ELSA-2025-10379

ELSA-2025-10379 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-07-07

Description


[5.14.0-570.25.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.25.1_6]
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99124] {CVE-2022-49846}
- vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97110] {CVE-2025-37799}
- NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-95252]
- ipv6: mcast: extend RCU protection in igmp6_send() (CKI Backport Bot) [RHEL-94673] {CVE-2025-21759}
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CKI Backport Bot) [RHEL-93445] {CVE-2025-21887}
- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93132] {CVE-2025-22004}
- block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-92268]


Related CVEs


CVE-2025-21759
CVE-2025-22004
CVE-2025-37799
CVE-2022-49846
CVE-2025-21887

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_aarch64_appstream
kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_aarch64_baseos_latest
kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_aarch64_codeready_builder
kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.25.1.0.1.el9_6.aarch64.rpmef509f786570a7861a6303add04e8be686d3ab63a515a5deba21786e5693ce63-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm8e0e41cf203132c2802e63488c158fd33eb9071cfc3bd91549c25b6f41572cbf-ol9_aarch64_appstream
kernel-tools-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm2687fffcf00e0eab6b0e19338509d7fd29c19271d8fa3591351a726657405568-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm2687fffcf00e0eab6b0e19338509d7fd29c19271d8fa3591351a726657405568-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm6066c36a55385970bac3fdd04a237b9c6741971c7bce6150640226e6aa8d18a9-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm6066c36a55385970bac3fdd04a237b9c6741971c7bce6150640226e6aa8d18a9-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.25.1.0.1.el9_6.aarch64.rpmabf2ac91ad732c9e0e916126915cb7fafef4a19ea3eed6f45753c6e3caffb4e6-ol9_aarch64_codeready_builder
perf-5.14.0-570.25.1.0.1.el9_6.aarch64.rpmf5ab1db2be1db7aa622241dc3b7581357c1a653b3ddc4fb97a71c6448c3b8e73-ol9_aarch64_appstream
python3-perf-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm11edae62504a1b10c50886871a2c6b448cb2ce2c41cea57fe48868c0eadfc920-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm11edae62504a1b10c50886871a2c6b448cb2ce2c41cea57fe48868c0eadfc920-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.25.1.0.1.el9_6.aarch64.rpmea7241e22025894e7b64e7d5d80093cb5c15555abb7b4fe0cbc319a3cf574a10-ol9_aarch64_appstream
rv-5.14.0-570.25.1.0.1.el9_6.aarch64.rpm457a04f16411c87a71f09364976cdbf792382491c9182b0a1c5385e15b77be99-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_x86_64_appstream
kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_x86_64_baseos_latest
kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_x86_64_codeready_builder
kernel-5.14.0-570.25.1.0.1.el9_6.src.rpm9e55c1968fcdb7357a1903ccd5e0793f727e21c6e9f218a74540b8d48bf63f09-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm5c87f21d123b0ce966bc95d13947d19ce836e83aec19436b8834e8278edc3ae0-ol9_x86_64_baseos_latest
kernel-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm5c87f21d123b0ce966bc95d13947d19ce836e83aec19436b8834e8278edc3ae0-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.25.1.0.1.el9_6.noarch.rpm3ad1ae416937347fa537fd5f06a9e3a8f72fdba85a47e8f727884d77af068c32-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.25.1.0.1.el9_6.noarch.rpm3ad1ae416937347fa537fd5f06a9e3a8f72fdba85a47e8f727884d77af068c32-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm0b1f80461d1bbdfa09c0cbdabbede9dbf32123efde45bd2ba255a83cd3594f63-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm0b1f80461d1bbdfa09c0cbdabbede9dbf32123efde45bd2ba255a83cd3594f63-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm7b1bb93b6df803048f29354249195fda4dd685ed77437b91a74dfe71e4c5cd78-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.25.1.0.1.el9_6.x86_64.rpmb5c02173a43722ab666c77faca1ad038e14703d86a11166d83a6b874d7d7d149-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.25.1.0.1.el9_6.x86_64.rpmb5c02173a43722ab666c77faca1ad038e14703d86a11166d83a6b874d7d7d149-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm67c110a8c263e6faea2bea2f54a8a084a6db9682226d7eab2a7e4cc96480f591-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm67c110a8c263e6faea2bea2f54a8a084a6db9682226d7eab2a7e4cc96480f591-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm2c3d3ffdbc045cebb75ccb20cebc6fe46ecde2e664c6f5638f927555a46c802b-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm72715fd432dda150b1d638a7a127d631b300e100ebbcd7c1ef33d4283c3c2bf9-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm16a32e2943b61077c0449a5bec47e156a317d31da39936b8473d0fce6e2fcbb6-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm16a32e2943b61077c0449a5bec47e156a317d31da39936b8473d0fce6e2fcbb6-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpmb6c2768a72cac3e3cd6962e1fda69690233608f30c6818625619822f27a43225-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpmb6c2768a72cac3e3cd6962e1fda69690233608f30c6818625619822f27a43225-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm929603cdbd76c6ee990f6ca0e815caafb98d06738f9f3e1aacf4edca65872c1a-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm929603cdbd76c6ee990f6ca0e815caafb98d06738f9f3e1aacf4edca65872c1a-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm5b05cea17e22e42bff262e962b4c4e396f52884419bcc69ba38659a26ec7d1ef-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm5b05cea17e22e42bff262e962b4c4e396f52884419bcc69ba38659a26ec7d1ef-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm095519c24a20e67b198159ce85dedfb392f1cb5b70fb47b2b054b70bd04b4d93-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm42ea562ce34be0d7a7a5a19035c82586f8fd784097033a016a530515baedfbdc-ol9_x86_64_appstream
kernel-doc-5.14.0-570.25.1.0.1.el9_6.noarch.rpm108ed7b9b90d4aee76cc091030f44969b3c56fdeb58c6028d5493a684949b928-ol9_x86_64_appstream
kernel-headers-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm51108f1681abae7eb9c28816031fc3c807559f46adafd99ee8be12cc7390c4a9-ol9_x86_64_appstream
kernel-modules-5.14.0-570.25.1.0.1.el9_6.x86_64.rpme1a29814726f09041d90ce3d6ada1c08aabf0dbb39c203cf81f59a59a3a6a65e-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.25.1.0.1.el9_6.x86_64.rpme1a29814726f09041d90ce3d6ada1c08aabf0dbb39c203cf81f59a59a3a6a65e-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm81f03bde3d9a4186cf34768e28210e4964abb06dbd9277e5e33ca63a264c1eaa-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm81f03bde3d9a4186cf34768e28210e4964abb06dbd9277e5e33ca63a264c1eaa-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm30ab9719641a75ac97a343cd55d27b95f2caf44a16c5135069e96c1e4cb58016-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm30ab9719641a75ac97a343cd55d27b95f2caf44a16c5135069e96c1e4cb58016-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm1099b46aec6df53a6f099a51f0879a7e28faa380e1c94beec79b645250ece573-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm1099b46aec6df53a6f099a51f0879a7e28faa380e1c94beec79b645250ece573-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm5083dec3ee121563b06efd0900ee689a353cc4be61ae9a44890340bbf4222f69-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm5083dec3ee121563b06efd0900ee689a353cc4be61ae9a44890340bbf4222f69-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm9cfc02f1e129c32871eae4fa0e3af3ff0729f23688bfae20737d7e0c4e04f54d-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm7a6503d45d3e0060ea0d7dcaefe01ebbea04c0628e28cbc6fda20082973cf564-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm7a6503d45d3e0060ea0d7dcaefe01ebbea04c0628e28cbc6fda20082973cf564-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm65854b2981799f647172e6fcbd74e4ccb876457ad075f4688ff97cfac498dede-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm65854b2981799f647172e6fcbd74e4ccb876457ad075f4688ff97cfac498dede-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm8126fe3fcecd2deb4ebd5ae439c5a21f495dde9a5d68588b536f641ac622d380-ol9_x86_64_codeready_builder
perf-5.14.0-570.25.1.0.1.el9_6.x86_64.rpmc3ef3c5d46b46aec3aaf5d16310ef4d1e30783b1a4423f16d1ba25eb538ea5e8-ol9_x86_64_appstream
python3-perf-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm41fd8e7e9ca371aaffb7171cb9ee3135c117938a3e9a972a2d1c03c9854d901e-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm41fd8e7e9ca371aaffb7171cb9ee3135c117938a3e9a972a2d1c03c9854d901e-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm1ac654da4905d71ef5b7ed4bd23032e0ddbbd6e484da2b23fd0f1049c29604a4-ol9_x86_64_appstream
rv-5.14.0-570.25.1.0.1.el9_6.x86_64.rpm07afcfbe2d6e027b06227e7c93fe4d6a572b3a5aa83ae22f4394520aed34c2ef-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete