ELSA-2026-66180-0
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-66180-0
ELSA-2026-66180-0 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-10 |
Description
[5.14.0-687.46.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-687.46.1]
- tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015}
- flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266}
- ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126]
- ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275}
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339}
- ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891]
- ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366}
- inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891]
- net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891]
- net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223}
- rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563}
- net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480}
- nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129}
- Revert 'net/smc: Introduce TCP ULP support' (Jan Polensky) [RHEL-227559] {CVE-2026-46330}
- smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493}
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149}
- netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002}
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133}
- mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161]
- mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161]
- mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161]
- mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161]
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_aarch64_appstream |
| kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.46.1.el9_8.aarch64.rpm | 1ee340f5c2e82d9f4a2141b76e892c23cde04232a501731223540bbce7c0a17b | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-687.46.1.el9_8.aarch64.rpm | 3447cac4aa0963d3b24b24c24011ab3d9ccb69937706142a345794486e1fb4a9 | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-687.46.1.el9_8.aarch64.rpm | 1591d0b35df53b6889a1e38e0891030fbd95d1ab66a9395a9a571eac76e6d4ee | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-687.46.1.el9_8.aarch64.rpm | 1591d0b35df53b6889a1e38e0891030fbd95d1ab66a9395a9a571eac76e6d4ee | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.46.1.el9_8.aarch64.rpm | a863960790e0a25963d87833b44f021b9053b1bb0060222e86f8b8d4818cafd4 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.46.1.el9_8.aarch64.rpm | a863960790e0a25963d87833b44f021b9053b1bb0060222e86f8b8d4818cafd4 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.46.1.el9_8.aarch64.rpm | 81f1a897ae0861c971eac86d825a4305d640ba09b01cd1d2fd7601fffcfa9f92 | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-687.46.1.el9_8.aarch64.rpm | 2ee6d436f3cfa9c15d21826e3fb2bfb94fe27503b309a408195adf835d24a847 | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-687.46.1.el9_8.aarch64.rpm | 584c80e7a2291c8d55d9849e07842ca60d0319c0c4d67dc0ae510f12ed726826 | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-687.46.1.el9_8.aarch64.rpm | 66d6b963847734568b1f4eec26c7f951fd8cc70b3dccae4df69c247748168438 | - | ol9_aarch64_appstream | |
| rtla-5.14.0-687.46.1.el9_8.aarch64.rpm | b309655cf7e6e96e251f00a1d1d24e96032e73cb98e0cd8d8078a0e97cdd5690 | - | ol9_aarch64_appstream | |
| rv-5.14.0-687.46.1.el9_8.aarch64.rpm | 764ffa0fae2a6e4b56a5568736f57ab1a797fc1ff3696c9de92376c466490dd9 | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_x86_64_appstream |
| kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-687.46.1.el9_8.src.rpm | 3c7cbc3ce7fc2b5f5dc9c9821afd95cca4578915eadaba722529f9b05eed4713 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-5.14.0-687.46.1.el9_8.x86_64.rpm | 200dca349ea1f1bd87398b0f9be68d388d7ccf7731e214d88fe87d18053b5f7d | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.46.1.el9_8.x86_64.rpm | 200dca349ea1f1bd87398b0f9be68d388d7ccf7731e214d88fe87d18053b5f7d | - | ol9_x86_64_u8_baseos_patch | |
| kernel-abi-stablelists-5.14.0-687.46.1.el9_8.noarch.rpm | 89148921b8618f9f95710496fce7eb8f1ff455265f6a5de7ced57c10c2e7931c | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-687.46.1.el9_8.noarch.rpm | 89148921b8618f9f95710496fce7eb8f1ff455265f6a5de7ced57c10c2e7931c | - | ol9_x86_64_u8_baseos_patch | |
| kernel-core-5.14.0-687.46.1.el9_8.x86_64.rpm | db0c48e9bbccc229c83442aee0cfa1ca10bf14bd677f81271791311dd8e5ec67 | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-687.46.1.el9_8.x86_64.rpm | db0c48e9bbccc229c83442aee0cfa1ca10bf14bd677f81271791311dd8e5ec67 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.46.1.el9_8.x86_64.rpm | 7dc97142efc9388bca8e6e15bef15e635503de89916ec52655357d860cddd111 | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-687.46.1.el9_8.x86_64.rpm | 982a14e19bf2d43910980b3d35b02d31697cf22d85cebce97cbed7cfb83c3665 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-687.46.1.el9_8.x86_64.rpm | 982a14e19bf2d43910980b3d35b02d31697cf22d85cebce97cbed7cfb83c3665 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-core-5.14.0-687.46.1.el9_8.x86_64.rpm | 1dbfedfdb4deb732c2227e962301ad751e5d181d58676e5cea369b47eb1c829f | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-687.46.1.el9_8.x86_64.rpm | 1dbfedfdb4deb732c2227e962301ad751e5d181d58676e5cea369b47eb1c829f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-devel-5.14.0-687.46.1.el9_8.x86_64.rpm | c8c68214f2914ddbdef8ddc8626895c1170acac43f783e9a10bae7fc5b5f0964 | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-687.46.1.el9_8.x86_64.rpm | 2a48f8fb247b5084c1fc0a10738d69c42c99fdf23dfa34600439339b7182f431 | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-687.46.1.el9_8.x86_64.rpm | 7b85f26bbbf43627207caa3c239d2de88d23376d225eaa551529cc307505e0b3 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-687.46.1.el9_8.x86_64.rpm | 7b85f26bbbf43627207caa3c239d2de88d23376d225eaa551529cc307505e0b3 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm | 6f20f13613377c5f68df7cfdc326dadfaa2c0f0990de87f2b7249f14e4793b28 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm | 6f20f13613377c5f68df7cfdc326dadfaa2c0f0990de87f2b7249f14e4793b28 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm | 30524c1b5ccf94e6df008dd00f07c064ea3cb9ee9a062b9a8b0e167d23987f70 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm | 30524c1b5ccf94e6df008dd00f07c064ea3cb9ee9a062b9a8b0e167d23987f70 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-687.46.1.el9_8.x86_64.rpm | 633add45a3c94f0115fe30fd6e34f1a71631d769facfdbc71a5f7d38e58196ec | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-687.46.1.el9_8.x86_64.rpm | 633add45a3c94f0115fe30fd6e34f1a71631d769facfdbc71a5f7d38e58196ec | - | ol9_x86_64_u8_baseos_patch | |
| kernel-devel-5.14.0-687.46.1.el9_8.x86_64.rpm | f5357ff69b121c848b9fe14e66ed466c8a939278459dd43a1d7d9de27a3c4c37 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-687.46.1.el9_8.x86_64.rpm | a835fbee373205587d062225dcac45020f0ae6c41888a290a05e5a72ad495ce6 | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-687.46.1.el9_8.noarch.rpm | 864fd7ab1047f28ca4db9d93968b1591ed2f5fc0ef4fc633660023b1d805d448 | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-687.46.1.el9_8.x86_64.rpm | 9b95ba83a5eaddf36eedf7200518a899d4d4b92cb48c44aa3abb8bafb61fa429 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-687.46.1.el9_8.x86_64.rpm | fa4730497e476b7929a69b60a7d07c2d9471815e9e843d605d199104bc13ca5f | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-687.46.1.el9_8.x86_64.rpm | fa4730497e476b7929a69b60a7d07c2d9471815e9e843d605d199104bc13ca5f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm | 7bcf50aecd86eba498f8641e9ba712a9e36dd3c96c40896fdbc81345c9dcf788 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm | 7bcf50aecd86eba498f8641e9ba712a9e36dd3c96c40896fdbc81345c9dcf788 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm | 144b7606ffba06ffd84cfa40e3aa2226711e30c337cb4c5a2785785af4aa02eb | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm | 144b7606ffba06ffd84cfa40e3aa2226711e30c337cb4c5a2785785af4aa02eb | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-5.14.0-687.46.1.el9_8.x86_64.rpm | e2b84712e436f7ffd680391605bcb20121e3bdffc9e494853ca2579cc7df4d1e | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-687.46.1.el9_8.x86_64.rpm | e2b84712e436f7ffd680391605bcb20121e3bdffc9e494853ca2579cc7df4d1e | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.46.1.el9_8.x86_64.rpm | ed66a382b72d41c89a429d5db838cbec4fb28c2aa2c808811a439ce4fc2614cd | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.46.1.el9_8.x86_64.rpm | ed66a382b72d41c89a429d5db838cbec4fb28c2aa2c808811a439ce4fc2614cd | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.46.1.el9_8.x86_64.rpm | 5225e736ca559624b28cda5a467d50d978324785a36fe821018ed8d68869eb1e | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-687.46.1.el9_8.x86_64.rpm | 4e2c6bd68fdfc5fd493d0e94021d11d4d5139f2164f0c474f54916c67739c79f | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-687.46.1.el9_8.x86_64.rpm | 4e2c6bd68fdfc5fd493d0e94021d11d4d5139f2164f0c474f54916c67739c79f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-687.46.1.el9_8.x86_64.rpm | 0e4e003c4b343d6e0700e7d42f21e63a74ebd846bb5e910089bc0bce930836c7 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-687.46.1.el9_8.x86_64.rpm | 0e4e003c4b343d6e0700e7d42f21e63a74ebd846bb5e910089bc0bce930836c7 | - | ol9_x86_64_u8_baseos_patch | |
| libperf-5.14.0-687.46.1.el9_8.x86_64.rpm | b7eadf12dbc8bdeca2b6b246af2d42436f8b9d414d7a1d99565b83fbb7ee847e | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-687.46.1.el9_8.x86_64.rpm | 7661b11dd390728f0e97f378daf4ebffd33e62d7598804fb1bf35d874371edd3 | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-687.46.1.el9_8.x86_64.rpm | 83586f901ea51ef2d6142f56a26ea7c5dfadb53e3c36ee990f1312de93350aaa | - | ol9_x86_64_appstream | |
| rtla-5.14.0-687.46.1.el9_8.x86_64.rpm | 67530eb0383055ad597bfcd2939ff1f5a63e7b74c1b7d75f1033594831ccdca8 | - | ol9_x86_64_appstream | |
| rv-5.14.0-687.46.1.el9_8.x86_64.rpm | 170204d2c601974df42f8e528b868a66c1ff84b7e3fcaf4c2810b418885b259f | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
