstream
rtla-5.14.0-611.38.1.el9_7.x86_64.rpmf7afe372cf4db8e868e1fe2aadb00ca23eb968885acd450bff18246d3c5c3437-ol9_x86_64_appstream
rv-5.14.0-611.38.1.el9_7.x86_64.rpm81e40678e49f25c9b41db14414e05e9fa7acdfb38216c95dce1adb1c867e9a74-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights