ELSA-2026-93412
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-93412
ELSA-2026-93412 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-11-02 |
Description
[5.14.0-687.64.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-687.64.1]
- ipv4: free inet_opt and ireq_opt after an RCU grace period (CKI Backport Bot) [RHEL-295635] {CVE-2026-98432}
- nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() (Maurizio Lombardi) [RHEL-290719] {CVE-2026-98725}
- spi: fsl-lpspi: terminate the RX channel on TX prepare failure path (Iker Pedrosa) [RHEL-234297] {CVE-2026-64303}
- spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() (Iker Pedrosa) [RHEL-234297] {CVE-2026-64303}
- xfrm: hold net_device reference under RCU in bundle creation (Abhishek Rawal) [RHEL-277984] {CVE-2026-98364}
- entry: Fix seccomp bypass after ptrace with TSYNC (Audra Mitchell) [RHEL-271399] {CVE-2026-89603}
- smb: client: bound dirent name against end of SMB response in cifs_filldir (CKI Backport Bot) [RHEL-278331] {CVE-2026-93787}
- sctp: stream: fully roll back denied add-stream state (CKI Backport Bot) [RHEL-277123] {CVE-2026-52929}
- tipc: require net admin for TIPCv2 netlink mutators (CKI Backport Bot) [RHEL-273181] {CVE-2026-74283}
- Bluetooth: mgmt: fix UAF in pair command cancellation (CKI Backport Bot) [RHEL-254650] {CVE-2026-74510}
- ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225993] {CVE-2026-53270}
[5.14.0-687.63.1]
- net: skbuff: propagate shared-frag marker in skb_zerocopy() (Xin Long) [RHEL-291166]
- selftests: netfilter: use KHDR_INCLUDES in CFLAGS (Phil Sutter) [RHEL-291352]
- selftests: netfilter: run conntrack_dump_flush in netns (Phil Sutter) [RHEL-291352]
- netfilter: conntrack: make filtering by zone discoverable (Phil Sutter) [RHEL-291352]
- selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo (Phil Sutter) [RHEL-291352]
- selftests: netfilter: Fix missing return values in conntrack_dump_flush (Phil Sutter) [RHEL-291352]
- selftests: netfilter: remove unused parameter (Phil Sutter) [RHEL-291352]
- selftests: netfilter: Add missing return value (Phil Sutter) [RHEL-291352]
- selftests: netfilter: fix conntrack_dump_flush retval on unsupported kernel (Phil Sutter) [RHEL-291352]
- netfilter: report NLM_F_DUMP_FILTERED when all is filtered out (Phil Sutter) [RHEL-291352]
- netfilter: ctnetlink: fix filtering for zone 0 (Phil Sutter) [RHEL-291352]
- netfilter: ctnetlink: support filtering by zone (Phil Sutter) [RHEL-291352]
- KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CKI Backport Bot) [RHEL-287053] {CVE-2026-98466}
- mptcp: pm: userspace: fix use-after-free in get_local_id (Prasenjit Mukherjee) [RHEL-236687] {CVE-2026-68169}
- mptcp: options: reset DSS fields in case of unexpected size (Prasenjit Mukherjee) [RHEL-250609] {CVE-2026-80586}
- blk-throttle: fix throtl_data leak during disk release (David Jeffery) [RHEL-250378]
- blk-throttle: fix access race during throttle policy activation (David Jeffery) [RHEL-250378]
[5.14.0-687.62.1]
- virtio-fs: avoid double-free on failed queue setup (Miklos Szeredi) [RHEL-278131] {CVE-2026-93827}
- sched/fair: Proportional newidle balance (Herton R. Krzesinski) [RHEL-288067]
- sched/fair: Small cleanup to update_newidle_cost() (Herton R. Krzesinski) [RHEL-288067]
- sched/fair: Small cleanup to sched_balance_newidle() (Herton R. Krzesinski) [RHEL-288067]
- sched/fair: Revert max_newidle_lb_cost bump (Herton R. Krzesinski) [RHEL-288067]
- scsi: target: iscsi: Reserve a terminator byte for the login payload (CKI Backport Bot) [RHEL-285602] {CVE-2026-90011}
- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CKI Backport Bot) [RHEL-283505] {CVE-2026-72083}
- arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-271130]
- ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-271130]
- ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-271127]
- packet: use consistent hard_header_len in TX_RING send path (Toke Hoiland-Jorgensen) [RHEL-244551]
- packet: use consistent hard_header_len in non-ring send paths (Toke Hoiland-Jorgensen) [RHEL-244551] {CVE-2026-74582}
- net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Hoiland-Jorgensen) [RHEL-244551]
- ipv6: sit: reload inner IPv6 header after GSO offloads (CKI Backport Bot) [RHEL-225916] {CVE-2026-53228}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_aarch64_appstream |
| kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.64.1.el9_8.aarch64.rpm | 80ae93f1216931433ee51594e57d540ea96e5e8f6eb229b40c32c02ea5150eb4 | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-687.64.1.el9_8.aarch64.rpm | 6cf63eb4300381d1eb48d63eb246d10583071eddd2c9f7c1b8f526809d2cda1e | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-687.64.1.el9_8.aarch64.rpm | d32ebe11497099c0b5b13ee9cab46955f0caf6c54d104f437b9a44f511493d74 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-687.64.1.el9_8.aarch64.rpm | d32ebe11497099c0b5b13ee9cab46955f0caf6c54d104f437b9a44f511493d74 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.64.1.el9_8.aarch64.rpm | d7c8f7498d76a36efea366fed594957be34ebe4cb1a6f890987fec44b255fc8e | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.64.1.el9_8.aarch64.rpm | d7c8f7498d76a36efea366fed594957be34ebe4cb1a6f890987fec44b255fc8e | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.64.1.el9_8.aarch64.rpm | 8661d12d413aaa88cb420cb0b054e1adca084c831f1d6cd3d4affc7ec27ee82a | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-687.64.1.el9_8.aarch64.rpm | 877a0c2d7df90af435f4ef74e19f24ea5609c4cb59c3b788fb06d99dfe924114 | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-687.64.1.el9_8.aarch64.rpm | a4090e95e5c4d3d6dca6049d18106905a36aabaca6f3cb83f8a42b36cae624bc | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-687.64.1.el9_8.aarch64.rpm | 7db68172277bae5bcffcd71114229ac482ee1f72f2c4843500b1530c6157d94b | - | ol9_aarch64_appstream | |
| rtla-5.14.0-687.64.1.el9_8.aarch64.rpm | 2eacafbb7be8ce2468ae71515ce41dcd2b3ac6a4477c286f8e53fa66fbad1f7f | - | ol9_aarch64_appstream | |
| rv-5.14.0-687.64.1.el9_8.aarch64.rpm | e5e5004f7bbc4b6d18e85fb4cf254c8c84ee707cf32fc28b01117b13ad10939e | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_x86_64_appstream |
| kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-687.64.1.el9_8.src.rpm | 8c93cde21f02b318a5d7f2d6bf74f39c63778020e7f836f6799f23b9fa3dc5d1 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-5.14.0-687.64.1.el9_8.x86_64.rpm | 1aeb111546115cc73a36505ac4b01c11f3e21534958b193ba51ac1af2b83b364 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.64.1.el9_8.x86_64.rpm | 1aeb111546115cc73a36505ac4b01c11f3e21534958b193ba51ac1af2b83b364 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-abi-stablelists-5.14.0-687.64.1.el9_8.noarch.rpm | cfc2328bf6f80f646e2a032618e93e35f3b2252fa76ca0b4257b168896bc028f | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-687.64.1.el9_8.noarch.rpm | cfc2328bf6f80f646e2a032618e93e35f3b2252fa76ca0b4257b168896bc028f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 326411f9aa37290b1451de8beb55e148800acc98a85efeb69ecee82528034e64 | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 326411f9aa37290b1451de8beb55e148800acc98a85efeb69ecee82528034e64 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.64.1.el9_8.x86_64.rpm | fe2f52fbef1bf41930976145167e401ccc0918bdba7471152df5bb108a137953 | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-687.64.1.el9_8.x86_64.rpm | 1f7508ee714c88dcc497de294f617abd2aa567f3922a09a527e8e40a7bccdc59 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-687.64.1.el9_8.x86_64.rpm | 1f7508ee714c88dcc497de294f617abd2aa567f3922a09a527e8e40a7bccdc59 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 8da0bf5f171187625680698bf8a5c50ee2b0c582dd4ecffd3083c52093676f53 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 8da0bf5f171187625680698bf8a5c50ee2b0c582dd4ecffd3083c52093676f53 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-devel-5.14.0-687.64.1.el9_8.x86_64.rpm | 11fcbea74b16667ac5fc5a5224b42ed555a28c2f9f3fb3293688b4c1173de7fc | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-687.64.1.el9_8.x86_64.rpm | aca5e12bf5f58700972ae31c31f9430fe41ef19601ac22ef8a70e33c307488b2 | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-687.64.1.el9_8.x86_64.rpm | d5c3179cac213a4e2ba2650421bb37185adc4152da2368ca49cb984ca7190edd | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-687.64.1.el9_8.x86_64.rpm | d5c3179cac213a4e2ba2650421bb37185adc4152da2368ca49cb984ca7190edd | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 5e158751d8a862a10cbe55630ed13af1b73c2f26524a331bd5b840771a91d215 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 5e158751d8a862a10cbe55630ed13af1b73c2f26524a331bd5b840771a91d215 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-687.64.1.el9_8.x86_64.rpm | d3e8b9dc2e6e858e5d4f9e61af57a50a9e90a1f5c1c1ece7a96d4808e0dc7a65 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-687.64.1.el9_8.x86_64.rpm | d3e8b9dc2e6e858e5d4f9e61af57a50a9e90a1f5c1c1ece7a96d4808e0dc7a65 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-687.64.1.el9_8.x86_64.rpm | d32f97ffcad0351d28f149633bc00d4dd034d1b879cad0bc400ab37e83f7c0f9 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-687.64.1.el9_8.x86_64.rpm | d32f97ffcad0351d28f149633bc00d4dd034d1b879cad0bc400ab37e83f7c0f9 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-devel-5.14.0-687.64.1.el9_8.x86_64.rpm | 75d19863476bfd93ab8e403d1cd5bffedece3d158517c0cf4c30e475bf55e2e4 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-687.64.1.el9_8.x86_64.rpm | 2b3c8b8bfafd2b5d8a963b0bd51ba5a22337c707e1802bb4482fca55327eaaea | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-687.64.1.el9_8.noarch.rpm | 5d08194861d5d17ba2fd0763a81f760e6e53aa0fce853489a9de3fc75c0e94cc | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-687.64.1.el9_8.x86_64.rpm | 11fd07cac8a941a47da867596d957c6131cda8cbd0ea35638f0944d8acab5c22 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-687.64.1.el9_8.x86_64.rpm | 2f6841bc65ec64b284cab8a19e42ad38899ebbe67dbaf1717857e0f28fa4649e | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-687.64.1.el9_8.x86_64.rpm | 2f6841bc65ec64b284cab8a19e42ad38899ebbe67dbaf1717857e0f28fa4649e | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 5d292114a42f6190179a1a43f66ff45be19754b4373be0599723591c92d4c6d2 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-687.64.1.el9_8.x86_64.rpm | 5d292114a42f6190179a1a43f66ff45be19754b4373be0599723591c92d4c6d2 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-extra-5.14.0-687.64.1.el9_8.x86_64.rpm | 07e33646055efe73b1faafe358a741b3e75d94e3ce5fec03040c147f9d96c3b9 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-687.64.1.el9_8.x86_64.rpm | 07e33646055efe73b1faafe358a741b3e75d94e3ce5fec03040c147f9d96c3b9 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-5.14.0-687.64.1.el9_8.x86_64.rpm | d6ea7aad215c297f87d34a1154d32a9aaa86c882cf02db75bcc2e8db34edc757 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-687.64.1.el9_8.x86_64.rpm | d6ea7aad215c297f87d34a1154d32a9aaa86c882cf02db75bcc2e8db34edc757 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.64.1.el9_8.x86_64.rpm | f624dd06f88750de848b60f37a74e7a82d7962bb30b3d5b9e0bc4e86bc335b31 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.64.1.el9_8.x86_64.rpm | f624dd06f88750de848b60f37a74e7a82d7962bb30b3d5b9e0bc4e86bc335b31 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.64.1.el9_8.x86_64.rpm | 2e7f0b05a18c0b70f8f74e5f346cfcebdb1489c2a309022fa3cbf69841e7accd | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-687.64.1.el9_8.x86_64.rpm | c3757211ab1947d4aecfc691b57fc179688ba1b5abdc3505e8f4b4053b9d036e | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-687.64.1.el9_8.x86_64.rpm | c3757211ab1947d4aecfc691b57fc179688ba1b5abdc3505e8f4b4053b9d036e | - | ol9_x86_64_u8_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-687.64.1.el9_8.x86_64.rpm | dec0b117fbaf0cdbedc1d8dcb8517fb399403c54987831d83ee91507972e79d0 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-687.64.1.el9_8.x86_64.rpm | dec0b117fbaf0cdbedc1d8dcb8517fb399403c54987831d83ee91507972e79d0 | - | ol9_x86_64_u8_baseos_patch | |
| libperf-5.14.0-687.64.1.el9_8.x86_64.rpm | 76c15e78ce728c32305352f9b094c31292e9eb167eddc080d36fcd969d8f18f3 | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-687.64.1.el9_8.x86_64.rpm | 9e0c46397b4318a0a465f1d3e35c4f259a979a2d16ac4639f7bdfd4cfeffeedf | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-687.64.1.el9_8.x86_64.rpm | a879331361ec7f4fa00481a8ba6cb96999cf175ecfe47b1f0560839a9af6408d | - | ol9_x86_64_appstream | |
| rtla-5.14.0-687.64.1.el9_8.x86_64.rpm | 574cc6f8d1a56b95bb4314a9338e0ea1f31fc40090ccdbdf20463fd5044d8bb0 | - | ol9_x86_64_appstream | |
| rv-5.14.0-687.64.1.el9_8.x86_64.rpm | 19df04395edaca04ecf9850448f8631c72e33563767c49123471ebd6cad8fde6 | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
