{"cves":["CVE-2026-43074","CVE-2026-46242","CVE-2026-53266"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[5.14.0-687.23.1]\n- Disable UKI signing [Orabug: 36571828]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5]\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]\n- Add Oracle Linux IMA certificates\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]\n\n[5.14.0-687.23.1]\n- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]\n- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]\n- eventpoll: drop vestigial epi-dying flag (Ian Kent) [RHEL-180773]\n- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]\n- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]\n- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]\n- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}\n- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]\n- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]\n- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}\n- epoll: annotate racy check (Ian Kent) [RHEL-180773]\n- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]\n- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]","id":"ELSA-2026-36645","ovalId":"oval:com.oracle.elsa:def:202636645","source":"oracle_linux","title":"ELSA-2026-36645:  kernel update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-36645.html"}