ELSA-2026-71700
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-71700
ELSA-2026-71700 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-25 |
Description
[5.14.0-687.52.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-687.52.1]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121}
- mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938]
- smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561]
- smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561]
- smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561]
- smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561]
- smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561]
- smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561]
- smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561]
- smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561]
- smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561]
- smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561]
- smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561]
- smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561]
- smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561]
- smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561]
- smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539}
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714}
- drm/amdgpu/userq: fix access to stale wptr mapping (Jose Exposito) [RHEL-225416] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Jose Exposito) [RHEL-225416]
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964]
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964]
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jose Exposito) [RHEL-225299]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jose Exposito) [RHEL-225299]
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jose Exposito) [RHEL-225299] {CVE-2026-46230}
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jose Exposito) [RHEL-250107] {CVE-2025-40323}
- drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jose Exposito) [RHEL-225443]
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jose Exposito) [RHEL-225443] {CVE-2026-46199}
- netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912}
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_aarch64_appstream |
| kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.52.1.el9_8.aarch64.rpm | adc0972d892c1da45ca8b0d498f1673eecb2133cf8d22d4bea4d3b741e8732e3 | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-687.52.1.el9_8.aarch64.rpm | 1362c0f3712dd471aa5088f56a1582b0882ff11783ae40ed67c25574946a5554 | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-687.52.1.el9_8.aarch64.rpm | 657af648688e93136b4e642feb050c57d7022d86610e6b86d7a8772cbba378f9 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-687.52.1.el9_8.aarch64.rpm | 657af648688e93136b4e642feb050c57d7022d86610e6b86d7a8772cbba378f9 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.52.1.el9_8.aarch64.rpm | 3888edad90db2652a61a25e563788769e8f869e299d75bcf12ed48cfabf07e09 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.52.1.el9_8.aarch64.rpm | 3888edad90db2652a61a25e563788769e8f869e299d75bcf12ed48cfabf07e09 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.52.1.el9_8.aarch64.rpm | 84c404da4ab91e83ce1dcb3049a7463b2209c6ed50fa60fd88a04eaef2e0bae8 | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-687.52.1.el9_8.aarch64.rpm | 61e454c27d01b0ca7ca845b3533e8bda6eac93d393320f81bd583be424f6147b | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-687.52.1.el9_8.aarch64.rpm | cbb559e46ea0655cab1056780d2c1b7b936f17220cb19eff99eb71c0d68e63c7 | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-687.52.1.el9_8.aarch64.rpm | 7133f695bfdf0f0a852cae8b3413ad0e9be7b96187412cf6387560edc676559e | - | ol9_aarch64_appstream | |
| rtla-5.14.0-687.52.1.el9_8.aarch64.rpm | b0b50b9c60138ecdd9c8451d40d29bb94b0bdd64f9c42cf28832b41e6ae926ad | - | ol9_aarch64_appstream | |
| rv-5.14.0-687.52.1.el9_8.aarch64.rpm | 2ca95f2507f4a5948591169f8d58aaa1e60161cefb7144d8b8e69d471d4eaeca | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_x86_64_appstream |
| kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-687.52.1.el9_8.src.rpm | 0a49260d26a01863564d5b57e8927a042a6c27f541be969be2c629381f6bc901 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-5.14.0-687.52.1.el9_8.x86_64.rpm | ee19d28d49a2bdbaeeb8986fc614003cc6c4dc16e164ea25aa12c31b6bbf3bea | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.52.1.el9_8.x86_64.rpm | ee19d28d49a2bdbaeeb8986fc614003cc6c4dc16e164ea25aa12c31b6bbf3bea | - | ol9_x86_64_u8_baseos_patch | |
| kernel-abi-stablelists-5.14.0-687.52.1.el9_8.noarch.rpm | f644733f59b1353c8d4570b4f1b19251f4cfb59e45dd5d77ee7d86bee516e9ce | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-687.52.1.el9_8.noarch.rpm | f644733f59b1353c8d4570b4f1b19251f4cfb59e45dd5d77ee7d86bee516e9ce | - | ol9_x86_64_u8_baseos_patch | |
| kernel-core-5.14.0-687.52.1.el9_8.x86_64.rpm | c2066a1f92a40c39eb97b87301b4467728a7b22e2ad28cf9ce2b418b62b6dcef | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-687.52.1.el9_8.x86_64.rpm | c2066a1f92a40c39eb97b87301b4467728a7b22e2ad28cf9ce2b418b62b6dcef | - | ol9_x86_64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.52.1.el9_8.x86_64.rpm | 173bf0ec749cc1a76e524af795725ac72c6128affa18112d4a4b6f0f95335298 | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-687.52.1.el9_8.x86_64.rpm | 94222e7af13fdc24e5fe13cbe06cca2a0b60426cab0cd76d1c049136406948df | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-687.52.1.el9_8.x86_64.rpm | 94222e7af13fdc24e5fe13cbe06cca2a0b60426cab0cd76d1c049136406948df | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-core-5.14.0-687.52.1.el9_8.x86_64.rpm | f174225406d7abd6ebdace5887886f573e374b49ff74a75e84c40aafe87b1bd5 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-687.52.1.el9_8.x86_64.rpm | f174225406d7abd6ebdace5887886f573e374b49ff74a75e84c40aafe87b1bd5 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-devel-5.14.0-687.52.1.el9_8.x86_64.rpm | cb3a8076ee8f155c69b66dd1732d049f79a4cb6746a4d017769c713b24da90c3 | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-687.52.1.el9_8.x86_64.rpm | 169562935456a4905029b9527a947366094db0a262e185f4d818655d7e3f4faa | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-687.52.1.el9_8.x86_64.rpm | 08185b709c7d835b2258cc019c734a5de9ee1499b60192c681065504683fc580 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-687.52.1.el9_8.x86_64.rpm | 08185b709c7d835b2258cc019c734a5de9ee1499b60192c681065504683fc580 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm | 691b99c8b8938ea6be35db0907108836d59db797a0f1c2842c3906d3d237ed81 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm | 691b99c8b8938ea6be35db0907108836d59db797a0f1c2842c3906d3d237ed81 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm | 03667c65677e8b61264f9bc2aa93e7b2b6652bb4a300244d7264c8728e0f0791 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm | 03667c65677e8b61264f9bc2aa93e7b2b6652bb4a300244d7264c8728e0f0791 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm | 1f1980a14966491f5021c1a11831dee05bd41f29eae39335ccaf44335e2ebff6 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm | 1f1980a14966491f5021c1a11831dee05bd41f29eae39335ccaf44335e2ebff6 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-devel-5.14.0-687.52.1.el9_8.x86_64.rpm | f2071ede3927158804d060a317047f9b1c32b5889e7708640c0ec94133774f53 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-687.52.1.el9_8.x86_64.rpm | b7ee3c694e8345f277e4635f09405cac2069475cab86ac1017cd44e8106aa3e6 | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-687.52.1.el9_8.noarch.rpm | 54a34e39a0d89ea72b090985d261bda6d85e625a6614014e95f3d75d7f721bd7 | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-687.52.1.el9_8.x86_64.rpm | 2929fc1609d44d39b7577c3b3ecc02f72a67f47971c7e339fd24124e0ba3110c | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-687.52.1.el9_8.x86_64.rpm | c4cc590be7ce949363fc55bce87e9c23dedadb322aba99da531c5df99bc91858 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-687.52.1.el9_8.x86_64.rpm | c4cc590be7ce949363fc55bce87e9c23dedadb322aba99da531c5df99bc91858 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm | 148966afd1971c49da5a8174493bf7a19d3e62495e2123cfc1c36479c5479e90 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm | 148966afd1971c49da5a8174493bf7a19d3e62495e2123cfc1c36479c5479e90 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm | ef222efe6dde5be425f17eb74fe18a96cdfa82cb4aee5e8edc68cff952ecd4cd | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm | ef222efe6dde5be425f17eb74fe18a96cdfa82cb4aee5e8edc68cff952ecd4cd | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-5.14.0-687.52.1.el9_8.x86_64.rpm | 615d7087820ef0ac166b9c346d3b06738e5db1830072e25d3d7ffde0e2265fd9 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-687.52.1.el9_8.x86_64.rpm | 615d7087820ef0ac166b9c346d3b06738e5db1830072e25d3d7ffde0e2265fd9 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.52.1.el9_8.x86_64.rpm | f9c093ec56cbc718d518cbfc09bf9d8de42e46456f95c0f67ba99894f02e7012 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.52.1.el9_8.x86_64.rpm | f9c093ec56cbc718d518cbfc09bf9d8de42e46456f95c0f67ba99894f02e7012 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.52.1.el9_8.x86_64.rpm | d790ac28bc7ab5b4a36726aa69a44efbfc035d5328ab5e71b867c96da54a1b56 | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm | e0568ad96e642cc7d6d42ab0ca1290dedd0147a6c1827e0570f8d3afc22cb659 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm | e0568ad96e642cc7d6d42ab0ca1290dedd0147a6c1827e0570f8d3afc22cb659 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-687.52.1.el9_8.x86_64.rpm | 7c062985cfe769f178ffdd827d7f66fe966a515df96decc9a27b82126ecb178a | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-687.52.1.el9_8.x86_64.rpm | 7c062985cfe769f178ffdd827d7f66fe966a515df96decc9a27b82126ecb178a | - | ol9_x86_64_u8_baseos_patch | |
| libperf-5.14.0-687.52.1.el9_8.x86_64.rpm | 0357543b7eeff1a709c28c4787b8287f9d7e9240db10d6719cb5aca95db24397 | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-687.52.1.el9_8.x86_64.rpm | 0507bc9e3fbd3deac5bfad35a789f94dd124c1bd3090f33a977d4917fdc86a13 | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-687.52.1.el9_8.x86_64.rpm | 2253440cfe28610b91f18489e6affcd236e1726f9fd5394d159dfe9a2279e987 | - | ol9_x86_64_appstream | |
| rtla-5.14.0-687.52.1.el9_8.x86_64.rpm | c82f02419d4ae946b3b44386cdbede57f4120680358749917bfa6fdd437a8555 | - | ol9_x86_64_appstream | |
| rv-5.14.0-687.52.1.el9_8.x86_64.rpm | dc543462bd909c95dc80a6d81de4c9ea28dfd4e00a58c355636af944bf46991b | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
