ELBA-2025-10837-1

ELBA-2025-10837-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-07-15

Description

[5.14.0-570.26.1.0.2.el9_6.OL9]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-570.26.1.0.1.el9_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.26.1.el9_6]
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98996] {CVE-2025-21991}
- cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-90212]
- smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-97482]
- smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-97482]
- Fix mmu notifiers for range-based invalidates (Jay Shin) [RHEL-93743]
- vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-88275]
- vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-88275]
- mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-88275]
- vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-88275]
- vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-88275]
- vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-88275]
- vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-88275]
- vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-85623]
- vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-85623]
- vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-85623]
- vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-85623]
- vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-85623]
- mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-85623]
- mm/x86: support large pfn mappings (Donald Dutile) [RHEL-85623]
- mm: remove follow_pte() (Donald Dutile) [RHEL-85623]
- mm: follow_pte() improvements (Donald Dutile) [RHEL-85623]
- mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
- KVM: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
- mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-85623]
- mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-85623]
- mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-85623]
- mm: new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- mm: remove follow_pfn (Donald Dutile) [RHEL-85623]
- mm: always define pxx_pgprot() (Donald Dutile) [RHEL-85623]
- mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-85623]
- mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-85623]
- mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-85623]
- mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-85623]
- mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-85623]
- mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-85623]
- mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-85623]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-570.26.1.0.2.el9_6.src.rpm	8fb537f7e74fa27afaf591e0fd4f20d5b97cfa81b7c2f7d9e4a65020354dba9f	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	fbdadb6c1e2e81254ab5612b708cfc0b981db178f7fec8c1be0621c41f304a85	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-570.26.1.0.2.el9_6.noarch.rpm	c7e9ed18e3f410baf50fcf5f18d4506e3c8717491bc335ece52401d556a7f6ad	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	9639ba2208e8e402345dd94e672ed2f69056e7756dde6bcbc1913c811ab41545	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	8829858939e7a870338a195fb72942c4d8366edf77e560e5ceeee869663544c0	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	e894f5bbe3caff22f66f0e855d6ca0f5608ff3827e2e212d35133143041519f1	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	d9a6337db0689b1596b6c8db7f23e8e4b298746e2ee9ddbca858e88152ec9b0d	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	2973156878a05bdd98d15891f85324e4d67137ef427e29f43da41f62f36c3ff8	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	6af61928eb257c73958901507430b3d01e04de10befcbdbcc2100bde995063fb	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	529e2695d497c37495c31843a3e2c95eea8c469c6bf7b054081527e7c04a7784	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	b54d73eec32e860cbe2df9cb0606723d110aad70216efcf041abce469e0bac73	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	0c287b085bfba9293d8c71dc1a903a78058fb28922cb96188169de0fa3722f5b	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	f24ef03be45394274ea5b170de7b78c15930cd6053be96e8f0279f11310788b2	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	cdf7a5c0f142556cd87516cf55005f64cc63dcd17ea839290a25454e4baad5db	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	43b6066b872797ffd761f51423b540ba831aa4b7428b226b8d6217c8b4bedca7	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-570.26.1.0.2.el9_6.noarch.rpm	5f47981e1c50ce04d6e07e0d38aea7b34f3eadb448552324f97c71de5ca55065	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	dff1bc8ed136153f9a4f4074a412cdf2a90eb950a91770dce45f4ad06c42323d	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	0307af7ec8843dd24d11af8e5f68c75d0523d8cf6f42d46dfbb9eaa129401d6e	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	90c7bdfc38842bba7ae720dfa6bade5e510c58a1b96667a0824fed3f870af27f	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	3351a94d3d0ea328372e1f8d341494dbcfd3a231bd402ee66631e8cb0eee2a09	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	c5a6e62d96e808a962e4f426d97d6d35742d00643640a7102f8612520c25ec91	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	86d2a7892f8a73a1bddbb1cdcdb5be81db465f858c262d6127c2dff05df45758	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	1e9bce33f217b73864daa7a7c3068050ef2a5f60f2895567f2ff6a63958b4640	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	1b7af5c1de4b19d358bff424487291ee143ce82baf689e4d0ece5605a530d9a4	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	03f090df4784c834b04bbd04de28d93bb371f51e86ba975df6667387a52ed5d3	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	7313e2d89c776e4819e3259c6d4860555d21b6ac891044fc85b5558021b64acb	-	ol9_x86_64_MODRHCK
	perf-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	feddb1b7e82bbf6d1a66de9788a8bc21a36758b12a240d643ab9a3f3f111f533	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	a8e3b8a95d8cfdd469553fea3b47704e8e09740877d7284dc9169be5805f71a6	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	16fca00bac6f90e4bd33e8edb1dddb622709540056af546d783bf193c48e337d	-	ol9_x86_64_MODRHCK
	rv-5.14.0-570.26.1.0.2.el9_6.x86_64.rpm	7b9889b9b763a1ad4e33a187d6a39303bf60f1c0eddcf89e8347a4dfef2e60f0	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team