Stay Connected:

ELSA-2026-47040

ELSA-2026-47040 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-30

Description


[5.14.0-687.31.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.31.1]
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]


Related CVEs


CVE-2025-39797
CVE-2026-23002
CVE-2026-52973
CVE-2026-53281
CVE-2026-64017

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_aarch64_appstream
kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_aarch64_baseos_latest
kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_aarch64_codeready_builder
kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.31.1.el9_8.aarch64.rpm89116184db27b17e17620df4e1653f563eadcf9efe477fe970d331c704d8e6a4-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.31.1.el9_8.aarch64.rpm58d16e03fb96d0071d5b83379e29bcb0c14038babe8e6b11ecf65df616494ace-ol9_aarch64_appstream
kernel-tools-5.14.0-687.31.1.el9_8.aarch64.rpm0e6861aa503f7987640b7f20c4f107e98f0c2986dd1454c89b93865db6799803-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.31.1.el9_8.aarch64.rpm0e6861aa503f7987640b7f20c4f107e98f0c2986dd1454c89b93865db6799803-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.31.1.el9_8.aarch64.rpm10a5f06b2645f639f7e80bc53b64290eff382bc8733602f78e40736152cb930b-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.31.1.el9_8.aarch64.rpm10a5f06b2645f639f7e80bc53b64290eff382bc8733602f78e40736152cb930b-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.31.1.el9_8.aarch64.rpm396d09189ee683e47cb57efa1f15fa6da2d56ada300ae0282a673ee6d55d2fd6-ol9_aarch64_codeready_builder
libperf-5.14.0-687.31.1.el9_8.aarch64.rpmee9a38d89f830843ede7f563d47178166d84e3a14431f485033f858f3553970c-ol9_aarch64_codeready_builder
perf-5.14.0-687.31.1.el9_8.aarch64.rpmda87f58adf9b748fd7b87ad45e672cd73645c32f14f8dfabbc94ac66aa1c1fb5-ol9_aarch64_appstream
python3-perf-5.14.0-687.31.1.el9_8.aarch64.rpm77bb529fdc8544d1e2ccac88804590a2477ec1b3aee69c52c8237e7f5e01d842-ol9_aarch64_appstream
rtla-5.14.0-687.31.1.el9_8.aarch64.rpme7ea58d72f39e6e14b15769dd342d5b343094753480db8fd698c09ae4afff7f9-ol9_aarch64_appstream
rv-5.14.0-687.31.1.el9_8.aarch64.rpma98df4c3d4d9e4bb29a9eb6b0d02397ee7702ddbe4ce933121339414a05634ea-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_x86_64_appstream
kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_x86_64_baseos_latest
kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_x86_64_codeready_builder
kernel-5.14.0-687.31.1.el9_8.src.rpm599ffda45dc4ea0c80c254ae22161e5f5394099a40dd24a90d62d69d1fa4ff06-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.31.1.el9_8.x86_64.rpm77d4d63f756b4a81c45d5d960c59f6b8910536f3cef44b7ce6e0e099e42918ad-ol9_x86_64_baseos_latest
kernel-5.14.0-687.31.1.el9_8.x86_64.rpm77d4d63f756b4a81c45d5d960c59f6b8910536f3cef44b7ce6e0e099e42918ad-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.31.1.el9_8.noarch.rpm800c7b7de9109ed82340107f6d42f4f94760ecb88c6e43807803fe49d000c562-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.31.1.el9_8.noarch.rpm800c7b7de9109ed82340107f6d42f4f94760ecb88c6e43807803fe49d000c562-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.31.1.el9_8.x86_64.rpma45edee7fd78cfc26454a6e9947d5c997eb652b4d17a9dc9df801c4fe43bfe21-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.31.1.el9_8.x86_64.rpma45edee7fd78cfc26454a6e9947d5c997eb652b4d17a9dc9df801c4fe43bfe21-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.31.1.el9_8.x86_64.rpm5ba7c399932e4c8901475c8ea3fa6548fce4783d9ead9b70a194b27bbed24a11-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.31.1.el9_8.x86_64.rpmc4db69a474293a912105bf464a2361751d26fa313fe3ce6b5ccb3d1a1e5cad23-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.31.1.el9_8.x86_64.rpmc4db69a474293a912105bf464a2361751d26fa313fe3ce6b5ccb3d1a1e5cad23-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.31.1.el9_8.x86_64.rpm7640b29ee0f0f9071591948e10fe73cb163a5e77a3e3ddb57b55bdd4ea199fe7-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.31.1.el9_8.x86_64.rpm7640b29ee0f0f9071591948e10fe73cb163a5e77a3e3ddb57b55bdd4ea199fe7-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.31.1.el9_8.x86_64.rpm8e41349c8eeef186bc29f5d20d870a08d4913c7cd5f27818e246e10ce6bbf409-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.31.1.el9_8.x86_64.rpm1dd68c70348b32ad41460da271921e3bd785dcc80558d9a03eb2670b3472009b-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.31.1.el9_8.x86_64.rpm5ee43e54b89aca5148b1020dce5645cf501fb7999531e9dffe0e79794a0b4447-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.31.1.el9_8.x86_64.rpm5ee43e54b89aca5148b1020dce5645cf501fb7999531e9dffe0e79794a0b4447-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm5f05aa97d3a9da1444556d04a49608a5688baf220694aa1e787fc55deda736b1-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm5f05aa97d3a9da1444556d04a49608a5688baf220694aa1e787fc55deda736b1-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpmf05b4999170d244c8d24093c9ef7ad649375f1318416f5967d4e14131eac0542-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpmf05b4999170d244c8d24093c9ef7ad649375f1318416f5967d4e14131eac0542-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpmfd9c9c3bc247982fc7178b1c706d733ee5c36124ad92cca29bc946b9cf70b23a-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpmfd9c9c3bc247982fc7178b1c706d733ee5c36124ad92cca29bc946b9cf70b23a-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.31.1.el9_8.x86_64.rpm5ca5f45e570190c8508b9a3199c560f516a7fb553f9f699373db68105f921e28-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.31.1.el9_8.x86_64.rpm06b488664ad5adbe9ad6c8a9584676139337338f99083d2d8151697ba1d2e4b3-ol9_x86_64_appstream
kernel-doc-5.14.0-687.31.1.el9_8.noarch.rpm2dd5d8423895db4f28411abcd01fd3d0f3a92601a4ce49aad12fbfb85df384ee-ol9_x86_64_appstream
kernel-headers-5.14.0-687.31.1.el9_8.x86_64.rpmed18d19a8e326136e46b858bd0a82ed34ff2b7ad9240d37a4367a1e3d9b153a9-ol9_x86_64_appstream
kernel-modules-5.14.0-687.31.1.el9_8.x86_64.rpm19baccd7f9c10e5befd250fbda7b99e74d439125474cc8da14b158c54b4cee5f-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.31.1.el9_8.x86_64.rpm19baccd7f9c10e5befd250fbda7b99e74d439125474cc8da14b158c54b4cee5f-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpme798553ddcbde7026f23189b15de1ae72a8159d2d84a35e870662217c612c31c-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpme798553ddcbde7026f23189b15de1ae72a8159d2d84a35e870662217c612c31c-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpmd9354dc0e3da8b359fad7ade6fbe2fa7a500d415de65fd6f4e8140f4fa4deeed-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpmd9354dc0e3da8b359fad7ade6fbe2fa7a500d415de65fd6f4e8140f4fa4deeed-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.31.1.el9_8.x86_64.rpmfaf22d4caa95d848180bdf6045dcdf69a34cfb65f5fa8912bde2de62963323fb-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.31.1.el9_8.x86_64.rpmfaf22d4caa95d848180bdf6045dcdf69a34cfb65f5fa8912bde2de62963323fb-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.31.1.el9_8.x86_64.rpm0020a7d244705ef25da06b30d416db82a0ec12dfd8031a7fd30002067f4f99fe-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.31.1.el9_8.x86_64.rpm0020a7d244705ef25da06b30d416db82a0ec12dfd8031a7fd30002067f4f99fe-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.31.1.el9_8.x86_64.rpm287acee4e6d1728a0e8a57e044cd93178d4c17b7c3da883e854b74452c189c27-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpm16e121f4562874817034ad2703fcb15ce9f47a881b4cc31de3a4ee61187941a8-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpm16e121f4562874817034ad2703fcb15ce9f47a881b4cc31de3a4ee61187941a8-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.31.1.el9_8.x86_64.rpm1edd29a26a74f45dea84e6e3dbad625de6c955a09083329c4f63465311ef625f-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.31.1.el9_8.x86_64.rpm1edd29a26a74f45dea84e6e3dbad625de6c955a09083329c4f63465311ef625f-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.31.1.el9_8.x86_64.rpm7f9f6eb6f0adff81279be586644fa4b1741e7c17190d8e2650956a26707c6dc6-ol9_x86_64_codeready_builder
perf-5.14.0-687.31.1.el9_8.x86_64.rpm6af0cd7075da093951cff45f65a8a2314a553bb624af7991765677a32115a09b-ol9_x86_64_appstream
python3-perf-5.14.0-687.31.1.el9_8.x86_64.rpma24638da5ca41f4ccac15706045a977926692ad7bf9dda661d1fc07a077576c4-ol9_x86_64_appstream
rtla-5.14.0-687.31.1.el9_8.x86_64.rpm289a0859aa36ee2e25d3de3e1f37be9f1aad876e55f0c4d617b6e5045408d2d9-ol9_x86_64_appstream
rv-5.14.0-687.31.1.el9_8.x86_64.rpma425517f1dc423b88732b73742c35885966affc7a2daf560309262bbd30d73a1-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights