Stay Connected:

ELSA-2025-11411

ELSA-2025-11411 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-07-21

Description


[5.14.0-570.28.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.28.1_6]
- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CKI Backport Bot) [RHEL-101327] {CVE-2025-38089}

[5.14.0-570.27.1_6]
- i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-100516]
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-87775]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-87775]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-87775]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-87775]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-87775]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-87775]
- media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98772] {CVE-2024-58002}
- media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98772]
- media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98772]


Related CVEs


CVE-2025-38089
CVE-2024-58002

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_aarch64_appstream
kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_aarch64_baseos_latest
kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_aarch64_codeready_builder
kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.28.1.0.1.el9_6.aarch64.rpm9839b02bd91e515d89613ef2c841981ce8d540a67f374f6763e06bfbbfbdabe8-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.28.1.0.1.el9_6.aarch64.rpm729d0d0b0b3163797573ccfae3d0bf6096cd30c8c9de4ffcf99d2f12ed5adca1-ol9_aarch64_appstream
kernel-tools-5.14.0-570.28.1.0.1.el9_6.aarch64.rpmb3eae1a4355b12370f9feced653d54736c080a508032cb42474a3fe13a92d770-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.28.1.0.1.el9_6.aarch64.rpmb3eae1a4355b12370f9feced653d54736c080a508032cb42474a3fe13a92d770-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.28.1.0.1.el9_6.aarch64.rpmd780a0680097be266d1942acb01a6d872bae8be0ea9ad2a8646bf69574e86d6d-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.28.1.0.1.el9_6.aarch64.rpmd780a0680097be266d1942acb01a6d872bae8be0ea9ad2a8646bf69574e86d6d-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.28.1.0.1.el9_6.aarch64.rpm791a80f0965e8b7840f536037b5136ae3a6780752c8c59cddba7daeb8b6e3615-ol9_aarch64_codeready_builder
perf-5.14.0-570.28.1.0.1.el9_6.aarch64.rpmef95363ce311890f34f641667bd1c369ca4f6cd306dcf529382e79ecfb39eb42-ol9_aarch64_appstream
python3-perf-5.14.0-570.28.1.0.1.el9_6.aarch64.rpm57a95b6b0e4a50e4369a2fd69b60569e7a92fa1372798780b5b783bb824399a0-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.28.1.0.1.el9_6.aarch64.rpm57a95b6b0e4a50e4369a2fd69b60569e7a92fa1372798780b5b783bb824399a0-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.28.1.0.1.el9_6.aarch64.rpm63b2581fc9abc6741e3d64f6484524e2b22a2daf912679704ff31ea064394783-ol9_aarch64_appstream
rv-5.14.0-570.28.1.0.1.el9_6.aarch64.rpmabac03ee02e6bb8423290d2bb00f03f7bec9aa5ea2fcf79173c0403c6bb8a0f9-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_x86_64_appstream
kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_x86_64_baseos_latest
kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_x86_64_codeready_builder
kernel-5.14.0-570.28.1.0.1.el9_6.src.rpm7d50c341867d16bc9cbfdadbc2b632b1584b4eec2dd91777a188acf808556f0f-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm6e0d47a154065a46f9177965ae699c9a10fdf2ad9cd42a8e6dd97b1cf4393bdf-ol9_x86_64_baseos_latest
kernel-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm6e0d47a154065a46f9177965ae699c9a10fdf2ad9cd42a8e6dd97b1cf4393bdf-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.28.1.0.1.el9_6.noarch.rpm37f5093bbfb99aa664208ec1109b87db3456ed89aaa5a1e9bf6b8ca33f78641c-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.28.1.0.1.el9_6.noarch.rpm37f5093bbfb99aa664208ec1109b87db3456ed89aaa5a1e9bf6b8ca33f78641c-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm170d79440af0bca027aa2b12d8772174ffa90489a8a845d2a346f3f0fda70cc0-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm170d79440af0bca027aa2b12d8772174ffa90489a8a845d2a346f3f0fda70cc0-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm68bef7addbf1cbe4a32bfd7b0379fceff080f96c0ead04231cf143892f63e41f-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm751a6fac8a54f3555d4e411e3231432d2e5590d18d93e9226c87954adf2a79df-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm751a6fac8a54f3555d4e411e3231432d2e5590d18d93e9226c87954adf2a79df-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmc5f754cf669bc65721f7377d7751a28ac37ef626246f5f380731bcc33c7717cb-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmc5f754cf669bc65721f7377d7751a28ac37ef626246f5f380731bcc33c7717cb-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm10fad2dfa5cbff525735ffb807f664a7345f5876f63de1d8372fcaca142cf7fe-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm3c629cfac6358beabf34861f670f43fa4e073216d65671d72cf0df458781ee36-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.28.1.0.1.el9_6.x86_64.rpma124b051a5dfceac3738ea09d9f86ec10aa24bc631bee6742ac520b15684105a-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.28.1.0.1.el9_6.x86_64.rpma124b051a5dfceac3738ea09d9f86ec10aa24bc631bee6742ac520b15684105a-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm7634d361ffd4496beb7a14166273c735c77f9424afa0b13bd2d1adaa2ded18b7-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm7634d361ffd4496beb7a14166273c735c77f9424afa0b13bd2d1adaa2ded18b7-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm987dbc34927bf649f9113223e1018121bf54a1fc9aff77b7519da2d04dd9932a-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm987dbc34927bf649f9113223e1018121bf54a1fc9aff77b7519da2d04dd9932a-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmd9fe77206d7690e103fe0c9ef38c1f44079cbb9b5c2a6690487f590873ac3842-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmd9fe77206d7690e103fe0c9ef38c1f44079cbb9b5c2a6690487f590873ac3842-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm842d2063ef09e0abdb94283bdd867b5977e1dabe2ae50eb1532ecba288f4635f-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm1b0aee81494537fd656c2dc7e085958b3ab28111d808193a67a2f49d240caf78-ol9_x86_64_appstream
kernel-doc-5.14.0-570.28.1.0.1.el9_6.noarch.rpm511b0209868ada289a28d281e242772105c8016245e899a9331993301fe655d3-ol9_x86_64_appstream
kernel-headers-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm45a9e3e27af3b336a7ed5f60a2df7162a1d481004db77e775e29f155ab460715-ol9_x86_64_appstream
kernel-modules-5.14.0-570.28.1.0.1.el9_6.x86_64.rpma4ba07ba926b7eed5468833f9fee39c7775a89632d375cd387fe5a73b0ea1033-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.28.1.0.1.el9_6.x86_64.rpma4ba07ba926b7eed5468833f9fee39c7775a89632d375cd387fe5a73b0ea1033-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm3005738a4d9dc5682a8d9ae8c89dc7b4d6a2570e51e86edc33732e3fe669ea66-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm3005738a4d9dc5682a8d9ae8c89dc7b4d6a2570e51e86edc33732e3fe669ea66-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmda6db0fcb60a16c902dcb31a4ab2075d10c0e661ffd3bd2e4995450cceb94a43-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmda6db0fcb60a16c902dcb31a4ab2075d10c0e661ffd3bd2e4995450cceb94a43-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm092f3511abb38a2f79a30f920bc6c8eb9d01ef5c744d4341ec7241ca5075ea80-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm092f3511abb38a2f79a30f920bc6c8eb9d01ef5c744d4341ec7241ca5075ea80-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm3e86f469f358f6c886b78831d1ea5635d6bb1b778f3107447cdb7b0696acc43d-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm3e86f469f358f6c886b78831d1ea5635d6bb1b778f3107447cdb7b0696acc43d-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm6eae2d8a0ac192a87cc1fe91281d091c6b93aa66b1b4951c7e7613eda3f1996f-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm922275ecc186e79f8b1e5f9c26815118d54645a165cb6f92c53b2fdfb6b3fe80-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm922275ecc186e79f8b1e5f9c26815118d54645a165cb6f92c53b2fdfb6b3fe80-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm8ec764b1ba7a7add234d826ecad0b3ed0e86cd33432d4e63cf8f9aaca41ce6ac-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm8ec764b1ba7a7add234d826ecad0b3ed0e86cd33432d4e63cf8f9aaca41ce6ac-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm1fbb6f358bbdda1cf9310bfe56e4c2fda3f0e7cbc6753cdc0717db9a705042e9-ol9_x86_64_codeready_builder
perf-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm1a775626b412752c63f898b20f5840861f20dea662b399a7db33a56e0a50c11c-ol9_x86_64_appstream
python3-perf-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm23de46796ad3f4fc3a36c4f5159b72b83f09fd0edc8833d0e271d81cbb9ea4c8-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm23de46796ad3f4fc3a36c4f5159b72b83f09fd0edc8833d0e271d81cbb9ea4c8-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.28.1.0.1.el9_6.x86_64.rpm6fcfed3ee1013058d0d9e8ee0b71f7b687f5b50a534969ea965fa1745e2319ca-ol9_x86_64_appstream
rv-5.14.0-570.28.1.0.1.el9_6.x86_64.rpmd17d497b6a796f7197abda562d68850f4251afafca35e3468e5ff5724dbee5ac-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights