ELBA-2025-4341-1

ELBA-2025-4341-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-05-02

Description

[5.14.0-503.40.1.0.1.el9_5.OL9]
- Revert 'crypto: testmgr - allow ecdsa-nist-p256 and -p384 in FIPS mode' [Orabug: 36638086]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-503.40.1.el9_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.40.1.el9_5]
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-87479] {CVE-2025-21927}
- ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-75438] {CVE-2024-42322}
- bonding: fix null pointer deref in bond_ipsec_offload_ok (CKI Backport Bot) [RHEL-75453] {CVE-2024-44990}
- smb: client: don't retry IO on failed negprotos with soft mounts (Jay Shin) [RHEL-85523]
- bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-73403]
- team: prevent adding a device which is already a team device lower (Hangbin Liu) [RHEL-73403]
- team: Fix feature exposure when no ports are present (Hangbin Liu) [RHEL-73403]
- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73403]
- team: Fix initial vlan_feature set in __team_compute_features (Hangbin Liu) [RHEL-73403]
- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73403]
- bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (Hangbin Liu) [RHEL-73403]
- net, team, bonding: Add netdev_base_features helper (Hangbin Liu) [RHEL-73403]
- bonding: add ESP offload features when slaves support (Hangbin Liu) [RHEL-73403]
- net: team: rename team to team_core for linking (Hangbin Liu) [RHEL-73403]
- netfilter: br_netfilter: fix panic with metadata_dst skb (Ivan Vecera) [RHEL-71956]
- bridge: mcast: Fail MDB get request on empty entry (Ivan Vecera) [RHEL-71956]
- net: stmmac: dwmac-tegra: Fix link bring-up sequence (Jose Ignacio Tornos Martinez) [RHEL-73478]
- kobject_uevent: Fix OOB access within zap_modalias_env() (CKI KWF BOT) [RHEL-75435] {CVE-2024-42292}

[5.14.0-503.39.1.el9_5]
- igb: cope with large MAX_SKB_FRAGS (Corinna Vinschen) [RHEL-75552]
- x86/sev: Ensure that RMP table fixups are reserved (Bandan Das) [RHEL-84716]
- ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-75456] {CVE-2024-46826}
- smb: client: fix double put of @cfile in smb2_set_path_size() (Paulo Alcantara) [RHEL-79342] {CVE-2024-46796}
- smb: client: fix double put of @cfile in smb2_rename_path() (Paulo Alcantara) [RHEL-79342] {CVE-2024-46736}
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp (Paulo Alcantara) [RHEL-79342]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-503.40.1.0.1.el9_5.src.rpm	462c69195e5e1e70b7de426da39454dab995a8c255ca3626fb8b75e1497dafb3	-	ol9_x86_64_MODRHCK
	bpftool-7.4.0-503.40.1.0.1.el9_5.x86_64.rpm	b786d3f49e1071e079e2f4e3bb8b115123831acd40125c479415437f6cfecfc6	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	04d9bba1fd658e3b677032bd6deecd1bc24508ab31f4bf14c8c2cabc6271272c	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-503.40.1.0.1.el9_5.noarch.rpm	ee69658661f057357639f7b4e17d968d3c1fedc62bd0ccc3b888106f948639ea	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	bbcc0a292a86b9a226f794c581800cb6e3486ac3596a64b793f7f008bfcd3851	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	0caed424bb4471840878bd07d9dd86347874ee287f4ed727150f81922d88bcbc	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	39d7dc8c464127b32118a09a3e4efd640e891cc92fb94fdd2c0d3f4d732bd42f	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	ced936f3c2173e4721d27ea585956504b2c20e7e7e29e702961ebe404fe00d28	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	62ab8323d39c2dad8fbb29d6ce23dcb1bf3860409abd6e114a17ed5b68dd5de9	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	ea6cbae5dd92b292f8199cb01d2a73aaf61c39f6550df8997cfb77561dbefb94	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	f189f19f7b7eb94ff419df08bc19544b39f59afe2228e125ca8a77f949ee9e4e	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	04887896042ce7bc5e8674c9ce72ca627f70f0572fe969c378c679f5aee34501	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	ad871ba337df688cd89eb0f5d422ed18036cdb524ec9512a76690805c749cd7d	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	da583930c3c3ecea5c524172cc6e4c045327b1b4bae9bb856a121fd477186030	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	c931d6c9d3b045e3998ac11fc42c3bf4597055249cee8b364ff1dd6d9cab8859	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	1ad0e63001f1965d8c65f5b9fa7107bb39e79500b99bf836e6d569c89572b8a3	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-503.40.1.0.1.el9_5.noarch.rpm	a68e5ad87b00da41ecd9a3bf90687456af1fb56a4568e4b2daac6e489363d4b1	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	b482deb39fd17ca64fd460a3c7c37821957a7d7ad35f7e9f72107a55c446a238	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	10dd8ce52c4f4c3d7baf4772d5da4097222c67de1f0d580bc6ebfa874eefadbb	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	5508352ecf69ca984864e5d236bb1e341a8020039b0e3b86d5f8d282360ba2cb	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	802e68102e4a15ba348eb0ac69358919746f8e9f9c2ce3ee43946c890580e377	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	cac3db48603628cc23709e2a5c700afcaba5392fbd6d75050eb813d843b1ae9a	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	a38582ce62e25168a499b37f37f852d8a438a359ef1cee0e605c534c4c7a8054	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	116c23cea7cc51d15d05cbb358a1eedc62dee77c95455045dfdd9abb0ac89946	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	ae795c5a52f1ba98fcf38ec2e339e475f130444001368a189a47104d6ed22589	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	7d25e2aa01c08807ba38688de8dcd429d976202fd0535d4c1965131168904fe6	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	ff998c828619b26e814f9419c1398bf33cf2d9512cedf718fb2ede48f0c576a4	-	ol9_x86_64_MODRHCK
	perf-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	8e853ed412530d3ab479b492ab095561854bbe93fb60592cf687096b6f23af9c	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	9399e443db3ee15f6c1a587b0ef36fb23cf49641e882ddca93d03409ca28ba92	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	e32b637c920cda90d07f67621e138f3bfd15639814c5fb32d6e284da2795d69e	-	ol9_x86_64_MODRHCK
	rv-5.14.0-503.40.1.0.1.el9_5.x86_64.rpm	522a2f68ca3954592e6e1c75b31fa16edfbf30eab3eec09ce257f61cb76ff39e	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team