Stay Connected:

ELSA-2026-45192

ELSA-2026-45192 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-29

Description


[5.14.0-687.30.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.30.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}


Related CVEs


CVE-2025-40026
CVE-2026-52950
CVE-2026-52976
CVE-2026-53006
CVE-2026-53059

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_aarch64_appstream
kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_aarch64_baseos_latest
kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_aarch64_codeready_builder
kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.30.1.el9_8.aarch64.rpm6da69a71f763a6fb632c6a266002e3555eda47445ca293f4b99a8cd237998ef7-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.30.1.el9_8.aarch64.rpm966172b917c29598c074f489b27523fcd1fe5ea246ae393ba0cd991cefd22876-ol9_aarch64_appstream
kernel-tools-5.14.0-687.30.1.el9_8.aarch64.rpm14656628ca11b6a99938a69bbc2017b651cc74e1fc458133641c8ed058db53d1-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.30.1.el9_8.aarch64.rpm14656628ca11b6a99938a69bbc2017b651cc74e1fc458133641c8ed058db53d1-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.30.1.el9_8.aarch64.rpmfe0bc128991c885943e2ab8221eaea26e556357240e635ff3bf024b6b9c5b3cb-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.30.1.el9_8.aarch64.rpmfe0bc128991c885943e2ab8221eaea26e556357240e635ff3bf024b6b9c5b3cb-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.30.1.el9_8.aarch64.rpmac82ec775a7e1fcf06421079a13d0da18851c9b54d58a0a4fbf0122f45d91903-ol9_aarch64_codeready_builder
libperf-5.14.0-687.30.1.el9_8.aarch64.rpm6d47a10ce35bc0f83fdb3e78cfc123c17808174c445a2351bc7285745a8a0729-ol9_aarch64_codeready_builder
perf-5.14.0-687.30.1.el9_8.aarch64.rpm6a51322e4474070aacbcb98f0dde905bb61223dc0f276a046991e2eb5c8497a9-ol9_aarch64_appstream
python3-perf-5.14.0-687.30.1.el9_8.aarch64.rpm990fc73e426b2c51c21243a93c81f9c48d0392616a5dd1162464fd65673f7176-ol9_aarch64_appstream
rtla-5.14.0-687.30.1.el9_8.aarch64.rpm34d13a648fb63581b15297181a6e0ddf73a5b5185b383a4a31f47e523e699686-ol9_aarch64_appstream
rv-5.14.0-687.30.1.el9_8.aarch64.rpm242709a676c6768cdaf64160ee2269a9c71a3b7b326509fa9de7c27b34695135-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_x86_64_appstream
kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_x86_64_baseos_latest
kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_x86_64_codeready_builder
kernel-5.14.0-687.30.1.el9_8.src.rpm9d426d0bd3f85fff2e62bfdb25b52b71022f296cf619fc63e4085ffc83292626-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.30.1.el9_8.x86_64.rpm35099483953d39d4a3440f42a74401b86fd4eebd952808a9fff5b3d7e22052c7-ol9_x86_64_baseos_latest
kernel-5.14.0-687.30.1.el9_8.x86_64.rpm35099483953d39d4a3440f42a74401b86fd4eebd952808a9fff5b3d7e22052c7-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.30.1.el9_8.noarch.rpmf9ecba18a880cd8d4ab3dec55b88d043fef1e2431cee496d91a38198f4ca2633-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.30.1.el9_8.noarch.rpmf9ecba18a880cd8d4ab3dec55b88d043fef1e2431cee496d91a38198f4ca2633-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.30.1.el9_8.x86_64.rpmc148f3de313f3ff978c3aeb0a49cd6d890f399cdde5f042ede2c26f6d2aec89e-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.30.1.el9_8.x86_64.rpmc148f3de313f3ff978c3aeb0a49cd6d890f399cdde5f042ede2c26f6d2aec89e-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.30.1.el9_8.x86_64.rpmfab4e15f96e38ccc04ffe715e3f2788d01529bd2054f20389b9f829c3e09aea4-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.30.1.el9_8.x86_64.rpm8d80c530aa45c2397a7090a33993c6b1f1a271ff62a912e411fe084a815e01bc-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.30.1.el9_8.x86_64.rpm8d80c530aa45c2397a7090a33993c6b1f1a271ff62a912e411fe084a815e01bc-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.30.1.el9_8.x86_64.rpm7cd42756675cd723ed037431f69505a0977c85e3f82b9412525e5934e5474bb9-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.30.1.el9_8.x86_64.rpm7cd42756675cd723ed037431f69505a0977c85e3f82b9412525e5934e5474bb9-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.30.1.el9_8.x86_64.rpma2b6f5be6a72e062c29670d6246ec0e3ba937d84a0aaeb09d2f84c3118f92d55-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.30.1.el9_8.x86_64.rpm6e7f972751f09206d7950b78fc5a4d84333de252175849fecaebf82cb0949d50-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.30.1.el9_8.x86_64.rpm4c95892646e5c1a68818091a5b95e78ba9ac0c814a4a82b28d472561a71b548d-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.30.1.el9_8.x86_64.rpm4c95892646e5c1a68818091a5b95e78ba9ac0c814a4a82b28d472561a71b548d-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm165914e031b82533c9eda88d26475d0a4de6b82b002a07b8e43a19c0eb3cebd8-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm165914e031b82533c9eda88d26475d0a4de6b82b002a07b8e43a19c0eb3cebd8-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm27c6008932da3b970e2aa882f78a176407ec7dcdbbcc23279c2dfb1a4df6666f-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm27c6008932da3b970e2aa882f78a176407ec7dcdbbcc23279c2dfb1a4df6666f-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpmd42519742fc284e0d84ebb2a43c7143b134d2bf388ca0a166b624c52653e9697-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpmd42519742fc284e0d84ebb2a43c7143b134d2bf388ca0a166b624c52653e9697-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.30.1.el9_8.x86_64.rpmf6b51096b4fb6254c240c3009f2512d769bed122c6aabbbdfc4f85578cdec858-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.30.1.el9_8.x86_64.rpm080dbbec30c27736558c3d96916f3bc759359b0d81fb4a0dd9170872251d4961-ol9_x86_64_appstream
kernel-doc-5.14.0-687.30.1.el9_8.noarch.rpm8263306d199220c7d7c8c1abb02a58b844f40ab298a63d81095c29c409bf2e8e-ol9_x86_64_appstream
kernel-headers-5.14.0-687.30.1.el9_8.x86_64.rpm87782746781d102e2084d25f71a1336e407ab3ac2c42ae14d4cffe90551f5ccc-ol9_x86_64_appstream
kernel-modules-5.14.0-687.30.1.el9_8.x86_64.rpmd1e544060e8a05b2bf88b4c60112afc1b04d1c78890da386af2a45f32f6c0883-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.30.1.el9_8.x86_64.rpmd1e544060e8a05b2bf88b4c60112afc1b04d1c78890da386af2a45f32f6c0883-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm0ea810c318ffad7cdc425890f83d50c2c87d11f988d585bef7a81889f6a92858-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm0ea810c318ffad7cdc425890f83d50c2c87d11f988d585bef7a81889f6a92858-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm71d75a36ea3f775a242b64d73675aa16f6ee7827d22d8f571dafedaa962780b7-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm71d75a36ea3f775a242b64d73675aa16f6ee7827d22d8f571dafedaa962780b7-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.30.1.el9_8.x86_64.rpm4d5a8f744fd08280c20035ffdb1f157c54155a8fd4361743e412dceb52ace218-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.30.1.el9_8.x86_64.rpm4d5a8f744fd08280c20035ffdb1f157c54155a8fd4361743e412dceb52ace218-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.30.1.el9_8.x86_64.rpmeb32cc911a5c4104ca080bf66c304508bd423b57f56f779b588a17e0ffc68cb3-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.30.1.el9_8.x86_64.rpmeb32cc911a5c4104ca080bf66c304508bd423b57f56f779b588a17e0ffc68cb3-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.30.1.el9_8.x86_64.rpm0bb2af0f73677e7748a62791ec700a0751a9c37d74a880d8aaf20bf61cf7c90f-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpmc600a86c480b20786a3c9d91cc6c16ba7c2d67989546f20fe2ff4e820736f6ad-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpmc600a86c480b20786a3c9d91cc6c16ba7c2d67989546f20fe2ff4e820736f6ad-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.30.1.el9_8.x86_64.rpm32937884322795262050f19fa81e4d3f3652ecc6af341d3bd8b157abd169791a-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.30.1.el9_8.x86_64.rpm32937884322795262050f19fa81e4d3f3652ecc6af341d3bd8b157abd169791a-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.30.1.el9_8.x86_64.rpm87e7cc90eeb0afa7a990a2ed71601f2337e598bb95228f9bfdad01e03fb4638e-ol9_x86_64_codeready_builder
perf-5.14.0-687.30.1.el9_8.x86_64.rpm271b6c23a476b3f1d5336dbe82cd4320b214208af1a5ff7ca0f9fbfea16ca82c-ol9_x86_64_appstream
python3-perf-5.14.0-687.30.1.el9_8.x86_64.rpm4868683220f30d729f9dcf8b46c04509d6bcc3b2645fae0ea50d9d0f47ce2270-ol9_x86_64_appstream
rtla-5.14.0-687.30.1.el9_8.x86_64.rpm79733037c85f0e848181b5fb02b1a0a6d2981040ccc23950bd5e22ce671f6a68-ol9_x86_64_appstream
rv-5.14.0-687.30.1.el9_8.x86_64.rpm77a829136bb312558c0d63ef6530ff0b3cf7f5e82dc804498fff3efe3847fee3-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights