Stay Connected:

ELSA-2026-74438

ELSA-2026-74438 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:MODERATE
Release Date:2026-10-02

Description


[5.14.0-687.54.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.54.1]
- Revert 'mm/memcg: refactor try_charge_memcg retry logic to use for loop' (Audra Mitchell) [RHEL-269060]
- futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003}
- futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481]
- futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775}
- futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778}
- futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758}
- futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776}
- futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658}
- futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481]
- compiler_types.h: add 'auto' as a macro for '__auto_type' (Waiman Long) [RHEL-263481]
- selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936]
- selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936]
- selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936]
- net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936]
- net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936]
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856}
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794}


Related CVEs


CVE-2026-45856
CVE-2026-63794
CVE-2026-80775

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_aarch64_appstream
kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_aarch64_baseos_latest
kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_aarch64_codeready_builder
kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_aarch64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.54.1.el9_8.aarch64.rpm86b5627b685612b07a003c98d2af8c54725785bbac03cb4a950f6e020fedb68f-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-687.54.1.el9_8.aarch64.rpmfced7b30a976b5150ab9c00c9c5c456099d7136b72e805e29803e0f3646cc3a7-ol9_aarch64_appstream
kernel-tools-5.14.0-687.54.1.el9_8.aarch64.rpm7a6129b17fddad49cc32bfae5e471735abdc8a35ea790af2369769d092fb8dd8-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-687.54.1.el9_8.aarch64.rpm7a6129b17fddad49cc32bfae5e471735abdc8a35ea790af2369769d092fb8dd8-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.54.1.el9_8.aarch64.rpm942e811ae751821f3f5020ec644d8c7171be6c6770cbc9f6e67cec18034cd79c-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-687.54.1.el9_8.aarch64.rpm942e811ae751821f3f5020ec644d8c7171be6c6770cbc9f6e67cec18034cd79c-ol9_aarch64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.54.1.el9_8.aarch64.rpmcccb9838534925b7ab51a1152b779a2f381164d96f71afe475dcf3f69e14ace7-ol9_aarch64_codeready_builder
libperf-5.14.0-687.54.1.el9_8.aarch64.rpm330b195dae92fbb7e0e2d2a0655e6f50d22d085a2bf1626cc63c0752539398f6-ol9_aarch64_codeready_builder
perf-5.14.0-687.54.1.el9_8.aarch64.rpmbb674eb726d4064c2ec897b7637505e596262011ce7980e0ebf5ea3c3b3dfd20-ol9_aarch64_appstream
python3-perf-5.14.0-687.54.1.el9_8.aarch64.rpm50e318b88135af708acac7a84ccaca032f11410d364b6bee9c8c98274f59687c-ol9_aarch64_appstream
rtla-5.14.0-687.54.1.el9_8.aarch64.rpma55073f2d2eb394192149f7815328031feffabbe477bb879313a3022ea102690-ol9_aarch64_appstream
rv-5.14.0-687.54.1.el9_8.aarch64.rpmb7b5490fe625deec20211365347f7a1de026bc606e767e7d7fc8da997abd3edc-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_x86_64_appstream
kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_x86_64_baseos_latest
kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_x86_64_codeready_builder
kernel-5.14.0-687.54.1.el9_8.src.rpmee7bfd62b6b1a3737029a66a2402965dac0eaace621584bb384a8da08995de24-ol9_x86_64_u8_baseos_patch
kernel-5.14.0-687.54.1.el9_8.x86_64.rpm795fd5908ac994f88634138b1834c3ecfae3e09cfdc12d57c65c767145860bd2-ol9_x86_64_baseos_latest
kernel-5.14.0-687.54.1.el9_8.x86_64.rpm795fd5908ac994f88634138b1834c3ecfae3e09cfdc12d57c65c767145860bd2-ol9_x86_64_u8_baseos_patch
kernel-abi-stablelists-5.14.0-687.54.1.el9_8.noarch.rpm26642aa20284f085a06c4d9eb284fbdb68ea707e4559631124fdf8dc34214406-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-687.54.1.el9_8.noarch.rpm26642aa20284f085a06c4d9eb284fbdb68ea707e4559631124fdf8dc34214406-ol9_x86_64_u8_baseos_patch
kernel-core-5.14.0-687.54.1.el9_8.x86_64.rpmaaa9da8d82a814058eade7f40292519422e9e7fae3df11007b69be569730306f-ol9_x86_64_baseos_latest
kernel-core-5.14.0-687.54.1.el9_8.x86_64.rpmaaa9da8d82a814058eade7f40292519422e9e7fae3df11007b69be569730306f-ol9_x86_64_u8_baseos_patch
kernel-cross-headers-5.14.0-687.54.1.el9_8.x86_64.rpm62ff9d7f93762c42842120cdeba8308344480dc3f3a6960c07f5f5712309fca8-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-687.54.1.el9_8.x86_64.rpmb8f2670053920e7da44123f281e2e44bfa10857078bc984b9e98eafce6b08166-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-687.54.1.el9_8.x86_64.rpmb8f2670053920e7da44123f281e2e44bfa10857078bc984b9e98eafce6b08166-ol9_x86_64_u8_baseos_patch
kernel-debug-core-5.14.0-687.54.1.el9_8.x86_64.rpm5956d6775960244f77cd4c1e813ec08cd893081a99aba6eda42c4f1953e51cc2-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-687.54.1.el9_8.x86_64.rpm5956d6775960244f77cd4c1e813ec08cd893081a99aba6eda42c4f1953e51cc2-ol9_x86_64_u8_baseos_patch
kernel-debug-devel-5.14.0-687.54.1.el9_8.x86_64.rpm07da3423810ebc020662e51f0da9dc98c1490835db17b57845ad7d066e33a925-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-687.54.1.el9_8.x86_64.rpmfd2213c846edd46c86fe6d4b157da0d70998d50a375d52696849bcd7c2cc92da-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-687.54.1.el9_8.x86_64.rpm4c305543b43c9401d35469f37facccea6039e4af79f75bfaf22fcef5e8859d23-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-687.54.1.el9_8.x86_64.rpm4c305543b43c9401d35469f37facccea6039e4af79f75bfaf22fcef5e8859d23-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm61462a452474d62df5cf90338a6207ab1482b26f8450de05fc06143806014ddf-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm61462a452474d62df5cf90338a6207ab1482b26f8450de05fc06143806014ddf-ol9_x86_64_u8_baseos_patch
kernel-debug-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm9a128b2d58655b022a2beb197eee6f67e653a6c618d11c105ec4a2923b3a4ac6-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm9a128b2d58655b022a2beb197eee6f67e653a6c618d11c105ec4a2923b3a4ac6-ol9_x86_64_u8_baseos_patch
kernel-debug-uki-virt-5.14.0-687.54.1.el9_8.x86_64.rpm216bb2c3a5516123d30ad81572a3679fcd7db2edc56c80e2f2a4a92a3e86924b-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-687.54.1.el9_8.x86_64.rpm216bb2c3a5516123d30ad81572a3679fcd7db2edc56c80e2f2a4a92a3e86924b-ol9_x86_64_u8_baseos_patch
kernel-devel-5.14.0-687.54.1.el9_8.x86_64.rpm9046afc42452cda133788bb8377274d4e2a54f2dc1edd214ba37afb59d84ef61-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-687.54.1.el9_8.x86_64.rpmdf3bb27d455e2359ce122f779ee16f908be2617752e2160360f0935c42dbdb8e-ol9_x86_64_appstream
kernel-doc-5.14.0-687.54.1.el9_8.noarch.rpm56e986f16d75de68b14f1c00023d994976d1b4fbe1691ac8640f4c9bef43b027-ol9_x86_64_appstream
kernel-headers-5.14.0-687.54.1.el9_8.x86_64.rpmff398cedd56ea1b68635ff8d4a51953b2241624fcdc979192e4fed41772548e5-ol9_x86_64_appstream
kernel-modules-5.14.0-687.54.1.el9_8.x86_64.rpm8306c8d7a902bef9d17647ee681181f7e5d5743d71b9840a92b77aa8299b42b5-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-687.54.1.el9_8.x86_64.rpm8306c8d7a902bef9d17647ee681181f7e5d5743d71b9840a92b77aa8299b42b5-ol9_x86_64_u8_baseos_patch
kernel-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm6000e8b2f411867c7d39f639e30f3c8dcf1806f6fe303de37f7a4da062fccd91-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm6000e8b2f411867c7d39f639e30f3c8dcf1806f6fe303de37f7a4da062fccd91-ol9_x86_64_u8_baseos_patch
kernel-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm470c7abd3c05e3990f44dcc0387f22a8589c44474da19619fdde29aa4c545aa5-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm470c7abd3c05e3990f44dcc0387f22a8589c44474da19619fdde29aa4c545aa5-ol9_x86_64_u8_baseos_patch
kernel-tools-5.14.0-687.54.1.el9_8.x86_64.rpmaa7b60e0617e281060fb523c257e68fe23bcf26a3277501999558d312e0bf62c-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-687.54.1.el9_8.x86_64.rpmaa7b60e0617e281060fb523c257e68fe23bcf26a3277501999558d312e0bf62c-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-5.14.0-687.54.1.el9_8.x86_64.rpm6b698ca1250778d712e9f35c2fce4c82958449b53000e4da16fb0426d44c4262-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-687.54.1.el9_8.x86_64.rpm6b698ca1250778d712e9f35c2fce4c82958449b53000e4da16fb0426d44c4262-ol9_x86_64_u8_baseos_patch
kernel-tools-libs-devel-5.14.0-687.54.1.el9_8.x86_64.rpmc0ba68a1ce40514aba6a143b428359d50134e01471352a5fcb8a2494dd9cf811-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-687.54.1.el9_8.x86_64.rpm43383921d03d6daa34b9cacc41ed4cd60c8b62125d2ba0d3718e6b9bf3c4976a-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-687.54.1.el9_8.x86_64.rpm43383921d03d6daa34b9cacc41ed4cd60c8b62125d2ba0d3718e6b9bf3c4976a-ol9_x86_64_u8_baseos_patch
kernel-uki-virt-addons-5.14.0-687.54.1.el9_8.x86_64.rpm507fa13757b79c32bc45ff8cc0cfe11db0dac20fc5382903333c0c49bcbef96f-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-687.54.1.el9_8.x86_64.rpm507fa13757b79c32bc45ff8cc0cfe11db0dac20fc5382903333c0c49bcbef96f-ol9_x86_64_u8_baseos_patch
libperf-5.14.0-687.54.1.el9_8.x86_64.rpm89219e4e108cbe2825ea9b2e5942cbb263a35dd5b683466003204c717303f4c8-ol9_x86_64_codeready_builder
perf-5.14.0-687.54.1.el9_8.x86_64.rpmc523822b55ff137eadcc5484c173e1ababf5bd7756d2205e440eed9a0dd8dff6-ol9_x86_64_appstream
python3-perf-5.14.0-687.54.1.el9_8.x86_64.rpmcad74b39836068c32d200235784349c189673636a745127def0dc8cba03d2e47-ol9_x86_64_appstream
rtla-5.14.0-687.54.1.el9_8.x86_64.rpm3da6ef5f7b51b33df817a9a6ebc8f8126c4188431be01d30862c1c18baced796-ol9_x86_64_appstream
rv-5.14.0-687.54.1.el9_8.x86_64.rpm2982e980dbf25bd1c1a8052df2883e4b3dc55a6661e641a55c448b264956e711-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights