Stay Connected:

ELSA-2026-53329

ELSA-2026-53329 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-11

Description


[5.14.0-687.38.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.38.1]
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}

[5.14.0-687.37.1]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}


Related CVEs


CVE-2025-54518
CVE-2026-31530
CVE-2026-64368
CVE-2026-64531

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_aarch64_appstream
kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_aarch64_baseos_latest
kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_aarch64_codeready_builder
kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.38.1.el9_8.aarch64.rpma06440ec6dfb8f6c70adba633f7e8e34bb0c6c45d6a572022d6d678dad4dc25f-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.38.1.el9_8.aarch64.rpmcb3c5e5444e97fc2b1a34c8755bb1407fcf687a4fd4841801a805c57d51d4ad4-ol9_aarch64_appstream
kernel-tools-5.14.0-687.38.1.el9_8.aarch64.rpm3decd511b1edf6c78a8df89ad5cefc777453dd5afacf24e48efc9501d6d5c721-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.38.1.el9_8.aarch64.rpm3decd511b1edf6c78a8df89ad5cefc777453dd5afacf24e48efc9501d6d5c721-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.38.1.el9_8.aarch64.rpm97896a3639b1a867cd5ee2ae281bccefd2c027e71a2c56186a1c8d545bdd6342-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.38.1.el9_8.aarch64.rpm97896a3639b1a867cd5ee2ae281bccefd2c027e71a2c56186a1c8d545bdd6342-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.38.1.el9_8.aarch64.rpm52e5405708ef59d84b220dc8720b32920ff268e845562a39aa1c341882342881-ol9_aarch64_codeready_builder
libperf-5.14.0-687.38.1.el9_8.aarch64.rpm488138b4cf62c919d2ef3e3e273106a90e0ad1e00e41049eee270023f65c80f3-ol9_aarch64_codeready_builder
perf-5.14.0-687.38.1.el9_8.aarch64.rpm5b76bd63c7ffea2eba77e41085c1895256f7ea6f97d664b27989b7d19ac2e6e1-ol9_aarch64_appstream
python3-perf-5.14.0-687.38.1.el9_8.aarch64.rpmc8ff54953d562a563dbf1c62cc7fb98af5972b08abed324b0a994e9eff220abb-ol9_aarch64_appstream
rtla-5.14.0-687.38.1.el9_8.aarch64.rpm8d19701deedd91ec14a3c847fd2ac05b1041565e3a4edae03f3523ce3dd16c66-ol9_aarch64_appstream
rv-5.14.0-687.38.1.el9_8.aarch64.rpmc3381b8332d80c67eec247d9ea9503e5dd6eece5133cd6f9e57959f165a599a0-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_x86_64_appstream
kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_x86_64_baseos_latest
kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_x86_64_codeready_builder
kernel-5.14.0-687.38.1.el9_8.src.rpm0c0aad3536cb6a1e05e68038d1f331fabc97560110f6873c9fc414d242b10e98-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.38.1.el9_8.x86_64.rpm303f0c93d8d5b715b7ce8b85572262e974e86c8a4386208a03369c5e96b2695b-ol9_x86_64_baseos_latest
kernel-5.14.0-687.38.1.el9_8.x86_64.rpm303f0c93d8d5b715b7ce8b85572262e974e86c8a4386208a03369c5e96b2695b-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.38.1.el9_8.noarch.rpm120d3537f8ecf0d732f68bb3445fe4d2b0d812d0b6c06f6f28da6cbca9ffa962-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.38.1.el9_8.noarch.rpm120d3537f8ecf0d732f68bb3445fe4d2b0d812d0b6c06f6f28da6cbca9ffa962-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.38.1.el9_8.x86_64.rpma1beb9172b304b690241a8a382facec2267adda110d6ce16a36c841a8cc053de-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.38.1.el9_8.x86_64.rpma1beb9172b304b690241a8a382facec2267adda110d6ce16a36c841a8cc053de-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.38.1.el9_8.x86_64.rpma3f30ddfaa70e77974931892828e0d3c9035b47c5495725151779a2c4e32da9a-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.38.1.el9_8.x86_64.rpmd0c0b7afba1521e9d9b4818221f5a51d435d43d5c0689350539851a8f8fb600b-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.38.1.el9_8.x86_64.rpmd0c0b7afba1521e9d9b4818221f5a51d435d43d5c0689350539851a8f8fb600b-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.38.1.el9_8.x86_64.rpmecdaa74a1c4d27a7952ddee08aa02a14739c1efbb58be3f607804a7eec1231f5-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.38.1.el9_8.x86_64.rpmecdaa74a1c4d27a7952ddee08aa02a14739c1efbb58be3f607804a7eec1231f5-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.38.1.el9_8.x86_64.rpm282c7cb6fbeea41d97e8722107eb5c3d0af6b1b5083945aa1eadc54bcb4d36f2-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.38.1.el9_8.x86_64.rpma4ff61dd3ea99500b58d0aef69cdf8e7ef63b2094883ef5a993e11603d560f92-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.38.1.el9_8.x86_64.rpmc754605fdffa2b594fe9a9f861f060ad6522c8be918d1a515c8bddf897fa5bc5-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.38.1.el9_8.x86_64.rpmc754605fdffa2b594fe9a9f861f060ad6522c8be918d1a515c8bddf897fa5bc5-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm35b9777a9bf44105a9071be6c6334b99b395e9e102ec4d8796d8992cd793526c-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm35b9777a9bf44105a9071be6c6334b99b395e9e102ec4d8796d8992cd793526c-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm624fd2a56c8ec0c0b948f87e8a3e8328b28362cbe522e061784ad0bc7d1debef-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm624fd2a56c8ec0c0b948f87e8a3e8328b28362cbe522e061784ad0bc7d1debef-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm529c9742f0cd53e896c1d7eddabeb0fd1da92d39820ff841e0f0b795c738ca3b-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm529c9742f0cd53e896c1d7eddabeb0fd1da92d39820ff841e0f0b795c738ca3b-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.38.1.el9_8.x86_64.rpmfba0ecbcc7576270ac7985bfe5ec27d9228793cf4b2c7b47ac85e9ddea3819cc-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.38.1.el9_8.x86_64.rpma46dac4c5712df6269370d7a232b1ef017cbe0f6cb2d789661147babf621c089-ol9_x86_64_appstream
kernel-doc-5.14.0-687.38.1.el9_8.noarch.rpm90dfedc7d4223f0be4fc22acaf3c0c005553742f562ef09908571f8d0f02233d-ol9_x86_64_appstream
kernel-headers-5.14.0-687.38.1.el9_8.x86_64.rpm747eef7b7233030b005b457c817a7728c16bc6f5417be664aa0250e8aae76785-ol9_x86_64_appstream
kernel-modules-5.14.0-687.38.1.el9_8.x86_64.rpm810557cde86ccf434114d01eab5c477593ced4260c4fd2c0fe66293d6126225e-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.38.1.el9_8.x86_64.rpm810557cde86ccf434114d01eab5c477593ced4260c4fd2c0fe66293d6126225e-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm72e1a24494c31b4cad16ebae2eca614faa8fc1218641e9ea83e1d6519b5e4d29-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm72e1a24494c31b4cad16ebae2eca614faa8fc1218641e9ea83e1d6519b5e4d29-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm98f36aa7d57c7017c4ecb5a37508386d3fae877478d5c59eafe6944bf5758f75-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm98f36aa7d57c7017c4ecb5a37508386d3fae877478d5c59eafe6944bf5758f75-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.38.1.el9_8.x86_64.rpm4c803c7f44bf808d8f337aa76485990c90f901789ad7849470e5dcfd07bbfe8d-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.38.1.el9_8.x86_64.rpm4c803c7f44bf808d8f337aa76485990c90f901789ad7849470e5dcfd07bbfe8d-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.38.1.el9_8.x86_64.rpmbbd0504df75987d414eea2dbd1b990bdbb7f9a3077dc46db2a7c8758d805b805-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.38.1.el9_8.x86_64.rpmbbd0504df75987d414eea2dbd1b990bdbb7f9a3077dc46db2a7c8758d805b805-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.38.1.el9_8.x86_64.rpm4c5618274dc10f990a4daaf8b641892e6bdb8c0cd25af7a378624c359002e87e-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm542e6b210ec9e76e960bb54416e28a7a26cdbb2e241c0eeefd1263b44cb5c919-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm542e6b210ec9e76e960bb54416e28a7a26cdbb2e241c0eeefd1263b44cb5c919-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.38.1.el9_8.x86_64.rpm140b5196a8d581e49b02ca517b9381c5100fc78828cd9f152bec96f6d1758c64-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.38.1.el9_8.x86_64.rpm140b5196a8d581e49b02ca517b9381c5100fc78828cd9f152bec96f6d1758c64-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.38.1.el9_8.x86_64.rpmb65f285c95acca7e4f8203d4ef9022a31434c3b629902e0084a4fde41bbfda8d-ol9_x86_64_codeready_builder
perf-5.14.0-687.38.1.el9_8.x86_64.rpm8d7d9f3b154b77d5bcef2d1ec1fb9c445fad5d0a22ae136223a040dd5894138f-ol9_x86_64_appstream
python3-perf-5.14.0-687.38.1.el9_8.x86_64.rpma473086c1dc8b3fb8960b440380396b15782abfbdaa5b9017f42005925a6623f-ol9_x86_64_appstream
rtla-5.14.0-687.38.1.el9_8.x86_64.rpma794991ce583ea2b29812f335da189d4d6c3a13cd0cf25d23d1b550d6b5fe4ce-ol9_x86_64_appstream
rv-5.14.0-687.38.1.el9_8.x86_64.rpm601c525f569a3ce9bce94996a2224374ba83b7230d66a85a34adf91cc439c0c7-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights