ELSA-2025-10854

ELSA-2025-10854 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-07-16

Description


[6.12.0-55.21.1.0.1_0.OL10]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]


Related CVEs


CVE-2025-22036

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_aarch64_appstream
kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_aarch64_baseos_latest
kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_aarch64_codeready_builder
kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_aarch64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmc0022eb4d2d45d1240f3620f3d6fb1099446ce72f90d66c4ea565166e293976a-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmfc8f8b4cf856f094d34bfb3220a8956a4ec21eb15be9d035942b8b87150a2363-ol10_aarch64_appstream
kernel-tools-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmf477eacf58c8439cea5ead34b493684b09064ab822754a1cc8a8000eddadf173-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmf477eacf58c8439cea5ead34b493684b09064ab822754a1cc8a8000eddadf173-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmb92b64775cae90e7d866e50a2fe920108e27233816f502a75cca371ed8206997-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmb92b64775cae90e7d866e50a2fe920108e27233816f502a75cca371ed8206997-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.21.1.0.1.el10_0.aarch64.rpm086393c76edc8383f144c61bfb16fdf609164b2da1407b91b5cb0e91d3f71a4f-ol10_aarch64_codeready_builder
libperf-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmaf47fdfe381d3864dd6aa74b312095f8914679bb8cd41e742164fcb053efe13a-ol10_aarch64_codeready_builder
perf-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmb0beac450dc267e619862876bf31858d099e974508d2261287d8ed499a400055-ol10_aarch64_appstream
python3-perf-6.12.0-55.21.1.0.1.el10_0.aarch64.rpmce60b6ac0de1dc382b81183d48191ca9a803d9e4bd1ad6b37e701a4d72fdb098-ol10_aarch64_appstream
rtla-6.12.0-55.21.1.0.1.el10_0.aarch64.rpm033590d47a3237cda096e0cab359d804342c8e7d4377f35a3e0b709a2529c3fb-ol10_aarch64_appstream
rv-6.12.0-55.21.1.0.1.el10_0.aarch64.rpm44f72924c4cf3129c3f0fb64f42d516d08f5fe59b4ee2bb616e6da46af9d0734-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_x86_64_appstream
kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_x86_64_baseos_latest
kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_x86_64_codeready_builder
kernel-6.12.0-55.21.1.0.1.el10_0.src.rpm01e148cd3875fb9b0017d28aa8cefea925b2eddca415208080cdd893f7ced71f-ol10_x86_64_u0_baseos_patch
kernel-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm9c9d35dfdbd089872736ae866c2a3e69e430d36e88a60481b531203615e5f302-ol10_x86_64_baseos_latest
kernel-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm9c9d35dfdbd089872736ae866c2a3e69e430d36e88a60481b531203615e5f302-ol10_x86_64_u0_baseos_patch
kernel-abi-stablelists-6.12.0-55.21.1.0.1.el10_0.noarch.rpm060ae2ad02aff9c197739f7d60c8689062358f533af871e3304e3456f9b077cd-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-55.21.1.0.1.el10_0.noarch.rpm060ae2ad02aff9c197739f7d60c8689062358f533af871e3304e3456f9b077cd-ol10_x86_64_u0_baseos_patch
kernel-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm2fbddf07bc5c7d7b4a8fc57c4f8beaa2b64f7927ae97238fee902ffe351987cc-ol10_x86_64_baseos_latest
kernel-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm2fbddf07bc5c7d7b4a8fc57c4f8beaa2b64f7927ae97238fee902ffe351987cc-ol10_x86_64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.21.1.0.1.el10_0.x86_64.rpma4d4a747d7a5c50a2644e8e1811b4adf22e5f68dfd9af2b0f59ae9cfaa4e567a-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmf8c9c7c3d7a8a54af9511144c78c3cc6da7e1d5b2597732aa187266a591c5923-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmf8c9c7c3d7a8a54af9511144c78c3cc6da7e1d5b2597732aa187266a591c5923-ol10_x86_64_u0_baseos_patch
kernel-debug-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm5b585c08e57a602a6d809951a700734b5f58d5349b2be3efeac8e562fbf31351-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm5b585c08e57a602a6d809951a700734b5f58d5349b2be3efeac8e562fbf31351-ol10_x86_64_u0_baseos_patch
kernel-debug-devel-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm6a1a884faae8b647fe713707b8599e2e7fc0c363aa455bcec35c46277a129134-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmcb469d24d5023979d1648689c1937448c0d8730226ae76dc540c9f25f51cb715-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmda20916180df499296a4f4512efe4b2acaae03cdb828584a43e450775d74e0cf-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmda20916180df499296a4f4512efe4b2acaae03cdb828584a43e450775d74e0cf-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpma9c00812662a4a6d0b308643c07493d8b03a0d07eb108b29bd7b9b35027a3ba7-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpma9c00812662a4a6d0b308643c07493d8b03a0d07eb108b29bd7b9b35027a3ba7-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-extra-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmceb40439c057f9bd185b332adca47a5c9f745f0daf3191ddba7c69b612f13621-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmceb40439c057f9bd185b332adca47a5c9f745f0daf3191ddba7c69b612f13621-ol10_x86_64_u0_baseos_patch
kernel-debug-uki-virt-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm43bda00a1e24d7625d04a8d001f70f54fcea653eed4aa8df73f765b18306d6e0-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm43bda00a1e24d7625d04a8d001f70f54fcea653eed4aa8df73f765b18306d6e0-ol10_x86_64_u0_baseos_patch
kernel-devel-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmd972f8a9e04b41758ec198a763ba33f8460f669b29130bc1611d8185fbbbfd91-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm57c6e7c90540fef7a7088e986e069e0e6ec422361e35d986cfa7ca30a38d3f01-ol10_x86_64_appstream
kernel-doc-6.12.0-55.21.1.0.1.el10_0.noarch.rpm47683fb881d1762cc9be3f0f3e5e64333063d4f3c4770a7dbb6abac4d238c8c3-ol10_x86_64_appstream
kernel-headers-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm1b962c999921a447787ea44733400e354da6543e11eaaa57b7fa9575ef11300c-ol10_x86_64_appstream
kernel-modules-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmf5a58a36cf18f03f9c3795756c792effc917afe79403ce5bbd22fd341674a59f-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmf5a58a36cf18f03f9c3795756c792effc917afe79403ce5bbd22fd341674a59f-ol10_x86_64_u0_baseos_patch
kernel-modules-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpme520e88a147e80ebe929541b5aeec3fb540c6969e5ef8ddec3c0bf99214deaa1-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-55.21.1.0.1.el10_0.x86_64.rpme520e88a147e80ebe929541b5aeec3fb540c6969e5ef8ddec3c0bf99214deaa1-ol10_x86_64_u0_baseos_patch
kernel-modules-extra-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmeb96275ebcdbe4e7086faaccdd054977bc51e8ab187c9f7d57de3e3003259111-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmeb96275ebcdbe4e7086faaccdd054977bc51e8ab187c9f7d57de3e3003259111-ol10_x86_64_u0_baseos_patch
kernel-tools-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm735fdfae8aaf1c6cf9bfd95a8a36ed56a5fcd6d7663cff8b3398d62d0a280bc4-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm735fdfae8aaf1c6cf9bfd95a8a36ed56a5fcd6d7663cff8b3398d62d0a280bc4-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm0b3ae60b732dafbd9f4023e38e911fb16f8b16ba0d899c5e5e47a340520407b7-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm0b3ae60b732dafbd9f4023e38e911fb16f8b16ba0d899c5e5e47a340520407b7-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmf76b3861ab31e7f4ac033da3dd8e788b5470d8cc874ec0ceb2fe83de849a40de-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm629b24f8fdd7315fd48cff5e87adaf40b1efbad21bb439b3680d065a75aaed81-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm629b24f8fdd7315fd48cff5e87adaf40b1efbad21bb439b3680d065a75aaed81-ol10_x86_64_u0_baseos_patch
kernel-uki-virt-addons-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm88f96049bf7baa3b5d303d0b28667ea151d596cbf752da5e439d19762ffb3714-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm88f96049bf7baa3b5d303d0b28667ea151d596cbf752da5e439d19762ffb3714-ol10_x86_64_u0_baseos_patch
libperf-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm74d7b785d1e33c4e474801e33546ffbeaef2413b6121f7e6b29317cf7535859a-ol10_x86_64_codeready_builder
perf-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm51bb310186d39f6ab32a7d09b2318252a0dad2ec1ada19753aba41c868705f10-ol10_x86_64_appstream
python3-perf-6.12.0-55.21.1.0.1.el10_0.x86_64.rpmc75eb2cbe694d576b6a7c0bf373b0915c6dc990ab1992f1181005526c0753e51-ol10_x86_64_appstream
rtla-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm90f8e4efaa8e68b35575ddf172519c6151faf8caf80d990c9093e9e7ed5ecda2-ol10_x86_64_appstream
rv-6.12.0-55.21.1.0.1.el10_0.x86_64.rpm4cce4620cac4417aafd066dccc7b2343e43d14147204f85ea82a7d4acb39f806-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete