Stay Connected:

ELSA-2025-10837

ELSA-2025-10837 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-07-15

Description


[5.14.0-570.26.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.26.1_6]
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98996] {CVE-2025-21991}
- cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-90212]
- smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-97482]
- smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-97482]
- Fix mmu notifiers for range-based invalidates (Jay Shin) [RHEL-93743]
- vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-88275]
- vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-88275]
- mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-88275]
- vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-88275]
- vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-88275]
- vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-88275]
- vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-88275]
- vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-85623]
- vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-85623]
- vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-85623]
- vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-85623]
- vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-85623]
- mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-85623]
- mm/x86: support large pfn mappings (Donald Dutile) [RHEL-85623]
- mm: remove follow_pte() (Donald Dutile) [RHEL-85623]
- mm: follow_pte() improvements (Donald Dutile) [RHEL-85623]
- mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
- KVM: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
- mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-85623]
- mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-85623]
- mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-85623]
- mm: new follow_pfnmap API (Donald Dutile) [RHEL-85623]
- mm: remove follow_pfn (Donald Dutile) [RHEL-85623]
- mm: always define pxx_pgprot() (Donald Dutile) [RHEL-85623]
- mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-85623]
- mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-85623]
- mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-85623]
- mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-85623]
- mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-85623]
- mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-85623]
- mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-85623]


Related CVEs


CVE-2025-21991

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_aarch64_appstream
kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_aarch64_baseos_latest
kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_aarch64_codeready_builder
kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.26.1.0.1.el9_6.aarch64.rpm04ebe64712cc19d0e95782ed389b69326d1041d8ea1f5f5bed077797c6286ce2-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.26.1.0.1.el9_6.aarch64.rpma55c90e559f25f6be374b4d947eac70a14805776cc2b06ea47b5c8271062bf1a-ol9_aarch64_appstream
kernel-tools-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmc1422d0f16d9f21934847d9b4e009cf523024883215b151caa7935006f465a18-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmc1422d0f16d9f21934847d9b4e009cf523024883215b151caa7935006f465a18-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmff6f5459e0a228e056cbcba2f988ab9046bdacd772896bab3f845f181dec5e35-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmff6f5459e0a228e056cbcba2f988ab9046bdacd772896bab3f845f181dec5e35-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmd9f990513987dc66bc2e19aab261f8df7ca32841073cd19a3454dd8673d619bb-ol9_aarch64_codeready_builder
perf-5.14.0-570.26.1.0.1.el9_6.aarch64.rpm810973237d90ded4e6ebd435fc6d95953fac79b91c0765d177dd10cdd530e7b6-ol9_aarch64_appstream
python3-perf-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmc0983dd3032a7c212d10cfabc32ea10472b9f0b91f63d1c10c433b7ce9659d56-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.26.1.0.1.el9_6.aarch64.rpmc0983dd3032a7c212d10cfabc32ea10472b9f0b91f63d1c10c433b7ce9659d56-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.26.1.0.1.el9_6.aarch64.rpm963cce416e091280b65110f3043878caab072abb07412c8b71a87e703a7b133f-ol9_aarch64_appstream
rv-5.14.0-570.26.1.0.1.el9_6.aarch64.rpm049d85c22d1eca9faf49d634490261382a40220901473860c07fb3cefe6c945e-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_x86_64_appstream
kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_x86_64_baseos_latest
kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_x86_64_codeready_builder
kernel-5.14.0-570.26.1.0.1.el9_6.src.rpm0b632914b23f3edd6042dca8c50bc0bb0679c8eaa755c87b954aa5e22d1d5f05-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm3f44c3f94ec023ec318f1c009bcf0e2d58b867c4b94c42d0364fddc36df75f08-ol9_x86_64_baseos_latest
kernel-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm3f44c3f94ec023ec318f1c009bcf0e2d58b867c4b94c42d0364fddc36df75f08-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.26.1.0.1.el9_6.noarch.rpm24d6dfeec5042bc73fda38d1ad3c44c28631ca1219cac078b0b342877446c189-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.26.1.0.1.el9_6.noarch.rpm24d6dfeec5042bc73fda38d1ad3c44c28631ca1219cac078b0b342877446c189-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmb7eb37a1e41d9dc928e7b05dab90e333fdccabd92bfa402175eacc0bbd73466a-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmb7eb37a1e41d9dc928e7b05dab90e333fdccabd92bfa402175eacc0bbd73466a-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm07a3186f8abe3f884a46d9925a28d65cae1bc1d176fe292cd9d29f80c7662167-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm2487bf593bbcf80259c976be165e497659bf08212eba7e7d2010ea1c8cbe8cdb-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm2487bf593bbcf80259c976be165e497659bf08212eba7e7d2010ea1c8cbe8cdb-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm516463d3b5fa691141819d29bb8e098569bcab1f7a7e62f7adbd19e5e7982146-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm516463d3b5fa691141819d29bb8e098569bcab1f7a7e62f7adbd19e5e7982146-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm8c76a7c630e28ff605530944c47dbb955b03d929add87b1b2fd8c21f475b2d28-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm8dca5f66c2244fe19028eb436b3be65f7d7d7d4a4d253d4fc445b19511a03d17-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmdafb90c37a8fee0e008bd67c36fd7aff93902019ab9e1179365d14a03ce29585-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmdafb90c37a8fee0e008bd67c36fd7aff93902019ab9e1179365d14a03ce29585-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmd2f814b8a6bec50a8c682835ab5d57252133a98ad42627422e923478b2bad4af-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmd2f814b8a6bec50a8c682835ab5d57252133a98ad42627422e923478b2bad4af-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm009e0521b09f69374cac805f4e0b1d3f85a3fc572a734f37e232da9c05c508dc-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm009e0521b09f69374cac805f4e0b1d3f85a3fc572a734f37e232da9c05c508dc-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmda2d2fce745ce0c4d9533808e8acb4f13d0d02aab790de0521c7b088fe5d3e8a-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmda2d2fce745ce0c4d9533808e8acb4f13d0d02aab790de0521c7b088fe5d3e8a-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm72da11a563831688b67b96fa62367171529f638eeb2b2769acecfd785393ef7a-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm7a78ab9a2cf3139f3ad1764e39d98fd5935842a38e11f97b4189d58d9dc944f3-ol9_x86_64_appstream
kernel-doc-5.14.0-570.26.1.0.1.el9_6.noarch.rpme7aef468f0cef2fa7e04037270531bdd54fcf5a7058e6c10e1f7f0017e8bf8e3-ol9_x86_64_appstream
kernel-headers-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm324c9edc932a3f218374e93c823acfb896a11eebc8d32888e7f52f161597d7e8-ol9_x86_64_appstream
kernel-modules-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm38b67bf34633731ec732e4d9b8415ee6e813af073e0d1641e29eab95a174baf9-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm38b67bf34633731ec732e4d9b8415ee6e813af073e0d1641e29eab95a174baf9-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm64776010211f64c13040c8fdb6c6ec04eb1a09f6c252368670f4cc3086110d7f-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm64776010211f64c13040c8fdb6c6ec04eb1a09f6c252368670f4cc3086110d7f-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm05e599abbef26e7468ce873e1c966c299c868e35c9f713e508b2f25b43aa0fde-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm05e599abbef26e7468ce873e1c966c299c868e35c9f713e508b2f25b43aa0fde-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmde65e0ccd397af8c52589c4f1eda84da7690c4b4e7fd89d69efcfce204cbc63f-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmde65e0ccd397af8c52589c4f1eda84da7690c4b4e7fd89d69efcfce204cbc63f-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm78c0c28459aaf915a6d738f1e345fd8a02610bed5ddd3f3fca279d14e8c6ae88-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm78c0c28459aaf915a6d738f1e345fd8a02610bed5ddd3f3fca279d14e8c6ae88-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm7565b676beae194298cf665fed42281c9f82af249fee03c4be855ae37578a8b5-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm33dadd2c60cb28e1392be58a0f9137d8cfd5837f74158c7fee00da85d50d5d9a-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm33dadd2c60cb28e1392be58a0f9137d8cfd5837f74158c7fee00da85d50d5d9a-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm5ac21a729477b822cfacbea7311753b31b89fe5642f931225b2a1b14d8682b43-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm5ac21a729477b822cfacbea7311753b31b89fe5642f931225b2a1b14d8682b43-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmf414d887e03b43a9a7a131fca14ed0187a1f3e27ce6a06366ccd1f93cf623aa5-ol9_x86_64_codeready_builder
perf-5.14.0-570.26.1.0.1.el9_6.x86_64.rpmf612162a05baf5e8999b098f06c37bacb16598600e2d678954d6deee09df1ca7-ol9_x86_64_appstream
python3-perf-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm777cfee2ff3f14f2005f3990b5f0da7ff4d6072bb75903326b44d6ab484ad945-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm777cfee2ff3f14f2005f3990b5f0da7ff4d6072bb75903326b44d6ab484ad945-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm9cca537db22f43df3a7f8e715b654af8ad0f40ecccf485fdb6e797c4db758b30-ol9_x86_64_appstream
rv-5.14.0-570.26.1.0.1.el9_6.x86_64.rpm50d91b341d8fefd9ea538925922484d020203e85cc54f6dd72d69c2e5e673572-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights