ELSA-2026-95370
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-95370
ELSA-2026-95370 - kernel security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-11-05 |
Description
[5.14.0-687.66.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-687.66.1]
- s390/qeth: validate user buffer length in SNMP and ARP query ioctls (Jan Polensky) [RHEL-295101] {CVE-2026-80584}
- s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-295162] {CVE-2026-80553}
- s390/zcrypt: Validate length for CCA AES cipher key requests (Jan Polensky) [RHEL-297856] {CVE-2026-68452}
- s390/zcrypt: Validate length for CCA ECC private key requests (Jan Polensky) [RHEL-297864] {CVE-2026-68451}
- net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (Jan Polensky) [RHEL-298271] {CVE-2026-64541}
- sunrpc: wait for in-flight TLS handshake callback when cancel loses race (Olga Kornievskaia) [RHEL-283645] {CVE-2026-72221}
- sunrpc: pin svc_xprt across the asynchronous TLS handshake callback (Olga Kornievskaia) [RHEL-283259] {CVE-2026-72222}
- fs/resctrl: Fix use-after-free during unmount (Dennis Chen) [RHEL-296700] {CVE-2026-72080}
- powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak (Mamatha Inamdar) [RHEL-295113] {CVE-2026-80571}
- s390/boot: Avoid IPL parameter append past command line (Jan Polensky) [RHEL-292349] {CVE-2026-98403}
- s390/boot: Add sized_strscpy() to enable strscpy() usage (Jan Polensky) [RHEL-292349] {CVE-2026-98403}
- sctp: clear new_transport when removing a peer (CKI Backport Bot) [RHEL-275363] {CVE-2026-74586}
- openvswitch: Fix CT limit teardown use-after-free (Timothy Redaelli) [RHEL-263551] {CVE-2026-89488}
- sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254284] {CVE-2026-74752}
- sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263317] {CVE-2026-89479}
- sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258776] {CVE-2026-68162}
- sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254364] {CVE-2026-74588}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_aarch64_appstream |
| kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_aarch64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.66.1.el9_8.aarch64.rpm | b4836495d0e42e7aae609e33e9562947f8d5d8c84c8de62e5593f0b0205ae631 | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-687.66.1.el9_8.aarch64.rpm | 69ab538431eba2fc94d8ce2d3283fe13a98abcb761dc20610cd7977163ed96e4 | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-687.66.1.el9_8.aarch64.rpm | 1cce7d30519b28fcfb60570aea0b7fd939db3945b49ecead9cfc0d7884de0cbb | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-687.66.1.el9_8.aarch64.rpm | 1cce7d30519b28fcfb60570aea0b7fd939db3945b49ecead9cfc0d7884de0cbb | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.66.1.el9_8.aarch64.rpm | b7bf6fd8aa823342f5543de9db04b4b95434a12f8391874902a61ebbe3657303 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.66.1.el9_8.aarch64.rpm | b7bf6fd8aa823342f5543de9db04b4b95434a12f8391874902a61ebbe3657303 | - | ol9_aarch64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.66.1.el9_8.aarch64.rpm | 5d93b9b453fc0cf02f895c3e30462d92382ceabbe46c13c2f37777f99880b906 | - | ol9_aarch64_codeready_builder | |
| libperf-5.14.0-687.66.1.el9_8.aarch64.rpm | ba046b61e4cd4adb60efacf2c777341c2d4e20facbbf31c6ebbd987c026f664a | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-687.66.1.el9_8.aarch64.rpm | 614fc8bb048f0610b7efc9dab2199c6df890fd29f3a0d4f04b790e580a83af2d | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-687.66.1.el9_8.aarch64.rpm | 842f79acd8482031cfd53a304c2ed86c0ff50f600153c2b94ab07c34cbab5003 | - | ol9_aarch64_appstream | |
| rtla-5.14.0-687.66.1.el9_8.aarch64.rpm | 3b18b372d3d8c1b7280e9c1d5665ed5872f134457a99a67d88b06c812153fb70 | - | ol9_aarch64_appstream | |
| rv-5.14.0-687.66.1.el9_8.aarch64.rpm | 5932a1101cff8047ea4ba63ce9ea9ac779532d7d7f972d0a55f733f74530230f | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_x86_64_appstream |
| kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-687.66.1.el9_8.src.rpm | bfa455870b8b8b198ffc4127dfc96ab8bbddbfef103d94334bbfc9167159823f | - | ol9_x86_64_u8_baseos_patch | |
| kernel-5.14.0-687.66.1.el9_8.x86_64.rpm | 651fcc9c5537b9242d1747e3059de7c48ea6c1cc3e161f69e36fb2383f723a96 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-687.66.1.el9_8.x86_64.rpm | 651fcc9c5537b9242d1747e3059de7c48ea6c1cc3e161f69e36fb2383f723a96 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-abi-stablelists-5.14.0-687.66.1.el9_8.noarch.rpm | 9c416ab4675c81618a586f32a2ac4066e8e0439144b914fd2e0c0f8d6c25d2a6 | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-687.66.1.el9_8.noarch.rpm | 9c416ab4675c81618a586f32a2ac4066e8e0439144b914fd2e0c0f8d6c25d2a6 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-core-5.14.0-687.66.1.el9_8.x86_64.rpm | 0d24075b9025fc1ae7d582bfc8b9a1a0741496523c2515d2317077c6cfd89cc6 | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-687.66.1.el9_8.x86_64.rpm | 0d24075b9025fc1ae7d582bfc8b9a1a0741496523c2515d2317077c6cfd89cc6 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-cross-headers-5.14.0-687.66.1.el9_8.x86_64.rpm | 4070668344bef89647fbd529268e6b0862f6ac887213d3fb638c935a5911f3d3 | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-687.66.1.el9_8.x86_64.rpm | f2658015882ef90c28e1258b1fb12374658b2ca60bb18551e116ddaf2c01460a | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-687.66.1.el9_8.x86_64.rpm | f2658015882ef90c28e1258b1fb12374658b2ca60bb18551e116ddaf2c01460a | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-core-5.14.0-687.66.1.el9_8.x86_64.rpm | a28ef28c7b05875a1411dd34085af62db7943eafe99de5423fd1bb6cf5763da2 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-687.66.1.el9_8.x86_64.rpm | a28ef28c7b05875a1411dd34085af62db7943eafe99de5423fd1bb6cf5763da2 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-devel-5.14.0-687.66.1.el9_8.x86_64.rpm | bb2716c70bc1c38d79635b2995a9bced152cbe10cf629166955971283e006eca | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-687.66.1.el9_8.x86_64.rpm | 1e226eabad8872bd3b47a56836dc53e2e05ff5a492720991a2654dc5d46419a4 | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-687.66.1.el9_8.x86_64.rpm | a4e4e6f6af9add306e79400108006a76affeb8dc2748661045434e5abd13595d | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-687.66.1.el9_8.x86_64.rpm | a4e4e6f6af9add306e79400108006a76affeb8dc2748661045434e5abd13595d | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-core-5.14.0-687.66.1.el9_8.x86_64.rpm | 5050a60d13c4d02167f0307ee2cdda352a336fbf2e657d1f88cf4191a08c86ed | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-687.66.1.el9_8.x86_64.rpm | 5050a60d13c4d02167f0307ee2cdda352a336fbf2e657d1f88cf4191a08c86ed | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-687.66.1.el9_8.x86_64.rpm | 36adcbf83c9171154e5ecbda0a202e264f861171ea335b7c8506a7e6711622fe | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-687.66.1.el9_8.x86_64.rpm | 36adcbf83c9171154e5ecbda0a202e264f861171ea335b7c8506a7e6711622fe | - | ol9_x86_64_u8_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-687.66.1.el9_8.x86_64.rpm | 429d24c003ee399bd2dc4b9a17cdca7e45adb3d9c3523f8510d2cf0c9800c604 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-687.66.1.el9_8.x86_64.rpm | 429d24c003ee399bd2dc4b9a17cdca7e45adb3d9c3523f8510d2cf0c9800c604 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-devel-5.14.0-687.66.1.el9_8.x86_64.rpm | 02858e10ebc556c04ede6e7a78403840923222303304e30b606b225d8f984b0f | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-687.66.1.el9_8.x86_64.rpm | 26c11671ca8de23419d73ad8d57549148500a753f5b65abdcf86a27dede8fe1b | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-687.66.1.el9_8.noarch.rpm | 77eb827aa92fca079eac29cc1bcf0c9d442a73054aeb845202119a7c2d77ea66 | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-687.66.1.el9_8.x86_64.rpm | 42bdd39ca3c767d38c6c762b80eb761742d7406d6f7254d0813eb0f1c2465793 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-687.66.1.el9_8.x86_64.rpm | 441c46a5aa5faf369d05bdf45fa49c422b207f16c75b38d9ce0d8cf762f87076 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-687.66.1.el9_8.x86_64.rpm | 441c46a5aa5faf369d05bdf45fa49c422b207f16c75b38d9ce0d8cf762f87076 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-core-5.14.0-687.66.1.el9_8.x86_64.rpm | 77041a169d55789e6b35f3b9a637ab2fa78f433abac179f88897a61133411910 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-687.66.1.el9_8.x86_64.rpm | 77041a169d55789e6b35f3b9a637ab2fa78f433abac179f88897a61133411910 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-modules-extra-5.14.0-687.66.1.el9_8.x86_64.rpm | 59c97b7e43d125ab1c4a582fdd1e74b5d1046a37ef523d7a0adec647bce58439 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-687.66.1.el9_8.x86_64.rpm | 59c97b7e43d125ab1c4a582fdd1e74b5d1046a37ef523d7a0adec647bce58439 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-5.14.0-687.66.1.el9_8.x86_64.rpm | baee575386deab213f26d3ab2b64358316c88399832ef36b5229376927a3f45d | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-687.66.1.el9_8.x86_64.rpm | baee575386deab213f26d3ab2b64358316c88399832ef36b5229376927a3f45d | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-5.14.0-687.66.1.el9_8.x86_64.rpm | ddc8c5dd2d67f225181b45ce524e12d14bb95261953bcb94336782496d9bd046 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-687.66.1.el9_8.x86_64.rpm | ddc8c5dd2d67f225181b45ce524e12d14bb95261953bcb94336782496d9bd046 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-687.66.1.el9_8.x86_64.rpm | c96e186e3fe51fd3161139704aff5aedcce97ec2a46001aa8c2babc1cf0bd50c | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-687.66.1.el9_8.x86_64.rpm | 4a7ad3c179df10f061066514877d0569e95e6980c1a9b34ba910411d6ed0d034 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-687.66.1.el9_8.x86_64.rpm | 4a7ad3c179df10f061066514877d0569e95e6980c1a9b34ba910411d6ed0d034 | - | ol9_x86_64_u8_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-687.66.1.el9_8.x86_64.rpm | b2bd3ede78695536c806594fa411fe0ff26188873cca1894cc09b3f7d091cd5c | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-687.66.1.el9_8.x86_64.rpm | b2bd3ede78695536c806594fa411fe0ff26188873cca1894cc09b3f7d091cd5c | - | ol9_x86_64_u8_baseos_patch | |
| libperf-5.14.0-687.66.1.el9_8.x86_64.rpm | 8e0b5969a6bca0696d1cd9086417fa9bd57c64812d4f6923d11a1a18f44358ad | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-687.66.1.el9_8.x86_64.rpm | 4df89e4143b6f406fbd4ecf37005f44bb8aaa09e22205dab6b53baa287086bb1 | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-687.66.1.el9_8.x86_64.rpm | 105dc4180da3647455611cdde8e998bcec8ea3d155a330c9e1e51e1dd70c8fb3 | - | ol9_x86_64_appstream | |
| rtla-5.14.0-687.66.1.el9_8.x86_64.rpm | 69c0482a1d9682ebbb483efa68238e92ee9804d16b35752e1ce005b5d01bfc34 | - | ol9_x86_64_appstream | |
| rv-5.14.0-687.66.1.el9_8.x86_64.rpm | 61649b8480c961e212902ac9cd6d8761c5c263c5a50c4386f8456e32f475eaa3 | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
