ELBA-2025-12746-1

ELBA-2025-12746-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-08-05

Description

- [5.14.0-570.32.1.0.2.el9_6.OL9]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-570.32.1.0.1.el9_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.32.1.el9_6]
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Davide Caratti) [RHEL-97522] {CVE-2025-38001 CVE-2025-37890}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97522] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Davide Caratti) [RHEL-97522] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97522]
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98847] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98871] {CVE-2025-21929}

[5.14.0-570.31.1.el9_6]
- Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (David Marlin) [RHEL-95324] {CVE-2025-37918}
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Desnes Nunes) [RHEL-99029] {CVE-2025-22020}
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (John W. Linville) [RHEL-97499] {CVE-2022-49788}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103087]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103087] {CVE-2025-38052}
- md/raid1: Add check for missing source disk in process_checks() (CKI Backport Bot) [RHEL-97439]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101317] {CVE-2025-38087}
- padata: avoid UAF for reorder_work (Rafael Aquini) [RHEL-97031] {CVE-2025-21727 CVE-2025-21726}
- padata: fix UAF in padata_reorder (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- padata: fix sysfs store callback check (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- padata: Clean up in padata_do_multithreaded() (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- platform/x86: dell_rbu: Fix list usage (David Arcari) [RHEL-100908]
- cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87900] {CVE-2025-21962}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-570.32.1.0.2.el9_6.src.rpm	d88eb76f42b6441a0e9eb212dcb1f2efc43633758b56ddc75d1daa785e0ca399	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	3bc53e3fd7cf6b92d4e693b72bb76341b8985d9feb055b8a0a433237d8060e07	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-570.32.1.0.2.el9_6.noarch.rpm	23a997529a8d64b077f9eb1e1a159bd24965f55fa0edb01877ce213e4afdefc2	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	40288b6ea00076b865ec2ca87d58bcfa9c83ee8e2184a4c95cbb73b6e5b0d727	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	678de2b5b29cda0888a8dc6a2cee718d34232abdf4fe7f66f59e1bd0a5a2ac97	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	6840a6a8e6b4e0d8cad8902d291af218cc1619ee56e0de7433a212960fa43e45	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	69c461d328e4983271ceae3519ecb2e2cc9ec3e27c9b14918998d24a8a3d898e	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	1af909614b67ae87f865c0678583b6d108ffba8937093156f3fe1b9261f3ad43	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	aa82f3feff43afc13f330850949bb2f0bc50ab8d0635f268017360233ba87798	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	62d8d0d7c32eadc03f46e14b4d6240b0ecbae1814bf6e7241afcfd94f379dd78	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	987cc3426adcddf0f7ced9d36b97fe1f025b5a973682dc9c25bf39f6a0818c61	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	ef2a19fe7c32dd80472b64096a6f44029ba6426e59319e5c5b20af10d545ee57	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	d23de12d17b741b911afa26b61a13e61588b6afcfce6f69f8c33cfc078ce45f9	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	800765f16d55afb6fc5558ddecb6440a23ba069d7c37be5f04e29fd8b41a795a	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	3fb68cdc08cff9504a5069d446b030845274d6ba9f71e30e7fa4b9fe82ab2e7e	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-570.32.1.0.2.el9_6.noarch.rpm	155afd828ab63a6c92e53c7aa376608f6ad550c9ba627a5dc34192774d8c4013	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	c87272fe17442d63be606ba38858148f5c4e57bf5e58b13fdd884a437ddc192a	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	f28eb82a80b372a5e48532383cd096cff1a939345dffab5c77ecf5dbf0d889da	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	b59041e46c4df7066a519f92c2f9d015ef387f7f4c517ed7d2a250b3da4d9df1	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	24d38cd7f459232ca136354add99826cfbecdf757bb25ee2712b022f1707836b	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	c4d2cb8c66febdabdea4f69c84288741f4dd2cc45d9568fdc88ac1c88b3c4a66	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	c7b88e188cfd39981ce4a2dde53f74ca293517b7cdc9482981a42d3a26a8e811	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	15d4dcba9554d2d733464a335b03bc36ef032b2c8f3219b753d45a011619f613	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	d84f1732b1f7650cdd480f4a926609a174b9f118528ae3b99ee30884c727507e	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	c7db3229dedbcb83e24e0226a1a7bee3e4b6b522f6ce751e988cdd998ea1f9b6	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	a4cef81d7a8e99a44c02113cf69ec3b08b0d2a6a64d4e2075ee153dd2d6dc491	-	ol9_x86_64_MODRHCK
	perf-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	57bc3e570b0eab43c400907d90cb9284b31983f7ed2f8696f0884e63ad63dd4a	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	c6dd3f9745b0a86de44e4495e1e6c5b5bc7fd9cb56cd5e52456f246acf4ab93a	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	6d0fe166c30190ad5be1e47ca51c196230e44c2befdacfe61157c267cf959af3	-	ol9_x86_64_MODRHCK
	rv-5.14.0-570.32.1.0.2.el9_6.x86_64.rpm	5b3ec769f0584353637c409bf233f7ef06b6c3e922003cccc85428a37b89168b	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team