Oracle alert ELSA-2026-71700 (kernel)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-71700 Important: Oracle Linux 9 kernel security, bug fix, and enhancement update | |
| Date: | Thu, 01 Oct 2026 07:26:03 -0700 | |
| Message-ID: | <mailman.120.1790864776.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-71700 http://linux.oracle.com/errata/ELSA-2026-71700.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-abi-stablelists-5.14.0-687.52.1.el9_8.noarch.rpm kernel-core-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-cross-headers-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-core-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-devel-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-devel-matched-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-modules-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-devel-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-devel-matched-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-doc-5.14.0-687.52.1.el9_8.noarch.rpm kernel-headers-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-modules-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-tools-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-tools-libs-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-tools-libs-devel-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-uki-virt-5.14.0-687.52.1.el9_8.x86_64.rpm kernel-uki-virt-addons-5.14.0-687.52.1.el9_8.x86_64.rpm libperf-5.14.0-687.52.1.el9_8.x86_64.rpm perf-5.14.0-687.52.1.el9_8.x86_64.rpm python3-perf-5.14.0-687.52.1.el9_8.x86_64.rpm rtla-5.14.0-687.52.1.el9_8.x86_64.rpm rv-5.14.0-687.52.1.el9_8.x86_64.rpm aarch64: kernel-cross-headers-5.14.0-687.52.1.el9_8.aarch64.rpm kernel-headers-5.14.0-687.52.1.el9_8.aarch64.rpm kernel-tools-5.14.0-687.52.1.el9_8.aarch64.rpm kernel-tools-libs-5.14.0-687.52.1.el9_8.aarch64.rpm kernel-tools-libs-devel-5.14.0-687.52.1.el9_8.aarch64.rpm libperf-5.14.0-687.52.1.el9_8.aarch64.rpm perf-5.14.0-687.52.1.el9_8.aarch64.rpm python3-perf-5.14.0-687.52.1.el9_8.aarch64.rpm rtla-5.14.0-687.52.1.el9_8.aarch64.rpm rv-5.14.0-687.52.1.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687... Related CVEs: CVE-2025-40323 CVE-2026-31539 CVE-2026-46199 CVE-2026-46204 CVE-2026-46230 CVE-2026-46311 CVE-2026-52912 CVE-2026-53203 CVE-2026-53290 CVE-2026-64098 CVE-2026-68108 CVE-2026-68121 CVE-2026-68257 CVE-2026-68266 CVE-2026-68267 CVE-2026-68273 CVE-2026-80714 Description of changes: [5.14.0-687.52.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] - Add Oracle Linux IMA certificates - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764] [5.14.0-687.52.1] - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata