ELBA-2025-16880-1

ELBA-2025-16880-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-09-29

Description

[5.14.0-570.49.1.0.2.el9_6.OL9]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-570.49.1.0.1.el9_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.49.1.el9_6]
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114335] {CVE-2025-39698}
- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682}

[5.14.0-570.48.1.el9_6]
- perf trace: Add missing perf_tool__init() (Michael Petlan) [RHEL-105393]
- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-114962]
- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-114962]

[5.14.0-570.47.1.el9_6]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113916]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113333] {CVE-2025-38718}
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-113039]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-112558]
- ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-112873]
- ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-112873]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-112558]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-112558]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-112558]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-112558]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-112558]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-112558]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-112558]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-112558]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-112558]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-112683]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-112683]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-112683]
- ice: Fix E825 initialization (Petr Oros) [RHEL-112683]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82136]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111196] {CVE-2025-38527}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109571]
- cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-109525]
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106432] {CVE-2025-38472}
- sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-91800]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-570.49.1.0.2.el9_6.src.rpm	650a0dc2759fd738cf79499dabaed18da6c9e027a1255c79bc8bfce1169d0c14	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	3cb6f084e1e05bdb632f7617605331da8054d69713ae0e8c497f83a39724fcdb	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-570.49.1.0.2.el9_6.noarch.rpm	c270ccc7dcdadc5a70c335ee02c229ec082439e1152a46b76fb90d6f8db755a9	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	2a75288fa5edddca66e1f0771363b222fb7de1c5239c3cc9f3a36fc86ee19a97	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	00a42d5feeaf7d6f8bf1de079b02e30502b0f787568e4f60ab20e99003aced5f	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	d9e78b1b025d941484cf37e7b083af1ad2e9d86df125d8f436b7dc2f91ce8db4	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	a2491f50389faf74f552b4f079f036321d212ba1fb7f2b089227b23957f61a56	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	4efba7710f06d98023232307ec2a171b42c81249571b72c61a6ecef340586a50	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	9f9d4256db3967d16e3ccba300106fadecb32b6d828dbf84c4e3fbd5d6503f3b	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	f1fdcb96c57ea16ba434268bc2220e4ceaa2a6ee99e42f4ac11c63290afada97	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	96a4d4bd9b5bbff1b5382e620649a13ba3eeb9d16c43faf05ba55eb837e3eae6	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	19c2ad059db74db97d1bf3688803999af29a3b338a7f721f4f3788a8d6e26fed	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	9ea0b6191079e9d10faaa0bf9c83e3c5f772a7223ac7a7384db214205b203387	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	b138b1dd86bef97c5313cdbd73dbcf1204e92cc88800c2e2ac54b3b7c9ec1467	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	001caf7964e5f8edd19c3b54495e66158f03aefa10fd58eaf34244b17536c37f	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-570.49.1.0.2.el9_6.noarch.rpm	2dc9a6b66fef0c3d21cb4fb4541bf4aabc3c12e1204e831874814d6ddfd282a9	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	6030befcc9514133c92e8e22daf799c0df7e685a6e50dff28dd8914f7cf62e53	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	94d7b034c5cba1b190873b50ba29498db8a9d5140a361e16ca287258667c4332	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	b6657ad03a1a346083d707621eb271916a39f8db8950c40f19a7820c32285e82	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	72378557c2185a1f020f9ea51c8ee31b69506a1fd05fcfe26cc7ff77dc083228	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	2b5e4cf10d340bcdc69e011bd99fec60591cab2e835b857ae6e036ca0b16085e	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	5c9de733bcb9825841852e6655a2714b339d954e4083a92603704ba0f6225da4	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	099281b47ff4739ff4d24e9673d1501358ee6a73af73cad377a205630511bb88	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	749ba742c0087d8ccd6d4294918e572beba2a7334faf185d556fcc633d9494e4	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	8603eb5857a86ec9eba81598737959ad6591ae5d842e33d5e7ce86ada8415488	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	75bf498dff07ca09530144e2d5e1c939d5c37be9247b9622495c54c6811317c0	-	ol9_x86_64_MODRHCK
	perf-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	8ee472e1473ef601b2ef94755a766949aa48942ccd17597b74455a4cf7b7e3e6	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	14dbf75758d27efbf5448ca404b7492256423e833d5e390499a85d1e0c1d06ab	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	aa6738ecf68285eb358cdf49de69d7ad17f03c636ad71240d3feb820168f643a	-	ol9_x86_64_MODRHCK
	rv-5.14.0-570.49.1.0.2.el9_6.x86_64.rpm	771c570b02611ee9f5e870a017e0b9169c95a22db4277b8de8a840e0953017bb	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team