elsa-2026-36645

{
  "cves": [
    "CVE-2026-43074",
    "CVE-2026-46242",
    "CVE-2026-53266"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[5.14.0-687.23.1]\n- Disable UKI signing [Orabug: 36571828]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5]\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]\n- Add Oracle Linux IMA certificates\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]\n\n[5.14.0-687.23.1]\n- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]\n- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]\n- eventpoll: drop vestigial epi-dying flag (Ian Kent) [RHEL-180773]\n- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]\n- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]\n- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]\n- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}\n- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]\n- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]\n- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]\n- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}\n- epoll: annotate racy check (Ian Kent) [RHEL-180773]\n- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]\n- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]",
  "id": "ELSA-2026-36645",
  "ovalId": "oval:com.oracle.elsa:def:202636645",
  "source": "oracle_linux",
  "title": "ELSA-2026-36645:  kernel update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-36645.html"
}