ELSA-2025-22865

ELSA-2025-22865 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-12-09

Description

[5.14.0-611.13.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-611.13.1]
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124105] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124105] {CVE-2025-39925}

[5.14.0-611.12.1]
- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129776]
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124428] {CVE-2025-39979}
- octeon_ep: Validate the VF ID (Kamal Heib) [RHEL-117604]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116162]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-113083]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-113083]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-113083]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-113083]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-113083]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-113083]
- spi: Introduce spi_get_device_match_data() helper (Ivan Vecera) [RHEL-113083]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-113083]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-113083]

Related CVEs

CVE-2025-39925

CVE-2025-39979

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_aarch64_appstream
	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_aarch64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.13.1.el9_7.aarch64.rpm	5e8c51c2c6a0be592e4961373e8477371f2510a67f09ed8eecdd934bf7eeaf2f	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-611.13.1.el9_7.aarch64.rpm	6c8e00f973d2afc33b338345b307cc1f7cf09b631553278cf09b0f5a99bf0801	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-611.13.1.el9_7.aarch64.rpm	254f8dc5aed6cbb27a094563ba2631df4b074be195e5a867c738990c0807de6f	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-611.13.1.el9_7.aarch64.rpm	254f8dc5aed6cbb27a094563ba2631df4b074be195e5a867c738990c0807de6f	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.13.1.el9_7.aarch64.rpm	fc7199115b2c0990553a35fcd42257519037cf5f7677ecb4a014e7394cffc664	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-611.13.1.el9_7.aarch64.rpm	fc7199115b2c0990553a35fcd42257519037cf5f7677ecb4a014e7394cffc664	-	ol9_aarch64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.13.1.el9_7.aarch64.rpm	ff8aa7ef1b07b00725aad193e7c48a20d4d83a924c7d82856e25092c2f8e66c9	-	ol9_aarch64_codeready_builder
	libperf-5.14.0-611.13.1.el9_7.aarch64.rpm	45c93222ae1384e4a29d85390f313f42996d5f0916cebbcb6dcfc9521358256c	-	ol9_aarch64_codeready_builder
	perf-5.14.0-611.13.1.el9_7.aarch64.rpm	859053424780dd769d917ab7d0765de8794a0bb589a473befe01577fe65a3d75	-	ol9_aarch64_appstream
	python3-perf-5.14.0-611.13.1.el9_7.aarch64.rpm	d1a90f5015f6614f004c141fa716404f5cb8111e071710c4445fca71b4d1659c	-	ol9_aarch64_appstream
	rtla-5.14.0-611.13.1.el9_7.aarch64.rpm	c40a416dc226d00f3f07068f155a518aa594aaf92f8f79c03da2f14cfa64ca7a	-	ol9_aarch64_appstream
	rv-5.14.0-611.13.1.el9_7.aarch64.rpm	ee970aa8715b56baf44fc85d8b18e5bc19a7d7a16e56432e0d0a07bb7b43b2d3	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_x86_64_appstream
	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-611.13.1.el9_7.src.rpm	7f6a831d0122f8ad3b4991d13341ec4b3f1e4d7f432e9765a8904bd1a5021bb5	-	ol9_x86_64_u7_baseos_patch
	kernel-5.14.0-611.13.1.el9_7.x86_64.rpm	d0a02fa464e418e637310d510786c4f33925b72dadda44a2468dceea4635dda4	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-611.13.1.el9_7.x86_64.rpm	d0a02fa464e418e637310d510786c4f33925b72dadda44a2468dceea4635dda4	-	ol9_x86_64_u7_baseos_patch
	kernel-abi-stablelists-5.14.0-611.13.1.el9_7.noarch.rpm	8bb489cacd699204fdc0a5128a8ff6c60ce87039fd6edb76119b267d836d7782	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-611.13.1.el9_7.noarch.rpm	8bb489cacd699204fdc0a5128a8ff6c60ce87039fd6edb76119b267d836d7782	-	ol9_x86_64_u7_baseos_patch
	kernel-core-5.14.0-611.13.1.el9_7.x86_64.rpm	1d0133f6c4b5a0db9ea1c3fa424b0c10753284444acaf6eb92845c5e74ee1dfd	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-611.13.1.el9_7.x86_64.rpm	1d0133f6c4b5a0db9ea1c3fa424b0c10753284444acaf6eb92845c5e74ee1dfd	-	ol9_x86_64_u7_baseos_patch
	kernel-cross-headers-5.14.0-611.13.1.el9_7.x86_64.rpm	7f62a7634b2c0b72cc3444aa55f94d5c4061f9e828fe0fcd388aea796b07103e	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-611.13.1.el9_7.x86_64.rpm	4f3d2c0f3d80b080fb910cb4a755a0f49dfadbbff8b927f54028238edf6e6bad	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-611.13.1.el9_7.x86_64.rpm	4f3d2c0f3d80b080fb910cb4a755a0f49dfadbbff8b927f54028238edf6e6bad	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-core-5.14.0-611.13.1.el9_7.x86_64.rpm	161c096ebe9f3472781d3bd69e29961e7c0ec74e7b237e093e4e4edb871a1c19	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-611.13.1.el9_7.x86_64.rpm	161c096ebe9f3472781d3bd69e29961e7c0ec74e7b237e093e4e4edb871a1c19	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-devel-5.14.0-611.13.1.el9_7.x86_64.rpm	a94f69245c71b18818585b1871969e05e57c7324f0ff4e5cfa190c56cdc35252	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-611.13.1.el9_7.x86_64.rpm	3ca3436d728064e6259eba219ba2b40c828e2fef136421651d98a452e5a371d1	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-611.13.1.el9_7.x86_64.rpm	8577c27258848f4b600b68a5501af3532c7492e9f34283f4225b438ae581dd47	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-611.13.1.el9_7.x86_64.rpm	8577c27258848f4b600b68a5501af3532c7492e9f34283f4225b438ae581dd47	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm	8878fc98d23745e56af8555044d792c2f353c879837e70a0d326e332a6bced64	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm	8878fc98d23745e56af8555044d792c2f353c879837e70a0d326e332a6bced64	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm	2f582f805de4654d7bfba2a760df533e25b349af953bf041c28f6c883984ea3a	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm	2f582f805de4654d7bfba2a760df533e25b349af953bf041c28f6c883984ea3a	-	ol9_x86_64_u7_baseos_patch
	kernel-debug-uki-virt-5.14.0-611.13.1.el9_7.x86_64.rpm	4968d1dfcc7340a6075e1e496b883e0815d8024f5ff270fd076d56b94ff32a91	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-611.13.1.el9_7.x86_64.rpm	4968d1dfcc7340a6075e1e496b883e0815d8024f5ff270fd076d56b94ff32a91	-	ol9_x86_64_u7_baseos_patch
	kernel-devel-5.14.0-611.13.1.el9_7.x86_64.rpm	de155f8daac1419d5c2d83af7c472db61a0e4157489b1ce001c48c1bf6aa6ae5	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-611.13.1.el9_7.x86_64.rpm	b900a9ae508377df5f57821cbe1402621aed7de0187146a126c9a6475e68b439	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-611.13.1.el9_7.noarch.rpm	16f7b39b6d7b3f004c0f33e3fff53bebd8af1957c6a7755cd8d7e78e0987be4b	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-611.13.1.el9_7.x86_64.rpm	a1d847296343b2bf9300e1cec79273cca7503c5fa875dd78e6e3631a933ea4d9	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-611.13.1.el9_7.x86_64.rpm	f3f21ff4826f992542f8b214d69ec30ed68856c975a518ce1ffa76c3710035f2	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-611.13.1.el9_7.x86_64.rpm	f3f21ff4826f992542f8b214d69ec30ed68856c975a518ce1ffa76c3710035f2	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm	da464be8873eb36c2f2206b4efd27f7162d5029f8e55f22d3614a47adb30a819	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm	da464be8873eb36c2f2206b4efd27f7162d5029f8e55f22d3614a47adb30a819	-	ol9_x86_64_u7_baseos_patch
	kernel-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm	87755307ebc5636a33e82a046e7517e71a9d2f79864183a0a5b876058b219548	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm	87755307ebc5636a33e82a046e7517e71a9d2f79864183a0a5b876058b219548	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-5.14.0-611.13.1.el9_7.x86_64.rpm	a93bdd5979668a6517ca1007beea6ce9828156c816108ad4b10a983f90b5d65e	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-611.13.1.el9_7.x86_64.rpm	a93bdd5979668a6517ca1007beea6ce9828156c816108ad4b10a983f90b5d65e	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-5.14.0-611.13.1.el9_7.x86_64.rpm	6e398d92baf9a87c182c5d87ba89f3c83c792c70a912d95cebfe98226bc2557e	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-611.13.1.el9_7.x86_64.rpm	6e398d92baf9a87c182c5d87ba89f3c83c792c70a912d95cebfe98226bc2557e	-	ol9_x86_64_u7_baseos_patch
	kernel-tools-libs-devel-5.14.0-611.13.1.el9_7.x86_64.rpm	e876765bf0bcef756edf70d67e399d367ff2c357ff2280dd252923578b1005d4	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-611.13.1.el9_7.x86_64.rpm	dbec0418f4611943d8e87afba6b3eebb46dcb7dcd24217e10439c0ff6bd1bbd1	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-611.13.1.el9_7.x86_64.rpm	dbec0418f4611943d8e87afba6b3eebb46dcb7dcd24217e10439c0ff6bd1bbd1	-	ol9_x86_64_u7_baseos_patch
	kernel-uki-virt-addons-5.14.0-611.13.1.el9_7.x86_64.rpm	dbbd9fa011542cfa02b044350c975691ba5e193ac550c742bed8c1e7076a7b22	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-611.13.1.el9_7.x86_64.rpm	dbbd9fa011542cfa02b044350c975691ba5e193ac550c742bed8c1e7076a7b22	-	ol9_x86_64_u7_baseos_patch
	libperf-5.14.0-611.13.1.el9_7.x86_64.rpm	8ad21b25192a7445dfe2f3ca9be4e06d5cfdeacc14b48625a6d8368052d61a32	-	ol9_x86_64_codeready_builder
	perf-5.14.0-611.13.1.el9_7.x86_64.rpm	7d72efb8d763daf4af7038fbc14abbcbc031bf17debfc0c7821ab3807d5370b2	-	ol9_x86_64_appstream
	python3-perf-5.14.0-611.13.1.el9_7.x86_64.rpm	a0d8ad9fefd347519556513c996c05ce8dbbd4d47d286a4ccab6ccb9acb2fb40	-	ol9_x86_64_appstream
	rtla-5.14.0-611.13.1.el9_7.x86_64.rpm	cfb5ba7c89202e1f4b2d46827faa31f9b82717672124df6bfd12c86d34e9764f	-	ol9_x86_64_appstream
	rv-5.14.0-611.13.1.el9_7.x86_64.rpm	025d94b527590d64f7534a3ba26820cd47ed7b2fb128f04bb5d4659b322fe5ae	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team