ELSA-2026-6570

ELSA-2026-6570 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-04-07

Description

[5.14.0-611.47.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.47.1]
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154537] {CVE-2025-38109}
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153269] {CVE-2026-23231}
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150245] {CVE-2026-23210}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149748] {CVE-2026-23111}

[5.14.0-611.46.1]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154094]
- net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-92243]

Related CVEs

CVE-2025-38109

CVE-2026-23111

CVE-2026-23210

CVE-2026-23231

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_aarch64_appstream
	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_aarch64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.47.1.el9_7.aarch64.rpm	34ecca901e27efeae86c6cd96ff008f5c8452cbf4e596dbbe919903ac3916f93	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-611.47.1.el9_7.aarch64.rpm	f88698193347af67225776d510df897b27d2939567b908ecfcde4254809aaaa1	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-611.47.1.el9_7.aarch64.rpm	878dadeda7a747143d72884b519769dcf9368da248046ccac153cfa0bc76eeff	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-611.47.1.el9_7.aarch64.rpm	878dadeda7a747143d72884b519769dcf9368da248046ccac153cfa0bc76eeff	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.47.1.el9_7.aarch64.rpm	b91d4be3115a121409dd58ff227e0f9112f0e72db3d2369ceccc07b317946215	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-611.47.1.el9_7.aarch64.rpm	b91d4be3115a121409dd58ff227e0f9112f0e72db3d2369ceccc07b317946215	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.47.1.el9_7.aarch64.rpm	2b90228a28731f409ac4d0354131395a9c5449b5ed9c074b1ca0ca510e506a99	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-611.47.1.el9_7.aarch64.rpm	29407ed75a675a07daf9f68a10e413f6e9124934c9ff2d95dff6e52c7854bc5d	-	ol9_aarch64_codeready_builder
	perf-5.14.0-611.47.1.el9_7.aarch64.rpm	0db1f479af26b4b52a5dbdaac8e92d7e4a205f1a30c457a950df4d116bc90fc2	-	ol9_aarch64_appstream
	python3-perf-5.14.0-611.47.1.el9_7.aarch64.rpm	c75461eb2e7fd096a50b8fc521639a2e380ca4074d56bf6ca382a8afda0ca07a	-	ol9_aarch64_appstream
	rtla-5.14.0-611.47.1.el9_7.aarch64.rpm	c37c068fe5b5907bbd7ec28220e9cf39076701e6c2af28ab0049c304a490c62a	-	ol9_aarch64_appstream
	rv-5.14.0-611.47.1.el9_7.aarch64.rpm	6f72343bc0a3f3879c615ef72c192e0c3f21161f5144043ef457e15a2b6a55be	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_x86_64_appstream
	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-611.47.1.el9_7.src.rpm	c7d97438667c61b1373c01898c9f3303fca91b670eabdeb5ca8d148b83be6e23	-	ol9_x86_64_u7_baseos_patch
	kernel-5.14.0-611.47.1.el9_7.x86_64.rpm	cb007a52d31ab5386c987459bbeadc0c24cd4309217fbaff3773cc00278f4862	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.47.1.el9_7.x86_64.rpm	cb007a52d31ab5386c987459bbeadc0c24cd4309217fbaff3773cc00278f4862	-	ol9_x86_64_u7_baseos_patch
	kernel-abi-stablelists-5.14.0-611.47.1.el9_7.noarch.rpm	95c182cd1428f8ad9f90b401cdff177e79d6c05b117bdf1790446e3352277447	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-611.47.1.el9_7.noarch.rpm	95c182cd1428f8ad9f90b401cdff177e79d6c05b117bdf1790446e3352277447	-	ol9_x86_64_u7_baseos_patch
	kernel-core-5.14.0-611.47.1.el9_7.x86_64.rpm	79fdb7861b4a89e05076f8612960756ffd778d29cd91caea8a57c1d70c29a135	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-611.47.1.el9_7.x86_64.rpm	79fdb7861b4a89e05076f8612960756ffd778d29cd91caea8a57c1d70c29a135	-	ol9_x86_64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.47.1.el9_7.x86_64.rpm	8dcbdc2193fcae0e53d4d198169b5b4847a5cd81b634164d10988c37e2f986f7	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-611.47.1.el9_7.x86_64.rpm	9a71e09fb345ffda4ab7aeed09636a943cec21c7ebe33f7d97d2ff157db6f717	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-611.47.1.el9_7.x86_64.rpm	9a71e09fb345ffda4ab7aeed09636a943cec21c7ebe33f7d97d2ff157db6f717	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-core-5.14.0-611.47.1.el9_7.x86_64.rpm	e6f0efebb5b03a16d381675831d76e6d22c7bd8b840609a8d44ea496b6ced70c	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-611.47.1.el9_7.x86_64.rpm	e6f0efebb5b03a16d381675831d76e6d22c7bd8b840609a8d44ea496b6ced70c	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-devel-5.14.0-611.47.1.el9_7.x86_64.rpm	afdb4b0b2aa355c5e2bb57e38faa8685e5b620acb743ece67e967319f57d7026	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-611.47.1.el9_7.x86_64.rpm	9db334d9657703801b3d1a10e85df7f7e667d7dc48c2560f8be0c2bbc0ac6cca	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-611.47.1.el9_7.x86_64.rpm	1d34325acbd3ec519b8a82a3dffda145f732b63871c202041cd9234a38f307c1	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-611.47.1.el9_7.x86_64.rpm	1d34325acbd3ec519b8a82a3dffda145f732b63871c202041cd9234a38f307c1	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm	74d5eaa8b9bd93c576619c6486b78a768c802ed31f08c7d61db94d0f6bccbc67	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm	74d5eaa8b9bd93c576619c6486b78a768c802ed31f08c7d61db94d0f6bccbc67	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm	34f1cf488ef5ad256ecbce3242be9bc856ab5c8d90bdf006ab50f20b883bf4e5	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm	34f1cf488ef5ad256ecbce3242be9bc856ab5c8d90bdf006ab50f20b883bf4e5	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-uki-virt-5.14.0-611.47.1.el9_7.x86_64.rpm	ca3b3d13d55ea199474a61bbc841a6c30792627e8764d6e4a7583b98e11af9e1	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-611.47.1.el9_7.x86_64.rpm	ca3b3d13d55ea199474a61bbc841a6c30792627e8764d6e4a7583b98e11af9e1	-	ol9_x86_64_u7_baseos_patch
	kernel-devel-5.14.0-611.47.1.el9_7.x86_64.rpm	bcab22a4f6e8e4149cc651dcc01a251ff53ed6ddfbc8373238054b994d0a5792	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-611.47.1.el9_7.x86_64.rpm	d3c66c7194afd1642f08d3d1a1e776d9ae0ece5de46fc7064a9a6a06a2cb09d6	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-611.47.1.el9_7.noarch.rpm	01313c0dff534acba693a9733a28f0da77003f306ebdb9824c11e902542a1d21	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-611.47.1.el9_7.x86_64.rpm	a2b409f63e93b222454287f48aef12d9f4cbfa5d893ddab820a18a523b67f768	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-611.47.1.el9_7.x86_64.rpm	8bfb7d49e1ebf731ff2bb348d0372348c26b7c43effee3f0b049414829e2b580	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-611.47.1.el9_7.x86_64.rpm	8bfb7d49e1ebf731ff2bb348d0372348c26b7c43effee3f0b049414829e2b580	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm	ca650b6bf6844c5156110254333ac91b142a1cb39af1cabeefe0280024f68d91	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm	ca650b6bf6844c5156110254333ac91b142a1cb39af1cabeefe0280024f68d91	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm	c038e46d6dc1ee0b347f75670188f06b694868de89f9b195846b1c8fdf411786	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm	c038e46d6dc1ee0b347f75670188f06b694868de89f9b195846b1c8fdf411786	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-5.14.0-611.47.1.el9_7.x86_64.rpm	cfb55c75b9458ba99cf28adef143a43c61c9efe315b8ced492104b8588a5dda4	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-611.47.1.el9_7.x86_64.rpm	cfb55c75b9458ba99cf28adef143a43c61c9efe315b8ced492104b8588a5dda4	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.47.1.el9_7.x86_64.rpm	78ddbdd55d51c57a6c40ed0f18c04ad02d6c731fa8dedc0c1f731ddbe1dd3f2b	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-611.47.1.el9_7.x86_64.rpm	78ddbdd55d51c57a6c40ed0f18c04ad02d6c731fa8dedc0c1f731ddbe1dd3f2b	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.47.1.el9_7.x86_64.rpm	55a9ebe5d8636e8c9715c16b77eaa2f1ec3945e08353b86743b5981cc1d69b2f	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-611.47.1.el9_7.x86_64.rpm	63ca6c4a5feb7878155856a3ac8af5aa30483e6cede6ef7adfdfeb41c5bd104f	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-611.47.1.el9_7.x86_64.rpm	63ca6c4a5feb7878155856a3ac8af5aa30483e6cede6ef7adfdfeb41c5bd104f	-	ol9_x86_64_u7_baseos_patch
	kernel-uki-virt-addons-5.14.0-611.47.1.el9_7.x86_64.rpm	561f3c9a70dee73b3a3155c9f8c224c3e893d1e2a294ce029624464fe9412f6e	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-611.47.1.el9_7.x86_64.rpm	561f3c9a70dee73b3a3155c9f8c224c3e893d1e2a294ce029624464fe9412f6e	-	ol9_x86_64_u7_baseos_patch
	libperf-5.14.0-611.47.1.el9_7.x86_64.rpm	546a11921deadbceb2dc30ac0fec5d0ef2dd074104cc5b0fe2c6b7c861bafffc	-	ol9_x86_64_codeready_builder
	perf-5.14.0-611.47.1.el9_7.x86_64.rpm	d5c1853e852f5c27f80c6bc99d5239d47adbb733956ef6a63fab81c059f3c5a0	-	ol9_x86_64_appstream
	python3-perf-5.14.0-611.47.1.el9_7.x86_64.rpm	fbee4608d802b8f97ba3ae58beef981776c62e8fa3af6d95023df21b3de59886	-	ol9_x86_64_appstream
	rtla-5.14.0-611.47.1.el9_7.x86_64.rpm	d6c3a4ceb30a37604d3601a0953e3ac889f03965e9cbad9dfb89b43295f1b289	-	ol9_x86_64_appstream
	rv-5.14.0-611.47.1.el9_7.x86_64.rpm	160222bee12a92609cd96be6cc3e2f1e9068b9eff79cb135a745209b4692f703	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team