ELBA-2025-8643-1

ELBA-2025-8643-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-06-11

Description

[5.14.0-570.21.1.0.2.el9_6.OL9]
- Update module name for cryptographic module [Orabug: 36324521]

[5.14.0-570.21.1.0.1.el9_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.21.1.el9_6]
- xsk: fix an integer overflow in xp_create_and_assign_umem() (CKI Backport Bot) [RHEL-87911] {CVE-2025-21997}
- vlan: enforce underlying device type (Guillaume Nault) [RHEL-87884] {CVE-2025-21920}
- net: fix geneve_opt length integer overflow (Guillaume Nault) [RHEL-87974] {CVE-2025-22055}
- net: gso: fix ownership in __udp_gso_segment (CKI Backport Bot) [RHEL-88333] {CVE-2025-21926}

[5.14.0-570.20.1.el9_6]
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93253] {CVE-2025-37943}
- ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87985] {CVE-2025-37785}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-570.21.1.0.2.el9_6.src.rpm	1fd0b6a528357c8b1e6f27379319a5a4449ba22a31dcf3b06ec19f5ec68db407	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	2c940b135d1f04b4a005466aa9d42d5c4d40c2f9156fc9e30185319fc7dd4202	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-570.21.1.0.2.el9_6.noarch.rpm	388089712ded3f48492d6f26aa24b2f6f142eb38eeb5c91565aeec6d6afee685	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	cad45378dfda61ef0f64d9b2f3692625570469e15a32f928dc508cee9a03322a	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	6d161efa40dd47e2fe500354007beac1729eacea576a920e297389dcc4c04d44	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	45d9a826b26c2b2be951ef54cc299a706c7f78fa6531c77c082d595c198fd8ac	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	1e23842d396aa8c3ca92a2601aab597edcd9d9b38ec34f94f893ed4a70cbf82e	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	f8fa0e2cecfe176331308dc834cc7f902564c8390b6d919767d8ade926fc781e	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	2596538f709fad031b7cdbfb9072e7a35e94cef407460606212c0452c927a0dd	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	9ca839ddbd74baaeb469af4c2d1b4fdd748279958fc1d1c182f1ceef3bd07fd5	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	278325ff178d381bb78463a70c54d7ebd27af6bd5a797dd9e2655d3def7bdf03	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	c3dc6db309ba260367d4653c21a2954b76ac0c11951e5fac79c5d7d7bed27bf4	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	f21737620924e5c7011f861f1c571c3b6a602473ca15b1707a1c0dd3ec2ca469	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	af5732b9a526462fac088b32dfd3a45dde6e0243b7766a9d1f5a36dbb72f6acb	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	e2441b19a9fe161d1d4d963daefbbf7f806de91acc9f38924fb6f59d0e8f373e	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-570.21.1.0.2.el9_6.noarch.rpm	8ca6bd4d803f6ce7001e80404bc6adcb02f5449b2f22db0f7c2edbc3a53b48ec	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	0930377a5c59cfdd2aa51716c9bed9b715a25371b65caa88e12d3a3a2f288281	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	c41dee52de4da5bb94b3427e9d2475cb2deae3ef1c39404dbf37b67d8dad670b	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	a8591d06882bf728725a6b46ad35d269a3cd84f398f34fb13ced7a476a492ca4	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	cd2e296ac3acb295e4186cb9edc85db70dbffc8bc4262b46b4ab9576b579b7db	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	bff1590d1f0bb64ef384c5c1b81df5438fca487dd48dabbf97ec4cce06c5910b	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	bb9bfce66dd9f42a0c2adc0c43088edbc27a5c37dc3e9ad495b3bf3240c1bd19	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	d85ef9d040628ec64bd3d13e0362fadc79da81f5e11acd8856d7e141527a7c97	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	dc0b570be0f30a52568f9d8b071aac5c31306b077259c367357de97002bf6580	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	e7985a2881bd47ccad94139a6ac31febf47c443ff52d774a9645ebdfe570b14b	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	b11b4739323b20d1bf8c4ec743d35aae8b850176fe4e47c189467d72282629af	-	ol9_x86_64_MODRHCK
	perf-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	6639df174451f8d070ed71d1c2da0737baa0e0c08fddbf47148318f6e749589f	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	365f8f3ec179980fb850c0807c50666208c57800208ed3fd1f81c7595c82a97e	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	50e1ef1c72653a0721e299ac255b8c1d8eb5ba5947869e0ce9ed4d91b6e97a01	-	ol9_x86_64_MODRHCK
	rv-5.14.0-570.21.1.0.2.el9_6.x86_64.rpm	60dbaf49389ea4506a1c1303a4dc194a4ce10e75fc84bd379554e9840c962fd0	-	ol9_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team