ELSA-2026-83156
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-83156
ELSA-2026-83156 - kernel security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-15 |
Description
[5.14.0-687.58.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-687.58.1]
- net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985}
- net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985}
- net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985}
- KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288}
- SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207}
- svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228}
- NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036}
- NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659}
- svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526}
- udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705}
- net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003}
- wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404}
- wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404}
- wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404}
- wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409}
- wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030}
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262}
- net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140}
- netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320}
- ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641}
- net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377}
- net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319}
- net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_aarch64_appstream |
| kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.58.1.el9_8.aarch64.rpm | 61afa0437e06cef4b4c9c293d8e4d345de9093f70f3c9267ef4be221eeec5ca8 | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-687.58.1.el9_8.aarch64.rpm | 907b4011abac6f08ec4e0c40f7f5469f75a0b2da4d7f71336082cf0371688420 | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-687.58.1.el9_8.aarch64.rpm | 98706cb371188fdfbf0141bb95453e028058fc5853eb8be795d6a70508fb76c6 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-687.58.1.el9_8.aarch64.rpm | 98706cb371188fdfbf0141bb95453e028058fc5853eb8be795d6a70508fb76c6 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.58.1.el9_8.aarch64.rpm | 28499192541d2444acb556cf1fc1b2c0701af55b23d7685b50d7b44f0c2e4d51 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.58.1.el9_8.aarch64.rpm | 28499192541d2444acb556cf1fc1b2c0701af55b23d7685b50d7b44f0c2e4d51 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.58.1.el9_8.aarch64.rpm | 15a08d995a15f698ce79bf966d39ce74f944714032bcf65217c5a5c15f9bc8e9 | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-687.58.1.el9_8.aarch64.rpm | 44ac18c7921aad518eae3867204ec07ccfc3e5454ec7206a1f7fbb3df02bf0f2 | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-687.58.1.el9_8.aarch64.rpm | 30af592bf13d0c0100b195c57a96ef1d5c308934493ce81dc81b5b64d506bc85 | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-687.58.1.el9_8.aarch64.rpm | 3555aa0bfd8f5449770cbc25fbe985b53781d28b39a3c745816b003a11d1dcc3 | - | ol9_aarch64_appstream | |
| rtla-5.14.0-687.58.1.el9_8.aarch64.rpm | d63d6dc4de6a76d1a6640a60267c0470293dda347c9e8c4445a56c73c71294ef | - | ol9_aarch64_appstream | |
| rv-5.14.0-687.58.1.el9_8.aarch64.rpm | 0b082f103882edc09b73756305a520bd434668a8ab5613fbe2cb6d6ccb3318ec | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_x86_64_appstream |
| kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-687.58.1.el9_8.src.rpm | 73d68f5b18490e2b8785cb0492642afc294652b4b41454a0f88a573ae4f053e7 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-5.14.0-687.58.1.el9_8.x86_64.rpm | 0d3a1165c111ac90f35526b01828e4bd58b435d74bc5a59129b737d23ec1deef | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.58.1.el9_8.x86_64.rpm | 0d3a1165c111ac90f35526b01828e4bd58b435d74bc5a59129b737d23ec1deef | - | ol9_x86_64_u8_baseos_patch | |
| kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch.rpm | 2d33bd7384046fd61cbd2008a8fd81f8bd90ea664ecd3b0fd7b692ed1ab1247d | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch.rpm | 2d33bd7384046fd61cbd2008a8fd81f8bd90ea664ecd3b0fd7b692ed1ab1247d | - | ol9_x86_64_u8_baseos_patch | |
| kernel-core-5.14.0-687.58.1.el9_8.x86_64.rpm | 0bae68e11455f881b010bde670b0996f5a3a81ae57aa93ac5396b66276ce93e2 | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-687.58.1.el9_8.x86_64.rpm | 0bae68e11455f881b010bde670b0996f5a3a81ae57aa93ac5396b66276ce93e2 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.58.1.el9_8.x86_64.rpm | 95e4dacd7efe5b4ffc43fd01e9a8c42888d694519bb79bdfaff977342815a81b | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-687.58.1.el9_8.x86_64.rpm | 5e73d3796423cdf24aceaee689c1408219d071df03ac0e168fe58a08ce71a1b5 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-687.58.1.el9_8.x86_64.rpm | 5e73d3796423cdf24aceaee689c1408219d071df03ac0e168fe58a08ce71a1b5 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-core-5.14.0-687.58.1.el9_8.x86_64.rpm | d75bc35c2117d9eacc117dd79b499be91783ea5e909c4d33688e9f27ba2a6f49 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-687.58.1.el9_8.x86_64.rpm | d75bc35c2117d9eacc117dd79b499be91783ea5e909c4d33688e9f27ba2a6f49 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-devel-5.14.0-687.58.1.el9_8.x86_64.rpm | ed8288cfc6300f4b6fa8dd9c241a899cae25c7baa73a5c70f49e46e4f1900b7d | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.x86_64.rpm | a981ab77e899251a1af9856eed199a9c6fe91914267a524f64c2133e2154e53c | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-687.58.1.el9_8.x86_64.rpm | 7807dfb9d8548f4e93f91f164cb48e483805ae30459d75784241c0b95ab68843 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-687.58.1.el9_8.x86_64.rpm | 7807dfb9d8548f4e93f91f164cb48e483805ae30459d75784241c0b95ab68843 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm | 138bce495518ff417d77fbddaaad18e98f0731c9d917e5cdd4efca2967af06d8 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm | 138bce495518ff417d77fbddaaad18e98f0731c9d917e5cdd4efca2967af06d8 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm | fbc6b9b0b70a2edce5eb704355bf3d5a85bb9d802cba2e3ac5d1ba4396f03f8d | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm | fbc6b9b0b70a2edce5eb704355bf3d5a85bb9d802cba2e3ac5d1ba4396f03f8d | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-687.58.1.el9_8.x86_64.rpm | f171021b9c93ebe77b53b5c283a84860f0bca237f720112d89ceec916e4d3430 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-687.58.1.el9_8.x86_64.rpm | f171021b9c93ebe77b53b5c283a84860f0bca237f720112d89ceec916e4d3430 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-devel-5.14.0-687.58.1.el9_8.x86_64.rpm | a519462057f6f471cc9a5a766ea27adb98b2f7a1e42a5e4ab944e5dd8c587858 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-687.58.1.el9_8.x86_64.rpm | e8e940a29ff3180e4450fba99309bf2e0fb991dc4f62061b3d036707081fba47 | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-687.58.1.el9_8.noarch.rpm | e537749d4382599bc3f5b164ae35d3976789ca574ae983bf7be87eccb2c6bd7a | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-687.58.1.el9_8.x86_64.rpm | 2db8f2295b1afc06680083f5ad9674c5fa298df25baa669f483d466a0981e5c7 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-687.58.1.el9_8.x86_64.rpm | 0a60a00d8a4cc1229053fc4d35dc9569eb3614ba85192d3abfe53590fc043c5a | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-687.58.1.el9_8.x86_64.rpm | 0a60a00d8a4cc1229053fc4d35dc9569eb3614ba85192d3abfe53590fc043c5a | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm | 383b8e05b25fcb3d5a45fa1bb1cae9e50d664c999ca37405361ead5df09a25da | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm | 383b8e05b25fcb3d5a45fa1bb1cae9e50d664c999ca37405361ead5df09a25da | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm | 894c65ffac6453e00f4c0f8c6724996a8d2f6b1ce04600f1be46c7c43f2a19f5 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm | 894c65ffac6453e00f4c0f8c6724996a8d2f6b1ce04600f1be46c7c43f2a19f5 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-5.14.0-687.58.1.el9_8.x86_64.rpm | 5462687a4bfef3569a3fd39e16f6f6c325aaafe1fad0a486d31554eda290d73a | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-687.58.1.el9_8.x86_64.rpm | 5462687a4bfef3569a3fd39e16f6f6c325aaafe1fad0a486d31554eda290d73a | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.58.1.el9_8.x86_64.rpm | 5c4f91313985aacc6216577891819fde574911f11b19cfd1cdaeb59bfb4620cc | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.58.1.el9_8.x86_64.rpm | 5c4f91313985aacc6216577891819fde574911f11b19cfd1cdaeb59bfb4620cc | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.58.1.el9_8.x86_64.rpm | 515d4b14e5059e59aacf94a382a9782f33a14554754b2fae862463220aed4b30 | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-687.58.1.el9_8.x86_64.rpm | 3630eecd537e88b023a7cf0240f569fa1d204012a1ee16654c0c1c55e2ddcede | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-687.58.1.el9_8.x86_64.rpm | 3630eecd537e88b023a7cf0240f569fa1d204012a1ee16654c0c1c55e2ddcede | - | ol9_x86_64_u8_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-687.58.1.el9_8.x86_64.rpm | 67a0a952ab66bc85e5af27e4bea8edc707616b33159eaaff9e49e363ae310b03 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-687.58.1.el9_8.x86_64.rpm | 67a0a952ab66bc85e5af27e4bea8edc707616b33159eaaff9e49e363ae310b03 | - | ol9_x86_64_u8_baseos_patch | |
| libperf-5.14.0-687.58.1.el9_8.x86_64.rpm | bcce0fbaba9480d39cee26cb719faac35a5a726012a2e75dc7a516ccf37921e3 | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-687.58.1.el9_8.x86_64.rpm | 987b10369abe63708a0707080129439bb5b76c4fc56e4940ae00a3d443ce3ed3 | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-687.58.1.el9_8.x86_64.rpm | c9cf2c0162fb04eeb793d7c083fe3612989a8bfc153bc6e63ce959ef48148b45 | - | ol9_x86_64_appstream | |
| rtla-5.14.0-687.58.1.el9_8.x86_64.rpm | 0efc6a0029ca9a5feff1ad44f98c01b8d057d794628748171c1c7ddb36e991f7 | - | ol9_x86_64_appstream | |
| rv-5.14.0-687.58.1.el9_8.x86_64.rpm | b439364409a79282f1d28f1ddf4d168667a39f0c9d8f2a2177820bd0244162b7 | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
