ELBA-2025-0059-1
- ULN >
- Oracle Linux Errata repository >
- ELBA-2025-0059-1
ELBA-2025-0059-1 - kernel bug fix update
| Type: | BUG |
| Impact: | NA |
| Release Date: | 2025-01-13 |
Description
[5.14.0-503.21.1.0.1.el9_5.OL9]
- Revert 'crypto: testmgr - allow ecdsa-nist-p256 and -p384 in FIPS mode' [Orabug: 36638086]
- Update module name for cryptographic module [Orabug: 36324521]
[5.14.0-503.21.1.el9_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
[5.14.0-503.21.1.el9_5]
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
- mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
- mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
- net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
- KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]
[5.14.0-503.20.1.el9_5]
- bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
- bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
- kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
- rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
- context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
- perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-503.21.1.0.1.el9_5.src.rpm | 21fe7e63182260c6d40f6cd20a25abb272bed6a2faa4599a16ff035b3214e97d | - | ol9_x86_64_MODRHCK |
| bpftool-7.4.0-503.21.1.0.1.el9_5.x86_64.rpm | 34bf48a2baf669be8da1abde3de033a544cdebc5b26e763f033c5e4d2c48140b | - | ol9_x86_64_MODRHCK | |
| kernel-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 1709cd15c7f87f434c869d0bf2750c65a9b6d566b2b752fb68c0df229cd4b162 | - | ol9_x86_64_MODRHCK | |
| kernel-abi-stablelists-5.14.0-503.21.1.0.1.el9_5.noarch.rpm | 7708a73bdb92e0c9aa2cabe017d4ff99bbb4a1db5799f618440bb727319dec7f | - | ol9_x86_64_MODRHCK | |
| kernel-core-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 0422fb70d02b6b80db4a4282ca10a0dfa20fa69831657c96d3dee2c5e450d3af | - | ol9_x86_64_MODRHCK | |
| kernel-cross-headers-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 123a04da4d648081a3e99ec1b1116aa53a159ddb50a24b2b9362e0b39da8e352 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 4c019072d93411723c1ec7e0523f2f0bd77246006f5fcf4cc17ede6babb82917 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-core-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 753c645a8423d48a90982c93b19906689a3ad4f2de93a27667d7c2f004b6657a | - | ol9_x86_64_MODRHCK | |
| kernel-debug-devel-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 9c168064c5699907878269d96a35317274586dc7d107eba633d6e06af01ca291 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-devel-matched-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 3eef35796065d0ec1f2f18e78cc29050dbf2f66fe0fbe1516de0b58d07e910d8 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-modules-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 2023be6729c4a7ff6fc7b22245159552c68629689883abdf52f5035ee09ab830 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-modules-core-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 67427c89587d431dac9a914d53567586215ceeecee3df18dfda8ab657c255942 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-modules-extra-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 7012761589b1fe4261a00d21faa7e84b4e663069ba46d680fadf66a93ab99699 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-uki-virt-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | c381ab1b372c0e1af9cef311d27e99ec7a872152912da995d92d963cd8079b5e | - | ol9_x86_64_MODRHCK | |
| kernel-devel-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | c8dad3dd17fc0596cda1c1219ecb0c4d5d9429b18f1e30a1088ed51d3be5c10c | - | ol9_x86_64_MODRHCK | |
| kernel-devel-matched-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 380d0ff50c1b8e8aa306478f7d51454d3ba2a5c768f52c6045d7917e47594d22 | - | ol9_x86_64_MODRHCK | |
| kernel-doc-5.14.0-503.21.1.0.1.el9_5.noarch.rpm | 4ba198fea3600a454341463b706ffcaedb9283c9f154cbb89b08007fe0f5c699 | - | ol9_x86_64_MODRHCK | |
| kernel-headers-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | e7d385a592a1d9a06e9a562dc7d1f96e979e3efd516ab05ff46652a64f504ee3 | - | ol9_x86_64_MODRHCK | |
| kernel-modules-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 17ba88ff8c0376baadaf4989aced3e73315897a16912a899c2d59c080f531331 | - | ol9_x86_64_MODRHCK | |
| kernel-modules-core-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | c903c6f47a3ee423efee6d15ca9453acd5ec41ac0c3bb469ba89278fced8c864 | - | ol9_x86_64_MODRHCK | |
| kernel-modules-extra-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | bc9cfbeab912af28e37239f9efb61cf1bd9bc5456a3deb5149f5a9fba7cf3379 | - | ol9_x86_64_MODRHCK | |
| kernel-tools-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | bbd6b6af53ddfe717c18eb2ba58161122c32129ce9d0144214b7d517682492fc | - | ol9_x86_64_MODRHCK | |
| kernel-tools-libs-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 75b69de65918d899d5a281681825447044e386ea00ca3bae24a3b773dc3ead15 | - | ol9_x86_64_MODRHCK | |
| kernel-tools-libs-devel-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | eaeb064f34f7648703653953f4dd5de101b450cb33b840e73ac9cadbe0e0c8dc | - | ol9_x86_64_MODRHCK | |
| kernel-uki-virt-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 333fa315fec787520070db3d62ad5ad8d6d7914c1e9de88acb5da7b53c67e750 | - | ol9_x86_64_MODRHCK | |
| kernel-uki-virt-addons-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | dadafc6a783fd5a6e000e43435c170a0da4b8d50b15e85e6b2f6175465ad4400 | - | ol9_x86_64_MODRHCK | |
| libperf-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 54d8ec89278179f337d9b4d8dd26efca2accc2d6818491c7c27ae847abc6e18a | - | ol9_x86_64_MODRHCK | |
| perf-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 8edb06ef877be0e39e9c8ced3dc59597b9f5059af62a5e7f9ea78eea32915c8c | - | ol9_x86_64_MODRHCK | |
| python3-perf-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 881be275925df504fc819637feb39482892a504341d92fda7b6d884984bdc0ad | - | ol9_x86_64_MODRHCK | |
| rtla-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 8e2a2a9b729570222f82d81f46a9d6240c928a5457408ae90f3c0be002f24796 | - | ol9_x86_64_MODRHCK | |
| rv-5.14.0-503.21.1.0.1.el9_5.x86_64.rpm | 5472d49f8acfd609c4d9880f167cc0caba80c5a80b80a1d5f630246530db7c82 | - | ol9_x86_64_MODRHCK | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
