Stay Connected:

ELSA-2026-49212

ELSA-2026-49212 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-04

Description


[5.14.0-687.33.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.33.1]
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}

[5.14.0-687.32.1]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}


Related CVEs


CVE-2026-52923
CVE-2026-52993
CVE-2026-64530

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_aarch64_appstream
kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_aarch64_baseos_latest
kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_aarch64_codeready_builder
kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.33.1.el9_8.aarch64.rpm150ad945a43f4a06ec69de62adbe74e9b768c32652091daa03bc8b39e9a56753-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.33.1.el9_8.aarch64.rpm8aa6adf3227dfabe0d945d588711d52bec74a0aabb6f565f0361d873d6ae7c1d-ol9_aarch64_appstream
kernel-tools-5.14.0-687.33.1.el9_8.aarch64.rpm4c2936feb5fca5bc6ba4fd5c6655cfb0fa19b5e0b25ebcda5cb978d12305c11d-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.33.1.el9_8.aarch64.rpm4c2936feb5fca5bc6ba4fd5c6655cfb0fa19b5e0b25ebcda5cb978d12305c11d-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.33.1.el9_8.aarch64.rpmb20b1aa3ca45a445900c03e4289529392e0a32c0cc90a77838d8043af999f23f-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.33.1.el9_8.aarch64.rpmb20b1aa3ca45a445900c03e4289529392e0a32c0cc90a77838d8043af999f23f-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.33.1.el9_8.aarch64.rpm2b56e9eb7cb92c794b904efd6ed09e705a283dbff14756e4a531fd7f474f7ee3-ol9_aarch64_codeready_builder
libperf-5.14.0-687.33.1.el9_8.aarch64.rpm373ada2c68b37feb952b511e66337e9cad0fb28a38b6bb42e99fa2d80ac3e1da-ol9_aarch64_codeready_builder
perf-5.14.0-687.33.1.el9_8.aarch64.rpm55d43932503019f55b0b316cc991c5d05c348d47eb84c5d8764701e8b19e86b6-ol9_aarch64_appstream
python3-perf-5.14.0-687.33.1.el9_8.aarch64.rpmaecc6626ed70a7fac16418e413abe6a1a8656b40011adf345b3f760add595c49-ol9_aarch64_appstream
rtla-5.14.0-687.33.1.el9_8.aarch64.rpm279d1584b4af7152a84fe1a365cfc46c727a0a33ce504537ff0dec20634efbb5-ol9_aarch64_appstream
rv-5.14.0-687.33.1.el9_8.aarch64.rpm45d877edc21a293e5d8a74858986d00da3a2c3ef981bc981ede87031a1d391ba-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_x86_64_appstream
kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_x86_64_baseos_latest
kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_x86_64_codeready_builder
kernel-5.14.0-687.33.1.el9_8.src.rpmeaaa7e3164fb8235ef347963ceb0ba1694d59450f2e3cf2b4995366cb6afcc92-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.33.1.el9_8.x86_64.rpm5dac0004fc14dad0878ae88640b5fcdcdd67a7d3187413045b9905ab8bd932bd-ol9_x86_64_baseos_latest
kernel-5.14.0-687.33.1.el9_8.x86_64.rpm5dac0004fc14dad0878ae88640b5fcdcdd67a7d3187413045b9905ab8bd932bd-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.33.1.el9_8.noarch.rpm2194c1548b21cfa88b937bb7470153248dcbf2ee4d1bc32a44965fe01528e96e-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.33.1.el9_8.noarch.rpm2194c1548b21cfa88b937bb7470153248dcbf2ee4d1bc32a44965fe01528e96e-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.33.1.el9_8.x86_64.rpm029769f4909af2fe5666b15cf79fbc0a43655bc37f6d1027daf94c9d1ee5379f-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.33.1.el9_8.x86_64.rpm029769f4909af2fe5666b15cf79fbc0a43655bc37f6d1027daf94c9d1ee5379f-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.33.1.el9_8.x86_64.rpmadb71e27384b0ed5643e0c68c65791ea438984e29ff553f7115cf86f23062e0b-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.33.1.el9_8.x86_64.rpm3f0dcecaaa89dec6164d311a1c4499be40d404d5d6e23001cb5b41ed8d84f2ed-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.33.1.el9_8.x86_64.rpm3f0dcecaaa89dec6164d311a1c4499be40d404d5d6e23001cb5b41ed8d84f2ed-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.33.1.el9_8.x86_64.rpmd4f65fc477acc5819aca32c41de4c6bbd61028e4713431a2a791be4d091db61e-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.33.1.el9_8.x86_64.rpmd4f65fc477acc5819aca32c41de4c6bbd61028e4713431a2a791be4d091db61e-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.33.1.el9_8.x86_64.rpmd28446688d01051568ea198e467dd05e5312b9dd2eecb8b6c7ee5e033a88e3b8-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.33.1.el9_8.x86_64.rpm0cd024cd19cb02fb929411250f772e62a3ae88b8faedcad0b428d01245e84da0-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.33.1.el9_8.x86_64.rpm44e7c2731f6500a14a1ee6843b25740c37e8dfc5c267246b540091e3a3d6aaa8-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.33.1.el9_8.x86_64.rpm44e7c2731f6500a14a1ee6843b25740c37e8dfc5c267246b540091e3a3d6aaa8-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm6f2e1db7401ae3cac27eab02c3d2654db70ea19aa42d493991763265ab6dc4b2-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm6f2e1db7401ae3cac27eab02c3d2654db70ea19aa42d493991763265ab6dc4b2-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpmfc5094ec27ce9a299333653cae28c067fecbdfd93c5ff48887e35ed082a37721-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpmfc5094ec27ce9a299333653cae28c067fecbdfd93c5ff48887e35ed082a37721-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm4c135fe665bc3cd9f5a05fd34377bfe1e12dc0e2c8e1cc79ee3b63aa45a93679-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm4c135fe665bc3cd9f5a05fd34377bfe1e12dc0e2c8e1cc79ee3b63aa45a93679-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.33.1.el9_8.x86_64.rpmc473243791f61e6a21a37c501787036e2061bded1ea4813f34aca2b1c2f2650d-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.33.1.el9_8.x86_64.rpm73e843384c5471dc6c3b456382cbec868999a4fefff56af95b6445632bf8b426-ol9_x86_64_appstream
kernel-doc-5.14.0-687.33.1.el9_8.noarch.rpm9cd5da176abd0fcf271a592cc154030aba568eb1c85793c313d2bcf4232e2cd8-ol9_x86_64_appstream
kernel-headers-5.14.0-687.33.1.el9_8.x86_64.rpmaef3bb5781743bbc087a7148decb316d2bd595119c8df95f3f21370b8d92ac34-ol9_x86_64_appstream
kernel-modules-5.14.0-687.33.1.el9_8.x86_64.rpm230fe6be890310ed308f532a752ef6df614404e0b8daa5598231a218c3a0e357-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.33.1.el9_8.x86_64.rpm230fe6be890310ed308f532a752ef6df614404e0b8daa5598231a218c3a0e357-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm8063ec62e2416a594d947ae1f474bd661647d495e7e4a0c1aacfd278d2ca180c-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm8063ec62e2416a594d947ae1f474bd661647d495e7e4a0c1aacfd278d2ca180c-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpmefa436b23daef3756ca1097a8d6d74ef99ca09b9163c87b2402310d94c9af719-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpmefa436b23daef3756ca1097a8d6d74ef99ca09b9163c87b2402310d94c9af719-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.33.1.el9_8.x86_64.rpmea1f945fa5ea10214f269e8a0ff66ef100236f06a4740c5512f4f1c04fd39284-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.33.1.el9_8.x86_64.rpmea1f945fa5ea10214f269e8a0ff66ef100236f06a4740c5512f4f1c04fd39284-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.33.1.el9_8.x86_64.rpm3d229cb89e6d5c9670df48bdd606cf1393422f05fd23040b43751cdf3d10f824-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.33.1.el9_8.x86_64.rpm3d229cb89e6d5c9670df48bdd606cf1393422f05fd23040b43751cdf3d10f824-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.33.1.el9_8.x86_64.rpm28b8a6bd3082d26821488493bc8fd16f0c773946bfcb9aabd2856919f6436a0e-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm74ec01f9c7c2d20dcbcf4b32cdfcc5946e8dc8107a223e24f87e994c0804e549-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm74ec01f9c7c2d20dcbcf4b32cdfcc5946e8dc8107a223e24f87e994c0804e549-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.33.1.el9_8.x86_64.rpm9a193cf9e82514a4a8f3873af1097ae46bf6c5b18cdf7b1e5b7d2146fbbcbff2-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.33.1.el9_8.x86_64.rpm9a193cf9e82514a4a8f3873af1097ae46bf6c5b18cdf7b1e5b7d2146fbbcbff2-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.33.1.el9_8.x86_64.rpm13507a088495d5af39034dfe9ae43595725c143d26eaa789443a9bd877cdc0ef-ol9_x86_64_codeready_builder
perf-5.14.0-687.33.1.el9_8.x86_64.rpm416702786bce65e3a5fcb1f299f1133654aaedc78b3dddc2afac3826e9feaf4d-ol9_x86_64_appstream
python3-perf-5.14.0-687.33.1.el9_8.x86_64.rpm64d7ab7cf3bce5caf3a0afb211d07d478b20adf0c443444657ca9029dfb5a655-ol9_x86_64_appstream
rtla-5.14.0-687.33.1.el9_8.x86_64.rpm04bdb93342baeeec0eb95fbcafa1d5c32b0442d4ae4eefab329c64c45d4853db-ol9_x86_64_appstream
rv-5.14.0-687.33.1.el9_8.x86_64.rpm42e6a44106cac76653bf3f1f9ca9960cf7a348996b3e2f6cbc0b8025b0dc6fd5-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights