ELBA-2025-2263
- ULN >
- Oracle Linux Errata repository >
- ELBA-2025-2263
ELBA-2025-2263 - kernel bug fix and enhancement update
| Type: | BUG |
| Impact: | NA |
| Release Date: | 2025-03-06 |
Description
- [5.14.0-503.29.1_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
[5.14.0-503.29.1_5]
- rhel-9.5: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
- ice: implement low latency PHY timer updates (Petr Oros) [RHEL-75466]
- ice: check low latency PHY timer update firmware capability (Petr Oros) [RHEL-75466]
- ice: add lock to protect low latency interface (Petr Oros) [RHEL-75466]
- ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_* (Petr Oros) [RHEL-75466]
- ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810 (Petr Oros) [RHEL-75466]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-72875]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-72875]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-72875]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-72875]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-72875]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-72875]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-72875]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-72875]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-72875]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-72875]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-72875]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-72875]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-72875]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-72875]
- cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-72875]
- cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-72875]
- smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-72875]
- cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-72875]
- cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-72875]
- smb: client: Handle kstrdup failures for passwords (Paulo Alcantara) [RHEL-72875] {CVE-2024-50120}
- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-72875] {CVE-2024-54680}
- smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-72875] {CVE-2024-53095}
- Fix spelling errors in Server Message Block (Paulo Alcantara) [RHEL-72875]
- af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78423]
[5.14.0-503.28.1_5]
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (CKI Backport Bot) [RHEL-73726]
- intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake (David Arcari) [RHEL-62985]
- intel_idle: add Granite Rapids Xeon support (David Arcari) [RHEL-62985]
- intel_idle: Switch to new Intel CPU model defines (David Arcari) [RHEL-62985]
- x86/resctrl: Remove redundant variable in mbm_config_write_domain() (David Arcari) [RHEL-59001]
- x86/resctrl: Read supported bandwidth sources from CPUID (David Arcari) [RHEL-59001]
- x86/resctrl: Remove hard-coded memory bandwidth limit (David Arcari) [RHEL-59001]
- mei: me: disable RPL-S on SPS and IGN firmwares (CKI Backport Bot) [RHEL-60895]
- smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Jay Shin) [RHEL-75935]
- smb: client: disable directory caching when dir_cache_timeout is zero (Jay Shin) [RHEL-75935]
- smb: client: remove unnecessary checks in open_cached_dir() (Jay Shin) [RHEL-75935]
- smb: prevent use-after-free due to open_cached_dir error paths (Jay Shin) [RHEL-75935] {CVE-2024-53177}
- smb: Don't leak cfid when reconnect races with open_cached_dir (Jay Shin) [RHEL-75935] {CVE-2024-53178}
- smb3: request handle caching when caching directories (Jay Shin) [RHEL-75935]
- bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-69514]
- bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-69514]
- smb: client: ignore unhandled reparse tags (Jay Shin) [RHEL-77743]
- smb: client: fix oops due to unset link speed (Jay Shin) [RHEL-77359]
[5.14.0-503.27.1_5]
- NFS: enable nconnect for RDMA (Benjamin Coddington) [RHEL-77179]
- Revert 'scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo' (Dick Kennedy) [RHEL-70933]
- idpf: fix idpf_vc_core_init error path (CKI Backport Bot) [RHEL-70191]
- idpf: avoid vport access in idpf_get_link_ksettings (CKI Backport Bot) [RHEL-70191]
- ip6mr: fix tables suspicious RCU usage (Andrea Claudi) [RHEL-71730]
- ipmr: tune the ipmr_can_free_table() checks. (Andrea Claudi) [RHEL-71730]
- ipmr: add debug check for mr table cleanup (Andrea Claudi) [RHEL-71730]
- net: ip6mr: add RTM_GETROUTE netlink op (Andrea Claudi) [RHEL-71730]
- i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-75972]
- tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [RHEL-62215]
- mptcp: handle consistently DSS corruption (Paolo Abeni) [RHEL-62215]
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_aarch64_appstream |
| kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_aarch64_baseos_latest | |
| kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_aarch64_codeready_builder | |
| kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_aarch64_u5_baseos_patch | |
| bpftool-7.4.0-503.29.1.el9_5.aarch64.rpm | 707c865cc7b2e97bfe3056d8a7e3c137bfeb8ceb8c3023b1cb3eb985e1c57c4a | - | ol9_aarch64_baseos_latest | |
| bpftool-7.4.0-503.29.1.el9_5.aarch64.rpm | 707c865cc7b2e97bfe3056d8a7e3c137bfeb8ceb8c3023b1cb3eb985e1c57c4a | - | ol9_aarch64_u5_baseos_patch | |
| kernel-cross-headers-5.14.0-503.29.1.el9_5.aarch64.rpm | 6051a5e76ccc22ce57878751cefd28b23d4d64c58e60d9411c9af4da4ad78c53 | - | ol9_aarch64_codeready_builder | |
| kernel-headers-5.14.0-503.29.1.el9_5.aarch64.rpm | 21d7c477df59fdf63c1123079bb02f0466bfdaf64a474999def3ad9dd303b610 | - | ol9_aarch64_appstream | |
| kernel-tools-5.14.0-503.29.1.el9_5.aarch64.rpm | 339ad03fcf550552604313a37fb90a137ac04ee7e59b498b8070a802466b8990 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-5.14.0-503.29.1.el9_5.aarch64.rpm | 339ad03fcf550552604313a37fb90a137ac04ee7e59b498b8070a802466b8990 | - | ol9_aarch64_u5_baseos_patch | |
| kernel-tools-libs-5.14.0-503.29.1.el9_5.aarch64.rpm | eb74036c7daeb746bb8021d33dcf09fc084f01f8c69842e73d79260d39d27a84 | - | ol9_aarch64_baseos_latest | |
| kernel-tools-libs-5.14.0-503.29.1.el9_5.aarch64.rpm | eb74036c7daeb746bb8021d33dcf09fc084f01f8c69842e73d79260d39d27a84 | - | ol9_aarch64_u5_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-503.29.1.el9_5.aarch64.rpm | a7b8d0bb04fda2af51b13dc7a84ef30616116f1c75ccac3b838dfcfe7ac85ce7 | - | ol9_aarch64_codeready_builder | |
| perf-5.14.0-503.29.1.el9_5.aarch64.rpm | 6734991fb708ed6ddaf0975342380522d236bf2238910cd7ead3426939a930fa | - | ol9_aarch64_appstream | |
| python3-perf-5.14.0-503.29.1.el9_5.aarch64.rpm | b2329ccf31815fcb99b8293b5a2201dd4872368f2683a528287d51b202f3cb9a | - | ol9_aarch64_baseos_latest | |
| python3-perf-5.14.0-503.29.1.el9_5.aarch64.rpm | b2329ccf31815fcb99b8293b5a2201dd4872368f2683a528287d51b202f3cb9a | - | ol9_aarch64_u5_baseos_patch | |
| rtla-5.14.0-503.29.1.el9_5.aarch64.rpm | cf6faadca708add0253c540acb89e1afae41e3314b925795cc20e1b856a3bad2 | - | ol9_aarch64_appstream | |
| rv-5.14.0-503.29.1.el9_5.aarch64.rpm | 41d80da5a716673a4a8d0b75b4d9333a8ce29ba22d3e70dca12e9bc9649e7588 | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_x86_64_appstream |
| kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_x86_64_codeready_builder | |
| kernel-5.14.0-503.29.1.el9_5.src.rpm | 303804ae34a2a77943912947bfc168d8288f866b1bec56a6a12ce5a5985ce234 | - | ol9_x86_64_u5_baseos_patch | |
| bpftool-7.4.0-503.29.1.el9_5.x86_64.rpm | 879af58b5158d171e537a4e0ec31b60de2a4355cccca48d28de8c8317407632b | - | ol9_x86_64_baseos_latest | |
| bpftool-7.4.0-503.29.1.el9_5.x86_64.rpm | 879af58b5158d171e537a4e0ec31b60de2a4355cccca48d28de8c8317407632b | - | ol9_x86_64_u5_baseos_patch | |
| kernel-5.14.0-503.29.1.el9_5.x86_64.rpm | e5e8619e0249beea812b265af3daafa6fda28821426ac4e475b2c913ea3d6242 | - | ol9_x86_64_baseos_latest | |
| kernel-5.14.0-503.29.1.el9_5.x86_64.rpm | e5e8619e0249beea812b265af3daafa6fda28821426ac4e475b2c913ea3d6242 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-abi-stablelists-5.14.0-503.29.1.el9_5.noarch.rpm | 242c76689e3603d6c18d1cba0c757f248ecb3f92efaae7706f4b7631ebdf1bb9 | - | ol9_x86_64_baseos_latest | |
| kernel-abi-stablelists-5.14.0-503.29.1.el9_5.noarch.rpm | 242c76689e3603d6c18d1cba0c757f248ecb3f92efaae7706f4b7631ebdf1bb9 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-core-5.14.0-503.29.1.el9_5.x86_64.rpm | 814cb688f2ab162651f91d1820d45420bb31b6567325c7d109cca53999748ec6 | - | ol9_x86_64_baseos_latest | |
| kernel-core-5.14.0-503.29.1.el9_5.x86_64.rpm | 814cb688f2ab162651f91d1820d45420bb31b6567325c7d109cca53999748ec6 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-cross-headers-5.14.0-503.29.1.el9_5.x86_64.rpm | ba7c7a94a47d3f27337f077457a47ea1194710541757fa40351d5d045b5c6c4b | - | ol9_x86_64_codeready_builder | |
| kernel-debug-5.14.0-503.29.1.el9_5.x86_64.rpm | 513fc016c0827ca488b510c0f6b3857e990d053fbbc0c395c919a346b2ce1a5e | - | ol9_x86_64_baseos_latest | |
| kernel-debug-5.14.0-503.29.1.el9_5.x86_64.rpm | 513fc016c0827ca488b510c0f6b3857e990d053fbbc0c395c919a346b2ce1a5e | - | ol9_x86_64_u5_baseos_patch | |
| kernel-debug-core-5.14.0-503.29.1.el9_5.x86_64.rpm | c08381d4c3c00de25413cbd9026d4e5befa45ec0253f3c4620025ee5edff63b9 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-core-5.14.0-503.29.1.el9_5.x86_64.rpm | c08381d4c3c00de25413cbd9026d4e5befa45ec0253f3c4620025ee5edff63b9 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-debug-devel-5.14.0-503.29.1.el9_5.x86_64.rpm | d01dcf29abe8b98045e72ea4e628124c89b6b29cd44dd6769f34e335a7624004 | - | ol9_x86_64_appstream | |
| kernel-debug-devel-matched-5.14.0-503.29.1.el9_5.x86_64.rpm | 65562d4be0011d6f0995bb116afa5a9d5cd9efa94dbef8b5de7008e084935ac6 | - | ol9_x86_64_appstream | |
| kernel-debug-modules-5.14.0-503.29.1.el9_5.x86_64.rpm | a5afaec8eb5bd82d7b835454c1f686662244119e750ce345276a6583a80870ce | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-5.14.0-503.29.1.el9_5.x86_64.rpm | a5afaec8eb5bd82d7b835454c1f686662244119e750ce345276a6583a80870ce | - | ol9_x86_64_u5_baseos_patch | |
| kernel-debug-modules-core-5.14.0-503.29.1.el9_5.x86_64.rpm | bf2f2a9e5c6900cf8a68e3fb80163a60b6c8b34c9ce22e16c9d47101bff04652 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-core-5.14.0-503.29.1.el9_5.x86_64.rpm | bf2f2a9e5c6900cf8a68e3fb80163a60b6c8b34c9ce22e16c9d47101bff04652 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-debug-modules-extra-5.14.0-503.29.1.el9_5.x86_64.rpm | af69eec9b5400f90ce6ec65d5305793b26d2f9ac00c24eae56e33c09496212ed | - | ol9_x86_64_baseos_latest | |
| kernel-debug-modules-extra-5.14.0-503.29.1.el9_5.x86_64.rpm | af69eec9b5400f90ce6ec65d5305793b26d2f9ac00c24eae56e33c09496212ed | - | ol9_x86_64_u5_baseos_patch | |
| kernel-debug-uki-virt-5.14.0-503.29.1.el9_5.x86_64.rpm | 41468284b2dc933802f470cd6af9067066c7352e514476cd30ed45a1a0cd28b4 | - | ol9_x86_64_baseos_latest | |
| kernel-debug-uki-virt-5.14.0-503.29.1.el9_5.x86_64.rpm | 41468284b2dc933802f470cd6af9067066c7352e514476cd30ed45a1a0cd28b4 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-devel-5.14.0-503.29.1.el9_5.x86_64.rpm | f62a69435f89d3387857eebb0b73e01a4581fb9ce58cf7f6d925b2fcbb7d1006 | - | ol9_x86_64_appstream | |
| kernel-devel-matched-5.14.0-503.29.1.el9_5.x86_64.rpm | ab66e3ca10eeb0f78fc41f3b5f99a30c2d4c6315763051b8a657cca93f88da33 | - | ol9_x86_64_appstream | |
| kernel-doc-5.14.0-503.29.1.el9_5.noarch.rpm | 877256016cb07d5d61336e727364dec0323118a744d9db65779b4caf0e925eae | - | ol9_x86_64_appstream | |
| kernel-headers-5.14.0-503.29.1.el9_5.x86_64.rpm | fefbc04906772c84f02995a97b7aee3d41c2fb1b619703855103aebbad621f31 | - | ol9_x86_64_appstream | |
| kernel-modules-5.14.0-503.29.1.el9_5.x86_64.rpm | 5edbafb29f7e5a52e0fb7c3be5b589b88047217ecdad1b077579f54ef552ecfc | - | ol9_x86_64_baseos_latest | |
| kernel-modules-5.14.0-503.29.1.el9_5.x86_64.rpm | 5edbafb29f7e5a52e0fb7c3be5b589b88047217ecdad1b077579f54ef552ecfc | - | ol9_x86_64_u5_baseos_patch | |
| kernel-modules-core-5.14.0-503.29.1.el9_5.x86_64.rpm | 0d9100550d8eadcc538b945883ea48360b72f992c7b7fa6644ff3ec324f47079 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-core-5.14.0-503.29.1.el9_5.x86_64.rpm | 0d9100550d8eadcc538b945883ea48360b72f992c7b7fa6644ff3ec324f47079 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-modules-extra-5.14.0-503.29.1.el9_5.x86_64.rpm | 0398bab3b269a092fba5601932cda7b7be5b9c2617f2236769c4fa9570927666 | - | ol9_x86_64_baseos_latest | |
| kernel-modules-extra-5.14.0-503.29.1.el9_5.x86_64.rpm | 0398bab3b269a092fba5601932cda7b7be5b9c2617f2236769c4fa9570927666 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-tools-5.14.0-503.29.1.el9_5.x86_64.rpm | 26456d2a4673af4a523b3d80cad0b64058ca6f8e4f4e6192826f505f90d95f27 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-5.14.0-503.29.1.el9_5.x86_64.rpm | 26456d2a4673af4a523b3d80cad0b64058ca6f8e4f4e6192826f505f90d95f27 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-tools-libs-5.14.0-503.29.1.el9_5.x86_64.rpm | d72a71b26379b825ee43c6d46370c86c3612f0a0be80d51c795ed072444271d3 | - | ol9_x86_64_baseos_latest | |
| kernel-tools-libs-5.14.0-503.29.1.el9_5.x86_64.rpm | d72a71b26379b825ee43c6d46370c86c3612f0a0be80d51c795ed072444271d3 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-tools-libs-devel-5.14.0-503.29.1.el9_5.x86_64.rpm | 67f2fb8fbc0beef7fd552d4331fa8bafa41bb9a43b314e5e8f69bf15d27814f7 | - | ol9_x86_64_codeready_builder | |
| kernel-uki-virt-5.14.0-503.29.1.el9_5.x86_64.rpm | ebed7df8907325585d6204ae6c071bd9407140d84cf3deca5835bbad4220bb70 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-5.14.0-503.29.1.el9_5.x86_64.rpm | ebed7df8907325585d6204ae6c071bd9407140d84cf3deca5835bbad4220bb70 | - | ol9_x86_64_u5_baseos_patch | |
| kernel-uki-virt-addons-5.14.0-503.29.1.el9_5.x86_64.rpm | 3b5e62e52b7db6d280b57b5827d379b5c7e76141b12d990664189717ba119459 | - | ol9_x86_64_baseos_latest | |
| kernel-uki-virt-addons-5.14.0-503.29.1.el9_5.x86_64.rpm | 3b5e62e52b7db6d280b57b5827d379b5c7e76141b12d990664189717ba119459 | - | ol9_x86_64_u5_baseos_patch | |
| libperf-5.14.0-503.29.1.el9_5.x86_64.rpm | 7e0e1f0d965ef1b5e68dd8c7685e000c81ff3ff4f0f0f230410a503032572beb | - | ol9_x86_64_codeready_builder | |
| perf-5.14.0-503.29.1.el9_5.x86_64.rpm | 9c77a3b8c62edfc10b15d1910a7f06fd955bfca1631466dd8a58bf9a9558e81e | - | ol9_x86_64_appstream | |
| python3-perf-5.14.0-503.29.1.el9_5.x86_64.rpm | 059a39f5487d58c3b4b86704ef73d2772ff33ff89d5dc9f54f067ad5ef30cf28 | - | ol9_x86_64_baseos_latest | |
| python3-perf-5.14.0-503.29.1.el9_5.x86_64.rpm | 059a39f5487d58c3b4b86704ef73d2772ff33ff89d5dc9f54f067ad5ef30cf28 | - | ol9_x86_64_u5_baseos_patch | |
| rtla-5.14.0-503.29.1.el9_5.x86_64.rpm | 487cd987b6702920cf1924dc07893a23830c9ce9fdc127cbcb9ca07ba13c28ab | - | ol9_x86_64_appstream | |
| rv-5.14.0-503.29.1.el9_5.x86_64.rpm | e20926c84a845c1d2c488e7ac95b18d3cefd174c539952aa589d1ff2b5ceee3c | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
