ELSA-2026-64808-0

ELSA-2026-64808-0 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-10

Description

[5.14.0-687.45.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.45.1]
- KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287}
- nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136}
- io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384}
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320}
- can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004}
- can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004}
- can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004}
- can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004}
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000}

Related CVEs

CVE-2025-38004

CVE-2026-52933

CVE-2026-53000

CVE-2026-64136

CVE-2026-64287

CVE-2026-64319

CVE-2026-64320

CVE-2026-64384

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_aarch64_appstream
	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_aarch64_u8_baseos_patch
	kernel-cross-headers-5.14.0-687.45.1.el9_8.aarch64.rpm	01ab3c6baae27c03b49638822a203ebba4d0767035662feee380de7ad2c6953d	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-687.45.1.el9_8.aarch64.rpm	8485fb3634cee319bf5edb380d37d886bf0ba4fcc5cd2364245f859202d82acd	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-687.45.1.el9_8.aarch64.rpm	ccd05f00e07f63c66154edab47f3083ba0cd6a4b52aa39718a59bf7b160f07b3	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-687.45.1.el9_8.aarch64.rpm	ccd05f00e07f63c66154edab47f3083ba0cd6a4b52aa39718a59bf7b160f07b3	-	ol9_aarch64_u8_baseos_patch
	kernel-tools-libs-5.14.0-687.45.1.el9_8.aarch64.rpm	92f0574622f61109fcc59fb31e7d36d3f7ba0d3b2b3f67db4301946aeb93e0ca	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-687.45.1.el9_8.aarch64.rpm	92f0574622f61109fcc59fb31e7d36d3f7ba0d3b2b3f67db4301946aeb93e0ca	-	ol9_aarch64_u8_baseos_patch
	kernel-tools-libs-devel-5.14.0-687.45.1.el9_8.aarch64.rpm	1d65aaf202a139519aba754ec7c811a757e490ace8eec28e2a194d803f561bc2	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-687.45.1.el9_8.aarch64.rpm	7e47d6fe569417183e3d706254e9e4578c3b298ce75282ac113cf7ca3d446e8f	-	ol9_aarch64_codeready_builder
	perf-5.14.0-687.45.1.el9_8.aarch64.rpm	0fb8f05fe12b50fdd7bffa6b3033b770b6ed319441290338a7d3ff8c09b2eca6	-	ol9_aarch64_appstream
	python3-perf-5.14.0-687.45.1.el9_8.aarch64.rpm	8adfc743f4704e1c0943a29921ee9b11e6fe9118a5ed7bb98a63b3e2beb70631	-	ol9_aarch64_appstream
	rtla-5.14.0-687.45.1.el9_8.aarch64.rpm	da53530cc558d4f9f3fbf60067ff50927dca6769f67f40792cafe915e3951854	-	ol9_aarch64_appstream
	rv-5.14.0-687.45.1.el9_8.aarch64.rpm	a62e17b999581c9b3557628a0bd2955cf5f6b4d95928dd0b44772ad3112b7560	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_x86_64_appstream
	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-687.45.1.el9_8.src.rpm	5fadbb097e441c4a97d55615ff452004f896e6135135188527cb92aa0da36b32	-	ol9_x86_64_u8_baseos_patch
	kernel-5.14.0-687.45.1.el9_8.x86_64.rpm	b6e5561a00592de9b43da777f3e0bf6edc3c63ad0f9ab1ed416553a4422d0be4	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-687.45.1.el9_8.x86_64.rpm	b6e5561a00592de9b43da777f3e0bf6edc3c63ad0f9ab1ed416553a4422d0be4	-	ol9_x86_64_u8_baseos_patch
	kernel-abi-stablelists-5.14.0-687.45.1.el9_8.noarch.rpm	9ac7c4f1b8f55b2089aae60da6d629d25575cd005fbb59deed7e8e61efcb19c1	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-687.45.1.el9_8.noarch.rpm	9ac7c4f1b8f55b2089aae60da6d629d25575cd005fbb59deed7e8e61efcb19c1	-	ol9_x86_64_u8_baseos_patch
	kernel-core-5.14.0-687.45.1.el9_8.x86_64.rpm	a9bd6b90ad5893affb13ea535bedcead1ff41dc327965baf36440220c4d8bbbe	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-687.45.1.el9_8.x86_64.rpm	a9bd6b90ad5893affb13ea535bedcead1ff41dc327965baf36440220c4d8bbbe	-	ol9_x86_64_u8_baseos_patch
	kernel-cross-headers-5.14.0-687.45.1.el9_8.x86_64.rpm	60cb54df5af604b343b2fe92981a6f2ec3b1113c2eb94d7815c97486c30b6c26	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-687.45.1.el9_8.x86_64.rpm	b8e2f8233d8f5cfdbdc3cd3486c93d36a1b2fb7afeed7bede36f8cab00a78571	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-687.45.1.el9_8.x86_64.rpm	b8e2f8233d8f5cfdbdc3cd3486c93d36a1b2fb7afeed7bede36f8cab00a78571	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-core-5.14.0-687.45.1.el9_8.x86_64.rpm	2799c69c0286f23fc424f57e5228a40b47e6a2d3e3e778d9d8731eff0f911609	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-687.45.1.el9_8.x86_64.rpm	2799c69c0286f23fc424f57e5228a40b47e6a2d3e3e778d9d8731eff0f911609	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-devel-5.14.0-687.45.1.el9_8.x86_64.rpm	6789da0a200b9ccc8a8eacdbc98a46db08a09dfb89c15ca23fa59032d889e93c	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-687.45.1.el9_8.x86_64.rpm	a0435784ccdf7b7253e8fd752b24009c55ff13432bc79f1b0a5646ca1a7b0565	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-687.45.1.el9_8.x86_64.rpm	b59a219f5441d9f7b4b43fa3aebcca1d9f59f19c1ba0f5de3a1bdd0736dde4b0	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-687.45.1.el9_8.x86_64.rpm	b59a219f5441d9f7b4b43fa3aebcca1d9f59f19c1ba0f5de3a1bdd0736dde4b0	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm	cddd10c49fd352db54fd5589c4d63b603ff582f4af594e700502a0d7645f5a90	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm	cddd10c49fd352db54fd5589c4d63b603ff582f4af594e700502a0d7645f5a90	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm	a9854190f0bfb245d12b1fc8d605340edeb16e1b1d59f692ea043264ced43cd9	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm	a9854190f0bfb245d12b1fc8d605340edeb16e1b1d59f692ea043264ced43cd9	-	ol9_x86_64_u8_baseos_patch
	kernel-debug-uki-virt-5.14.0-687.45.1.el9_8.x86_64.rpm	071a5bd5bfef79e3648637bd3e119e0826ac1d2d37d4d0ef7570b501737fc671	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-687.45.1.el9_8.x86_64.rpm	071a5bd5bfef79e3648637bd3e119e0826ac1d2d37d4d0ef7570b501737fc671	-	ol9_x86_64_u8_baseos_patch
	kernel-devel-5.14.0-687.45.1.el9_8.x86_64.rpm	84a28799ddba21aaa100c72d7de38fbcff112024431cebc45ca37c143cd1bfed	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-687.45.1.el9_8.x86_64.rpm	017be883448ea0daa8059e26ead15c631288d4172de4aeaac3b9c50ec838298f	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-687.45.1.el9_8.noarch.rpm	7409ff38ebc80431be671ee768b55b9464740d17be44e1d132b1645eba00b72e	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-687.45.1.el9_8.x86_64.rpm	8371e0dc47fff78226a55204d7877e1b8adbc3c6f71f2082ae1aeb0fcd07fb36	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-687.45.1.el9_8.x86_64.rpm	2a4f87db8085f41242190581951c6d690dd4d9ab2ae3b9ba8dc8a999e7cbf837	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-687.45.1.el9_8.x86_64.rpm	2a4f87db8085f41242190581951c6d690dd4d9ab2ae3b9ba8dc8a999e7cbf837	-	ol9_x86_64_u8_baseos_patch
	kernel-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm	34fae5524f79c73957ffe869e80bd8c637f19511fb19c202ac9d73947dbffcdc	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm	34fae5524f79c73957ffe869e80bd8c637f19511fb19c202ac9d73947dbffcdc	-	ol9_x86_64_u8_baseos_patch
	kernel-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm	d5120db09bcf6be0edeba17a781f3303083c282b0e278d40a95d10675dc1129e	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm	d5120db09bcf6be0edeba17a781f3303083c282b0e278d40a95d10675dc1129e	-	ol9_x86_64_u8_baseos_patch
	kernel-tools-5.14.0-687.45.1.el9_8.x86_64.rpm	165760081dd0f77ef43853bf804048204d24ff8018341bfc747f56a25ba84709	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-687.45.1.el9_8.x86_64.rpm	165760081dd0f77ef43853bf804048204d24ff8018341bfc747f56a25ba84709	-	ol9_x86_64_u8_baseos_patch
	kernel-tools-libs-5.14.0-687.45.1.el9_8.x86_64.rpm	ddb30025eaa08c4fef39653a0e4dc10bd2cb6d34277fcad4aecc9ca286cae43c	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-687.45.1.el9_8.x86_64.rpm	ddb30025eaa08c4fef39653a0e4dc10bd2cb6d34277fcad4aecc9ca286cae43c	-	ol9_x86_64_u8_baseos_patch
	kernel-tools-libs-devel-5.14.0-687.45.1.el9_8.x86_64.rpm	bc2b62e0804c68c4d6822a72701d4076bd1080d7f9d59a8e953dbe4dbf3da6b0	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-687.45.1.el9_8.x86_64.rpm	e49ef23f339d77fc35599ff0bee83877f9685be9f247f13a011a3f04717db9b8	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-687.45.1.el9_8.x86_64.rpm	e49ef23f339d77fc35599ff0bee83877f9685be9f247f13a011a3f04717db9b8	-	ol9_x86_64_u8_baseos_patch
	kernel-uki-virt-addons-5.14.0-687.45.1.el9_8.x86_64.rpm	916e00762a5dff511d62a69cbbf60853f10a03b5c8832efa5babfbd795f9c17f	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-687.45.1.el9_8.x86_64.rpm	916e00762a5dff511d62a69cbbf60853f10a03b5c8832efa5babfbd795f9c17f	-	ol9_x86_64_u8_baseos_patch
	libperf-5.14.0-687.45.1.el9_8.x86_64.rpm	97917963dcd418c05029ff7de8e0dfd397965f41fc721a2aa3712b9eac2ebaad	-	ol9_x86_64_codeready_builder
	perf-5.14.0-687.45.1.el9_8.x86_64.rpm	88c81b5ee31334c0d5537110b189a8e2b7f65c0b10c5e6909bc57d863fb23761	-	ol9_x86_64_appstream
	python3-perf-5.14.0-687.45.1.el9_8.x86_64.rpm	2d0951197182b604a8061e7482c8df39b24ea02fba7babc6232c6a74a9f6f0f0	-	ol9_x86_64_appstream
	rtla-5.14.0-687.45.1.el9_8.x86_64.rpm	6ab484f7062c41fd709e2b66aca8ac8a4e192f07e22755a13e1811ff1b6e88d1	-	ol9_x86_64_appstream
	rv-5.14.0-687.45.1.el9_8.x86_64.rpm	49a38f8a9b51b184f8236854bfcd12c7ade0bd998c9b2e068f87611a2d6d5383	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team