Stay Connected:

ELSA-2026-8921

ELSA-2026-8921 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-04-20

Description


[5.14.0-611.49.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.49.1]
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-149469] {CVE-2025-22075}

[5.14.0-611.48.1]
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159222] {CVE-2025-68741}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151414]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151728]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151728]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151728]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151728]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-150571]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150455] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150455] {CVE-2025-39766}
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144218]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144218]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141722]


Related CVEs


CVE-2025-39766
CVE-2025-68741

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_aarch64_appstream
kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_aarch64_baseos_latest
kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_aarch64_codeready_builder
kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_aarch64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.49.1.el9_7.aarch64.rpm622dc0164ee2462a5cce639806cd1363f667c4d3b381514357d5f0c2fd9dc7f9-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-611.49.1.el9_7.aarch64.rpmff0dc99946921658ad736ef0ccbab8725862bcf3497e9b38e01dc96f77758944-ol9_aarch64_appstream
kernel-tools-5.14.0-611.49.1.el9_7.aarch64.rpm23335d72c5de80544a8ee7c1fa3ccb7527b3549d960c96ec39b4f26b050c2378-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-611.49.1.el9_7.aarch64.rpm23335d72c5de80544a8ee7c1fa3ccb7527b3549d960c96ec39b4f26b050c2378-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.49.1.el9_7.aarch64.rpm9fe7ad240ee17bc54a3567c6411c4f43b952cc70db6303f113906b164c18abc6-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-611.49.1.el9_7.aarch64.rpm9fe7ad240ee17bc54a3567c6411c4f43b952cc70db6303f113906b164c18abc6-ol9_aarch64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.49.1.el9_7.aarch64.rpm982b1e328aca3b692236e87b9edfa40950cd89139016faf74c0419f1d14ae1c0-ol9_aarch64_codeready_builder
libperf-5.14.0-611.49.1.el9_7.aarch64.rpm481420d0a9cbee928304671ef38e9af1049a84081d4d7e1738334a54f57b2986-ol9_aarch64_codeready_builder
perf-5.14.0-611.49.1.el9_7.aarch64.rpm0257cd7d1d75ae1ec9721ed4bafc1342efff96e4437aaa0d8401951ecd7c207c-ol9_aarch64_appstream
python3-perf-5.14.0-611.49.1.el9_7.aarch64.rpmb3ca90e06a951ce9770444fe192f6f329442ef70c56fdeb04cb223560cabc8a6-ol9_aarch64_appstream
rtla-5.14.0-611.49.1.el9_7.aarch64.rpmec5c7b4c26e64650089c483d2d30fdc4349df869c18ed7bdb63ae4a8069dc645-ol9_aarch64_appstream
rv-5.14.0-611.49.1.el9_7.aarch64.rpm9c1a4f830554caa947c980506209bc224b704f4c54aeae638a595728825ba7c3-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_x86_64_appstream
kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_x86_64_baseos_latest
kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_x86_64_codeready_builder
kernel-5.14.0-611.49.1.el9_7.src.rpme99af9f6de2298356c22b6d39d62e4bb7742b524cf34f9185960c85adc298c85-ol9_x86_64_u7_baseos_patch
kernel-5.14.0-611.49.1.el9_7.x86_64.rpm41f7856a7c2071407ee1c20f5ce825c4c4467be8369f6e8ae21cb72b76d19381-ol9_x86_64_baseos_latest
kernel-5.14.0-611.49.1.el9_7.x86_64.rpm41f7856a7c2071407ee1c20f5ce825c4c4467be8369f6e8ae21cb72b76d19381-ol9_x86_64_u7_baseos_patch
kernel-abi-stablelists-5.14.0-611.49.1.el9_7.noarch.rpm1689fa093ed06208fbc744f8f88354cbeefaae1eab92a9b32e99797e0e28599c-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-611.49.1.el9_7.noarch.rpm1689fa093ed06208fbc744f8f88354cbeefaae1eab92a9b32e99797e0e28599c-ol9_x86_64_u7_baseos_patch
kernel-core-5.14.0-611.49.1.el9_7.x86_64.rpm3c1acfdedd94c278e89007894ef20c5d1f6ed617db3f9f6652f3006436f6d251-ol9_x86_64_baseos_latest
kernel-core-5.14.0-611.49.1.el9_7.x86_64.rpm3c1acfdedd94c278e89007894ef20c5d1f6ed617db3f9f6652f3006436f6d251-ol9_x86_64_u7_baseos_patch
kernel-cross-headers-5.14.0-611.49.1.el9_7.x86_64.rpm39df0ffc3661c2536c4e66f989d69f63024a9be4e7037c01d738e80d26ade5bd-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-611.49.1.el9_7.x86_64.rpmf3a3eecf33c1d58ce80f4f699c14bbdf35c02323fc895ed9eec43532e6a7d6e1-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-611.49.1.el9_7.x86_64.rpmf3a3eecf33c1d58ce80f4f699c14bbdf35c02323fc895ed9eec43532e6a7d6e1-ol9_x86_64_u7_baseos_patch
kernel-debug-core-5.14.0-611.49.1.el9_7.x86_64.rpmf20e9557665d7b9b07ffe0b52620c8b479f760d7c0f6148274345999642291e3-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-611.49.1.el9_7.x86_64.rpmf20e9557665d7b9b07ffe0b52620c8b479f760d7c0f6148274345999642291e3-ol9_x86_64_u7_baseos_patch
kernel-debug-devel-5.14.0-611.49.1.el9_7.x86_64.rpme9c7c714299f25302e05f8704e8bb8d7acbb3743aba1a43deaee2939a69567e0-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-611.49.1.el9_7.x86_64.rpme4189f5dcbbd072063afe718ed94412263c45e6696e8673b1d6be62aab4e630a-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-611.49.1.el9_7.x86_64.rpm36c7ddb6645f395970b2a808f9783149d526447379c2bc1059850599e14eab79-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-611.49.1.el9_7.x86_64.rpm36c7ddb6645f395970b2a808f9783149d526447379c2bc1059850599e14eab79-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpmb3aaa6b5ba1e42eade119a4cfe56f97cea2eb135d213cd1f5d54479de466f7e1-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpmb3aaa6b5ba1e42eade119a4cfe56f97cea2eb135d213cd1f5d54479de466f7e1-ol9_x86_64_u7_baseos_patch
kernel-debug-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpmcd8e81acc0de55cf7b45ea16400f9e2e85a9296086d9a573b51e7e2668229bf6-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpmcd8e81acc0de55cf7b45ea16400f9e2e85a9296086d9a573b51e7e2668229bf6-ol9_x86_64_u7_baseos_patch
kernel-debug-uki-virt-5.14.0-611.49.1.el9_7.x86_64.rpm4eea9230751b366614bdc037b6a7bb56911d366dc963040cc32dd3f82cb11a00-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-611.49.1.el9_7.x86_64.rpm4eea9230751b366614bdc037b6a7bb56911d366dc963040cc32dd3f82cb11a00-ol9_x86_64_u7_baseos_patch
kernel-devel-5.14.0-611.49.1.el9_7.x86_64.rpm27b5b1e2ec63dc38877574c9a955fea127570a2ac95594d370fdee1ec1060a37-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-611.49.1.el9_7.x86_64.rpmd1db1d85c172defd91eef41950b5d29de8a2e8e07d04b9c6f6364b9cd0274bba-ol9_x86_64_appstream
kernel-doc-5.14.0-611.49.1.el9_7.noarch.rpm6663e35158730627609e81e1136859ba951807b82c7e008261478bfbf40544b3-ol9_x86_64_appstream
kernel-headers-5.14.0-611.49.1.el9_7.x86_64.rpm4735253c5a81d0fce43498e0c1bb81dd9005e0607fd43b450f66dcee2a46e0a1-ol9_x86_64_appstream
kernel-modules-5.14.0-611.49.1.el9_7.x86_64.rpm25065c532cdceb6c35c4dc02f482f282965ab4fe3c1588c4200f2934d103decd-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-611.49.1.el9_7.x86_64.rpm25065c532cdceb6c35c4dc02f482f282965ab4fe3c1588c4200f2934d103decd-ol9_x86_64_u7_baseos_patch
kernel-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpmc8ca269053ef8206eb9f3823caaee49830901f0143f78ed52586fb7d114d75d2-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpmc8ca269053ef8206eb9f3823caaee49830901f0143f78ed52586fb7d114d75d2-ol9_x86_64_u7_baseos_patch
kernel-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm2342a45b1480247bf42ddb6ac3b4260119865526db7a63fe1633fbfa56d2e5be-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm2342a45b1480247bf42ddb6ac3b4260119865526db7a63fe1633fbfa56d2e5be-ol9_x86_64_u7_baseos_patch
kernel-tools-5.14.0-611.49.1.el9_7.x86_64.rpmfe6baca36685add73a256298706594e8e255e59efe44d6b95bc2af968319dedf-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-611.49.1.el9_7.x86_64.rpmfe6baca36685add73a256298706594e8e255e59efe44d6b95bc2af968319dedf-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-5.14.0-611.49.1.el9_7.x86_64.rpmd02a14cc5fe621cde38c9e23a90ebdcea8e39072e61b16d9b3602bf60cc4a2d4-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-611.49.1.el9_7.x86_64.rpmd02a14cc5fe621cde38c9e23a90ebdcea8e39072e61b16d9b3602bf60cc4a2d4-ol9_x86_64_u7_baseos_patch
kernel-tools-libs-devel-5.14.0-611.49.1.el9_7.x86_64.rpm47aac3befb7f16a212d906623aa5f4553bdd62185c764a569ddaf23cdc04dceb-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-611.49.1.el9_7.x86_64.rpmc806b94b49d55e57ca163cff312065abb6551b24750d78de3cab972c5a6ab177-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-611.49.1.el9_7.x86_64.rpmc806b94b49d55e57ca163cff312065abb6551b24750d78de3cab972c5a6ab177-ol9_x86_64_u7_baseos_patch
kernel-uki-virt-addons-5.14.0-611.49.1.el9_7.x86_64.rpm8e425792f0cf2d27f9fc0b8fbc5ebb5ca64bc3580a0be3676b8d6d0cb8ecb7ac-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-611.49.1.el9_7.x86_64.rpm8e425792f0cf2d27f9fc0b8fbc5ebb5ca64bc3580a0be3676b8d6d0cb8ecb7ac-ol9_x86_64_u7_baseos_patch
libperf-5.14.0-611.49.1.el9_7.x86_64.rpme25afcd33b55ae3db71cf2d846af866507a73f0982a0a5e994b6df4e2f594c2b-ol9_x86_64_codeready_builder
perf-5.14.0-611.49.1.el9_7.x86_64.rpm7d9737e16e57cc966fde5f0b61e894c938e11dc5a4a636b06e571fe6f9a43e85-ol9_x86_64_appstream
python3-perf-5.14.0-611.49.1.el9_7.x86_64.rpm553b21d458ea8b09f763cab521c8edf9a5f7f0fdf590e548582f853edf4ddb7c-ol9_x86_64_appstream
rtla-5.14.0-611.49.1.el9_7.x86_64.rpm6fa98d4ecc86f72020c7e4ce92edeeb287a4d062877240d838f547af67005e71-ol9_x86_64_appstream
rv-5.14.0-611.49.1.el9_7.x86_64.rpm1347dd92f2d60927fcb0cb363b57c8b4bee3660cd92b37f13ae526f00cab31d8-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights