Stay Connected:

ELSA-2026-72623

ELSA-2026-72623 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-29

Description


[5.14.0-687.53.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.53.1]
- arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875}
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556}
- ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942}
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972}
- fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437]
- crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522}
- RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325}
- RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788]
- RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788]
- Revert 'RDMA/rxe: RHEL-only revert for page size vars in rxe' (Kamal Heib) [RHEL-230788]
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656]
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563]
- rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998}


Related CVEs


CVE-2026-45942
CVE-2026-46325
CVE-2026-52972
CVE-2026-53341
CVE-2026-63875
CVE-2026-64102
CVE-2026-64556
CVE-2026-74753
CVE-2026-80522

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_aarch64_appstream
kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_aarch64_baseos_latest
kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_aarch64_codeready_builder
kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.53.1.el9_8.aarch64.rpm6f471a79ac3ea3cc6934c1306a9b778d395d8d5f4a89bcdd5d32b31c9f0a38eb-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.53.1.el9_8.aarch64.rpma1ed75391a4ea24a27e53e04f9a71e9b11792e4687f75d9365e69750b580be71-ol9_aarch64_appstream
kernel-tools-5.14.0-687.53.1.el9_8.aarch64.rpm84cc25fdd0e302a0a5ff6682e54ba67b09e8942f5c330e10e12248ed4f73c9ce-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.53.1.el9_8.aarch64.rpm84cc25fdd0e302a0a5ff6682e54ba67b09e8942f5c330e10e12248ed4f73c9ce-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.53.1.el9_8.aarch64.rpme5040e0eea11120408447144e492a68b397b9eb4cb2ba39509d34f352bc56ecb-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.53.1.el9_8.aarch64.rpme5040e0eea11120408447144e492a68b397b9eb4cb2ba39509d34f352bc56ecb-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.53.1.el9_8.aarch64.rpm9cb816217064671ac4bbb1a94d8888184dd39d08e3787729cc3c07d0d3d15522-ol9_aarch64_codeready_builder
libperf-5.14.0-687.53.1.el9_8.aarch64.rpm20b7f588808d98c475f89fd6b0c6654e03c04343d0c198df7228e2723715c078-ol9_aarch64_codeready_builder
perf-5.14.0-687.53.1.el9_8.aarch64.rpm936b7da496a758a9d908d2d2577c5544ee525d7b2c76a129ae89633ea4e18913-ol9_aarch64_appstream
python3-perf-5.14.0-687.53.1.el9_8.aarch64.rpm65be65a78c3cf9acf47ab883a3e7c1aff3a55f7ea5002c2acf3e2e9b3a2d4cff-ol9_aarch64_appstream
rtla-5.14.0-687.53.1.el9_8.aarch64.rpmad9b255d9ec879c8e9195035e057a3368e9d26d5cfc0b1958d1b0af9452d70d3-ol9_aarch64_appstream
rv-5.14.0-687.53.1.el9_8.aarch64.rpmb443c720d5094a3a3e709771cd9558a34019ecdb5ec546bf2fde1ec5512446f8-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_x86_64_appstream
kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_x86_64_baseos_latest
kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_x86_64_codeready_builder
kernel-5.14.0-687.53.1.el9_8.src.rpm93ce8c2ac471b02a8258d58cf177b908c6c7700935b1877c3975d37d2a39176a-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.53.1.el9_8.x86_64.rpm35ed81c0f738ba4e6a7370ebc17d4f80778a165af3a592e5ff98dc92f3fec068-ol9_x86_64_baseos_latest
kernel-5.14.0-687.53.1.el9_8.x86_64.rpm35ed81c0f738ba4e6a7370ebc17d4f80778a165af3a592e5ff98dc92f3fec068-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.53.1.el9_8.noarch.rpm46941114e8e717ff6ddfd7fada5612a6730a8cae6de4a9b7f977efc7dca7fa37-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.53.1.el9_8.noarch.rpm46941114e8e717ff6ddfd7fada5612a6730a8cae6de4a9b7f977efc7dca7fa37-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.53.1.el9_8.x86_64.rpm3e59e6adc79a8ebad78af7adad3547bdc45acc5892b4626184bde79ca5aa4647-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.53.1.el9_8.x86_64.rpm3e59e6adc79a8ebad78af7adad3547bdc45acc5892b4626184bde79ca5aa4647-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.53.1.el9_8.x86_64.rpma01bcde6de98ed4f575226eac5307c4ebebc3699f091f6ccf0f84841a2b35a64-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.53.1.el9_8.x86_64.rpm60ea5063ef69a330aa24f9bff35950472f6debd47eb6170a373a312bc3cee324-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.53.1.el9_8.x86_64.rpm60ea5063ef69a330aa24f9bff35950472f6debd47eb6170a373a312bc3cee324-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.53.1.el9_8.x86_64.rpm574fdc7c8ac3c0dd521c42124dbc57e292fca7e23f355e91bedbd709efa7f003-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.53.1.el9_8.x86_64.rpm574fdc7c8ac3c0dd521c42124dbc57e292fca7e23f355e91bedbd709efa7f003-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.53.1.el9_8.x86_64.rpmb73e61a8a056f3277a1e887ecc3a0588b411011563536b08ac94272d90e664a9-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.53.1.el9_8.x86_64.rpm510de4d46499253d726b754265b7ad51bb03f28e92899be29a58100eb62f4044-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.53.1.el9_8.x86_64.rpm589e5d57838c4412e85944c18854979f6ee8196b1096945845c80ab82fce228b-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.53.1.el9_8.x86_64.rpm589e5d57838c4412e85944c18854979f6ee8196b1096945845c80ab82fce228b-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpme33f729c9ed6cd7cd3405875447665f6366123c075c91207b5112be23849adb0-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpme33f729c9ed6cd7cd3405875447665f6366123c075c91207b5112be23849adb0-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpmf02a2a32f6e8589330c70afd6047659d7f373c0fe8ffa4b7dc6a8fd04e5f0eaa-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpmf02a2a32f6e8589330c70afd6047659d7f373c0fe8ffa4b7dc6a8fd04e5f0eaa-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.53.1.el9_8.x86_64.rpmdb074a409a6ef659fe9581d125a9a1a5c14b09a21c28a2376c4f29624b6a7867-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.53.1.el9_8.x86_64.rpmdb074a409a6ef659fe9581d125a9a1a5c14b09a21c28a2376c4f29624b6a7867-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.53.1.el9_8.x86_64.rpm8d44e16de92759fef31dd5168d9240315a1f509de841f8a31a5b247cddcf7fa9-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.53.1.el9_8.x86_64.rpm2f74788b1325141ba5f2de18b9360da997a421ec3dd9ad4459a3c7b285eb4657-ol9_x86_64_appstream
kernel-doc-5.14.0-687.53.1.el9_8.noarch.rpmd6196148213ddfe1daef986382eaa78cab142b52832df0af7921b79001d8111c-ol9_x86_64_appstream
kernel-headers-5.14.0-687.53.1.el9_8.x86_64.rpm6c019d35561bfb1ffcdb587068c723fe0b6501df263f9d25ba08ff2bc295080b-ol9_x86_64_appstream
kernel-modules-5.14.0-687.53.1.el9_8.x86_64.rpm2af0327c447cef9644359d3e779e19461e5344be7ccb387a03f3ef394b2f8feb-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.53.1.el9_8.x86_64.rpm2af0327c447cef9644359d3e779e19461e5344be7ccb387a03f3ef394b2f8feb-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpm93ae999d4256e7fbe89f2b5cb353ac3171f63c21131e2ab608c59724723cf0dd-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpm93ae999d4256e7fbe89f2b5cb353ac3171f63c21131e2ab608c59724723cf0dd-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpmecbb5a91c6f673eecdb66e4972ced5fabf8f30d63ef7585e7e3e8fc884011d82-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpmecbb5a91c6f673eecdb66e4972ced5fabf8f30d63ef7585e7e3e8fc884011d82-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.53.1.el9_8.x86_64.rpma0f78c7ac864bc840548017c8479da63f36baab096d84680e66c8bae0d5f366d-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.53.1.el9_8.x86_64.rpma0f78c7ac864bc840548017c8479da63f36baab096d84680e66c8bae0d5f366d-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.53.1.el9_8.x86_64.rpm8987e547279f458b60c243c0d075df2c338958e88fd51a29641347719a4058d0-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.53.1.el9_8.x86_64.rpm8987e547279f458b60c243c0d075df2c338958e88fd51a29641347719a4058d0-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.53.1.el9_8.x86_64.rpmbcdfa61dbed24a4665cf4d06f0818f10eea5fd9a3ec3fb2b2f9e8141719c86b9-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.53.1.el9_8.x86_64.rpm62cbec1fc70699565ed000ae4626eb403a6e187b3586b8d9230879f495950446-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.53.1.el9_8.x86_64.rpm62cbec1fc70699565ed000ae4626eb403a6e187b3586b8d9230879f495950446-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.53.1.el9_8.x86_64.rpm29cd425819c965e1cca8a2669533f5e7698eb408548bee83b9da7d8b23f84e08-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.53.1.el9_8.x86_64.rpm29cd425819c965e1cca8a2669533f5e7698eb408548bee83b9da7d8b23f84e08-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.53.1.el9_8.x86_64.rpm78de6c38846b1f2209c80c72bba9f08c88cb897f3d19f775e8ce8282221eba1c-ol9_x86_64_codeready_builder
perf-5.14.0-687.53.1.el9_8.x86_64.rpm8907285153b9ca2502254604d22de10603819e9fb22d6cda21c33ab6b402d7e0-ol9_x86_64_appstream
python3-perf-5.14.0-687.53.1.el9_8.x86_64.rpmfc124d6c3df2d374bf82f26c6ca28b98d26165b3b5ccad80a22a28d050714302-ol9_x86_64_appstream
rtla-5.14.0-687.53.1.el9_8.x86_64.rpmf001fc77155bc1c6930a5ae371c48d3325bb94ce546621ef978ff57d7e95aff7-ol9_x86_64_appstream
rv-5.14.0-687.53.1.el9_8.x86_64.rpmb59a87d0f9111f9d0a5b4da73c592ea361a25eae7d57183bbe576fa4f7380477-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights