Stay Connected:

ELSA-2024-3619

ELSA-2024-3619 - kernel security and bug fix update

Type:SECURITY
Impact:MODERATE
Release Date:2024-06-06

Description


- [5.14.0-427.20.1_4.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-427.20.1_4]
- ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-33968 RHEL-31732] {CVE-2024-26735}
- idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-36145 RHEL-29035]
- idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-36145 RHEL-29035]
- PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-36541 RHEL-35032]
- cxgb4: Properly lock TX queue for the selftest. (John B. Wyatt IV) [RHEL-36530 RHEL-31990 RHEL-9354]

[5.14.0-427.19.1_4]
- x86/mce: Cleanup mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
- x86/mce: Define amd_mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
- x86/MCE/AMD: Split amd_mce_is_memory_error() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35302 RHEL-35078] {CVE-2024-26993}


Related CVEs


CVE-2024-26735
CVE-2024-26993

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_aarch64_appstream
kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_aarch64_baseos_latest
kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_aarch64_codeready_builder
kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_aarch64_u4_baseos_patch
bpftool-7.3.0-427.20.1.el9_4.aarch64.rpm98af3f622764a8df7a387ddd55017c5f5bb7bd9766abce99d93591889b589968-ol9_aarch64_baseos_latest
bpftool-7.3.0-427.20.1.el9_4.aarch64.rpm98af3f622764a8df7a387ddd55017c5f5bb7bd9766abce99d93591889b589968-ol9_aarch64_u4_baseos_patch
kernel-cross-headers-5.14.0-427.20.1.el9_4.aarch64.rpm7e9e414e0a2d3188f0b53edfeaa59d2ba6b5b78de41befdda0806d64c3fb9589-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-427.20.1.el9_4.aarch64.rpm2be4e189a39942bd348065d112b81756091155b133e665cc2d79976e1f774c27-ol9_aarch64_appstream
kernel-tools-5.14.0-427.20.1.el9_4.aarch64.rpm2c5a2ad37c1fb499fecf048b6edadbc4a4561dfd18e5f71656586856586b688e-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-427.20.1.el9_4.aarch64.rpm2c5a2ad37c1fb499fecf048b6edadbc4a4561dfd18e5f71656586856586b688e-ol9_aarch64_u4_baseos_patch
kernel-tools-libs-5.14.0-427.20.1.el9_4.aarch64.rpm0e5ca285b901b3a62c3409db82e51984cabb8f7279ed718953b1170786bfd283-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-427.20.1.el9_4.aarch64.rpm0e5ca285b901b3a62c3409db82e51984cabb8f7279ed718953b1170786bfd283-ol9_aarch64_u4_baseos_patch
kernel-tools-libs-devel-5.14.0-427.20.1.el9_4.aarch64.rpm0c70183eb3fa7c512ba9b7575fb185217d00c466b27a91b7c29313f5e13378e9-ol9_aarch64_codeready_builder
perf-5.14.0-427.20.1.el9_4.aarch64.rpm6f9e94b19da1c283851750cf1f977dca307864a9c0106b549f0f5057bc0b5a35-ol9_aarch64_appstream
python3-perf-5.14.0-427.20.1.el9_4.aarch64.rpm8db8fbc845a80b3bdd2f1877f95b6a41832cbb4684b3fe4b75969a2546902a50-ol9_aarch64_baseos_latest
python3-perf-5.14.0-427.20.1.el9_4.aarch64.rpm8db8fbc845a80b3bdd2f1877f95b6a41832cbb4684b3fe4b75969a2546902a50-ol9_aarch64_u4_baseos_patch
Oracle Linux 9 (x86_64) kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_x86_64_appstream
kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_x86_64_baseos_latest
kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_x86_64_codeready_builder
kernel-5.14.0-427.20.1.el9_4.src.rpm2d307afa95576143d05843a1997aa0e24aafb532aaf28baec01ec3386b527e7b-ol9_x86_64_u4_baseos_patch
bpftool-7.3.0-427.20.1.el9_4.x86_64.rpm7a7dbe34ef148f75d213a97693ff352f00aaac279927dd4b7012826834ddc4e1-ol9_x86_64_baseos_latest
bpftool-7.3.0-427.20.1.el9_4.x86_64.rpm7a7dbe34ef148f75d213a97693ff352f00aaac279927dd4b7012826834ddc4e1-ol9_x86_64_u4_baseos_patch
kernel-5.14.0-427.20.1.el9_4.x86_64.rpm286c3af1f4eda4a09b0f97b1774b5dd0dbd407687002025cec0b39a21eeadbe2-ol9_x86_64_baseos_latest
kernel-5.14.0-427.20.1.el9_4.x86_64.rpm286c3af1f4eda4a09b0f97b1774b5dd0dbd407687002025cec0b39a21eeadbe2-ol9_x86_64_u4_baseos_patch
kernel-abi-stablelists-5.14.0-427.20.1.el9_4.noarch.rpm4592f2baaf5e5eb358e2f52c30aabad08a4f79a6c89f5b955c987fe9533ede60-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-427.20.1.el9_4.noarch.rpm4592f2baaf5e5eb358e2f52c30aabad08a4f79a6c89f5b955c987fe9533ede60-ol9_x86_64_u4_baseos_patch
kernel-core-5.14.0-427.20.1.el9_4.x86_64.rpm01b7548618b491537ad07bad7b829cafb1a24f0bbd3ed2d672c204d931a18551-ol9_x86_64_baseos_latest
kernel-core-5.14.0-427.20.1.el9_4.x86_64.rpm01b7548618b491537ad07bad7b829cafb1a24f0bbd3ed2d672c204d931a18551-ol9_x86_64_u4_baseos_patch
kernel-cross-headers-5.14.0-427.20.1.el9_4.x86_64.rpm3dc708844a2ce429888f4907a407882ed9113b6abc416c5f63cb41144452554d-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-427.20.1.el9_4.x86_64.rpm8f855f678893823707d3a9b7456e94c60baa39180adcc631bb86cf7305af2098-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-427.20.1.el9_4.x86_64.rpm8f855f678893823707d3a9b7456e94c60baa39180adcc631bb86cf7305af2098-ol9_x86_64_u4_baseos_patch
kernel-debug-core-5.14.0-427.20.1.el9_4.x86_64.rpm0ab27de9e85ee5b7769bbaed094ac9c35d76b02bd193418699b3161d25689a75-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-427.20.1.el9_4.x86_64.rpm0ab27de9e85ee5b7769bbaed094ac9c35d76b02bd193418699b3161d25689a75-ol9_x86_64_u4_baseos_patch
kernel-debug-devel-5.14.0-427.20.1.el9_4.x86_64.rpm5b1fb8e074847a95dee28ed9fcdc71d1b87385b9090b1db62ee82514a693f6cf-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-427.20.1.el9_4.x86_64.rpm2142fe3b79179c4a1588f9fd960307a5d2e7b0674cfe36c490924813b534c1c6-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-427.20.1.el9_4.x86_64.rpmb0fb143f7dd349508ba5977d5baf580de724bc3669ac63f74f2bc6f449f6c78e-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-427.20.1.el9_4.x86_64.rpmb0fb143f7dd349508ba5977d5baf580de724bc3669ac63f74f2bc6f449f6c78e-ol9_x86_64_u4_baseos_patch
kernel-debug-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm6e46aa156af9b5347662d267ab89ae70ecdacf75cd5c9c9cde3eb4919c7e6ea5-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm6e46aa156af9b5347662d267ab89ae70ecdacf75cd5c9c9cde3eb4919c7e6ea5-ol9_x86_64_u4_baseos_patch
kernel-debug-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm6cf7baa142c9edc8c1c7cd09f6eb2b6576256789264e87b12cbdf7c262c7bb2b-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm6cf7baa142c9edc8c1c7cd09f6eb2b6576256789264e87b12cbdf7c262c7bb2b-ol9_x86_64_u4_baseos_patch
kernel-devel-5.14.0-427.20.1.el9_4.x86_64.rpm89ee70913376a3f268447d36275e6fd8355ee80534c3f81b70339121e97104fb-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-427.20.1.el9_4.x86_64.rpmbb53d5cb653976512af7dfa2d783aca072be7876e05fc8644a4e9c72d2e8e838-ol9_x86_64_appstream
kernel-doc-5.14.0-427.20.1.el9_4.noarch.rpm2659d7c77dde3008197910ae5f65bb4777a54172410c4ea4fd23f2790b72a651-ol9_x86_64_appstream
kernel-headers-5.14.0-427.20.1.el9_4.x86_64.rpm549f40a891b116b4fea85a665daedc9de657c7d23169af180a13806ef1d92108-ol9_x86_64_appstream
kernel-modules-5.14.0-427.20.1.el9_4.x86_64.rpme0b7be32bb9d78c3a0202351e15bd819fc8ddc1827650f65bec676580701d955-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-427.20.1.el9_4.x86_64.rpme0b7be32bb9d78c3a0202351e15bd819fc8ddc1827650f65bec676580701d955-ol9_x86_64_u4_baseos_patch
kernel-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm4e7969c3462774ddd31ce98c25efd9750b4c0798bbb5a2ed982ae05e5797f9e0-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm4e7969c3462774ddd31ce98c25efd9750b4c0798bbb5a2ed982ae05e5797f9e0-ol9_x86_64_u4_baseos_patch
kernel-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm6f3dfdd5ba38b3bcbabad5b6bb6fd480822e4cdef01e258195b9b6f0bb6db382-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm6f3dfdd5ba38b3bcbabad5b6bb6fd480822e4cdef01e258195b9b6f0bb6db382-ol9_x86_64_u4_baseos_patch
kernel-tools-5.14.0-427.20.1.el9_4.x86_64.rpm797ccbe7752c5b3a29a32c985fc10411111e2f42ce03a8ed138584e5bc1525b2-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-427.20.1.el9_4.x86_64.rpm797ccbe7752c5b3a29a32c985fc10411111e2f42ce03a8ed138584e5bc1525b2-ol9_x86_64_u4_baseos_patch
kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64.rpme2407c1c60e1b599d0120c992d4f36f2a37a192ed3869fc447dc06d427e190a9-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-427.20.1.el9_4.x86_64.rpme2407c1c60e1b599d0120c992d4f36f2a37a192ed3869fc447dc06d427e190a9-ol9_x86_64_u4_baseos_patch
kernel-tools-libs-devel-5.14.0-427.20.1.el9_4.x86_64.rpm8871aab4f7ca97ee91377cd53c15ecfcee674d7e6e28a8918aa354a621e6b248-ol9_x86_64_codeready_builder
libperf-5.14.0-427.20.1.el9_4.x86_64.rpm165bf077ecd3379ab1fc98aeb9f99c2b66d263a5fba6049ebf6caf77f4579fc5-ol9_x86_64_codeready_builder
perf-5.14.0-427.20.1.el9_4.x86_64.rpmf04d5ac81e456735f3f4b4be6485fb6ba844047cdfcc2a5808d8bc1702744293-ol9_x86_64_appstream
python3-perf-5.14.0-427.20.1.el9_4.x86_64.rpme1263296ac86a4c4288252b1733975f4da48975dc45b52aa6fa6d99a7d3de483-ol9_x86_64_baseos_latest
python3-perf-5.14.0-427.20.1.el9_4.x86_64.rpme1263296ac86a4c4288252b1733975f4da48975dc45b52aa6fa6d99a7d3de483-ol9_x86_64_u4_baseos_patch
rtla-5.14.0-427.20.1.el9_4.x86_64.rpm38e4d2fa7f9daab40a9241fc1a8da450133cebd345706d075615a9c68eb08471-ol9_x86_64_appstream
rv-5.14.0-427.20.1.el9_4.x86_64.rpm452c23e86b890d557b3255c4f136df4197500967e2a537aa07bc72c01a301166-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights