Stay Connected:

ELSA-2025-11861

ELSA-2025-11861 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-07-29

Description


[5.14.0-570.30.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.30.1_6]
- net_sched: hfsc: Fix a UAF vulnerability in class handling (Davide Caratti) [RHEL-95853] {CVE-2025-37797}

[5.14.0-570.29.1_6]
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-99145]
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93555] {CVE-2025-22121}
- ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93555] {CVE-2025-22121}
- ext4: avoid journaling sb update on error if journal is destroying (Brian Foster) [RHEL-93591] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (Brian Foster) [RHEL-93591]
- net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CKI Backport Bot) [RHEL-102093] {CVE-2025-38110}
- smb: client: fix regression with native SMB symlinks (Paulo Alcantara) [RHEL-101953]
- redhat/configs: remove automotive directory (Eric Chanudet) [RHEL-96365]
- r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support (CKI Backport Bot) [RHEL-96715]
- r8169: disable RTL8126 ZRX-DC timeout (CKI Backport Bot) [RHEL-96715]
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101212] {CVE-2025-38086}
- media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98795] {CVE-2024-57980}
- RDMA/mlx5: Fix page_size variable overflow (CKI Backport Bot) [RHEL-99320] {CVE-2025-22091}
- wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99384] {CVE-2025-21905}
- RDMA/core: Fix use-after-free when rename device name (CKI Backport Bot) [RHEL-99048] {CVE-2025-22085}
- octeon_ep: Fix host hang issue during device reboot (CKI Backport Bot) [RHEL-93251]
- mm/huge_memory: fix dereferencing invalid pmd migration entry (Rafael Aquini) [RHEL-96368] {CVE-2025-37958}
- octeon_ep_vf: Resolve netdevice usage count issue (CKI Backport Bot) [RHEL-93252]
- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-87555]


Related CVEs


CVE-2025-21905
CVE-2025-22113
CVE-2025-38110
CVE-2025-22121
CVE-2025-37958
CVE-2024-57980
CVE-2025-22085
CVE-2025-37797
CVE-2025-22091
CVE-2025-38086

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_aarch64_appstream
kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_aarch64_baseos_latest
kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_aarch64_codeready_builder
kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.30.1.0.1.el9_6.aarch64.rpmd5c4773d11fdfe4471c74b153bab9a737b643a030298055e58d9ddf2a0ca6a79-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.30.1.0.1.el9_6.aarch64.rpmd3b8cb33ad974008dd0f08b66ae1493f4d05349f1451d201a6861664e5e6e513-ol9_aarch64_appstream
kernel-tools-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm292c5d9e5a658c69edd7a9408707cda90cac88b256e43325d2ebaebd78852689-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm292c5d9e5a658c69edd7a9408707cda90cac88b256e43325d2ebaebd78852689-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.30.1.0.1.el9_6.aarch64.rpmdc06d3d525dd12852fd5069a010490d9dc44f2d805ba5f6f0f85a6e81c58f9a6-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.30.1.0.1.el9_6.aarch64.rpmdc06d3d525dd12852fd5069a010490d9dc44f2d805ba5f6f0f85a6e81c58f9a6-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm8c690288b786c2d1c0a3fa98480918ac55c4ab1776adb453377a05dcc867a5a9-ol9_aarch64_codeready_builder
perf-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm65ae3757412be243229b32d9fb4b4dc334eb9d54f336f7929bc8d4f37b733f28-ol9_aarch64_appstream
python3-perf-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm60c68bb4b0509f485f6af98f8c4fcd08847c8c87f0d6c0d367286f161883ca3f-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm60c68bb4b0509f485f6af98f8c4fcd08847c8c87f0d6c0d367286f161883ca3f-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm12c4b7bb8543b3da204c72eae7e6ff229c9ad75afce7206b3330792851fc962d-ol9_aarch64_appstream
rv-5.14.0-570.30.1.0.1.el9_6.aarch64.rpm66e9891262a1c9e7620a00ca5a18e43439b87f35e008506ee7507cd4cf480f48-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_x86_64_appstream
kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_x86_64_baseos_latest
kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_x86_64_codeready_builder
kernel-5.14.0-570.30.1.0.1.el9_6.src.rpm1ba9acd4434612eb75e626753d17e205b93c6b180ea3614c200c7d866eb7b2c2-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm2128e6e02a6c567aedcc7618d342cb59f42a34a20af481a02b9a0e58fa8a9c36-ol9_x86_64_baseos_latest
kernel-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm2128e6e02a6c567aedcc7618d342cb59f42a34a20af481a02b9a0e58fa8a9c36-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.30.1.0.1.el9_6.noarch.rpmbf9e6b8a9f90ffbc824a2387c72a8e33e3de068bbbdd3818c1ad361d34616dee-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.30.1.0.1.el9_6.noarch.rpmbf9e6b8a9f90ffbc824a2387c72a8e33e3de068bbbdd3818c1ad361d34616dee-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm4fc2b16fd6ccec104624e4e6516052daa8a3fa462aa827ae49009617b07abe45-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm4fc2b16fd6ccec104624e4e6516052daa8a3fa462aa827ae49009617b07abe45-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.30.1.0.1.el9_6.x86_64.rpmcd7003b653b46413dbd6117f3277181bbc4283f4d2910e20828a7b3fed4e7d47-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm4684162fee10f16a9f783b8f6ab40b5771283a07231c54612efbc41409e9cacd-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm4684162fee10f16a9f783b8f6ab40b5771283a07231c54612efbc41409e9cacd-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm7497a1badcb15b648e3b6ae1cb612beda4a32a3e07c0ad4723c07054c32a0572-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm7497a1badcb15b648e3b6ae1cb612beda4a32a3e07c0ad4723c07054c32a0572-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm3cb81ed22987992884fa8d2ca1b0f2a8f2368ebdedbddeafa268630eb80b659c-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm768587c7c9520685f1e3a581d274c2246b383ae76c65d3d7eb1dbf535353556b-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm403f792951ef952327e90bae01b51374919f7d03b363b24e973d54395f9b3674-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm403f792951ef952327e90bae01b51374919f7d03b363b24e973d54395f9b3674-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm0900fd7b159c74ae2f27807d6404dbfa6b835d3b5ac90f79f5e8a214ae8239a9-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm0900fd7b159c74ae2f27807d6404dbfa6b835d3b5ac90f79f5e8a214ae8239a9-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.30.1.0.1.el9_6.x86_64.rpmef4ae1e436d4d369daa242b0c1c6edc6edd95958ca39eee6f748ceb1301a238d-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.30.1.0.1.el9_6.x86_64.rpmef4ae1e436d4d369daa242b0c1c6edc6edd95958ca39eee6f748ceb1301a238d-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm55d49e960b1f8dbeb8f8afc0ec1c6acdd57dadec0008b84675c67c863beb0155-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm55d49e960b1f8dbeb8f8afc0ec1c6acdd57dadec0008b84675c67c863beb0155-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm2fdb168edc208739907a689e7af69bb76820fce8aeef94aa97a82e5af0b6b5f6-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm63dfff529054e6a97d27ed1f277fd3c1115cea8ce5915a3338315ac5f2075cff-ol9_x86_64_appstream
kernel-doc-5.14.0-570.30.1.0.1.el9_6.noarch.rpm2e48ee04c80b9b9e9129b71a4f97a9eeb6d52d90fdcb7b2332c5aa4787b3ec33-ol9_x86_64_appstream
kernel-headers-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm8e725576132fe3fc8852f8740f7f5c4007b0a721d15692ae314a84194cec69c3-ol9_x86_64_appstream
kernel-modules-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm11ed1d1d5cd2dc90f532784e1a835ddb886e05d78c68b90132a4972e87fdaac9-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm11ed1d1d5cd2dc90f532784e1a835ddb886e05d78c68b90132a4972e87fdaac9-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpme736c83ad40728b42d24a3c2ba028641f059e49c14bc255cdda0d283361c31d0-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.30.1.0.1.el9_6.x86_64.rpme736c83ad40728b42d24a3c2ba028641f059e49c14bc255cdda0d283361c31d0-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm75495d3efe0da606f5656c2fd8611c2cdcfa7cd3302c6c61620db08d56ef8720-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm75495d3efe0da606f5656c2fd8611c2cdcfa7cd3302c6c61620db08d56ef8720-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.30.1.0.1.el9_6.x86_64.rpme00b2e5a32e28f65d73c3fb140d52347386b23f82c8b2472f924be4b72df9700-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.30.1.0.1.el9_6.x86_64.rpme00b2e5a32e28f65d73c3fb140d52347386b23f82c8b2472f924be4b72df9700-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm20cb9830c133fd8b8931e205a4f4c42c387f46836111e45aa7cff3419ce04c07-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm20cb9830c133fd8b8931e205a4f4c42c387f46836111e45aa7cff3419ce04c07-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm4ce2e2c1d961ae655492f6dfe7d08bbe675f62ebb54d56607f9800f94c252e32-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm3ba7f1d7260bde6ee4bfbdec785f99d611a480f727f8e3605500dfa097900117-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm3ba7f1d7260bde6ee4bfbdec785f99d611a480f727f8e3605500dfa097900117-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.30.1.0.1.el9_6.x86_64.rpme6484cb86fd016a4a102dab84f7e7a4316d0a6e249d96b53a16ffb3b485ac971-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.30.1.0.1.el9_6.x86_64.rpme6484cb86fd016a4a102dab84f7e7a4316d0a6e249d96b53a16ffb3b485ac971-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm4af1a0ae917994b429a5331dcea983ea3bd35881143bce8dbe3931eb7abeb008-ol9_x86_64_codeready_builder
perf-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm2c3c3b6ff6b745f31ae1637f5aae92dca7bf3a459ac188721ea188ee7cbf4d71-ol9_x86_64_appstream
python3-perf-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm462238b76d5c2da146f330bbac7ac3300b18e3694ec37c8b93077d153d3da455-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm462238b76d5c2da146f330bbac7ac3300b18e3694ec37c8b93077d153d3da455-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm1fba453c1ab464bbc465b85bf13b85dc2950a226be6682c82c3703329cc10d83-ol9_x86_64_appstream
rv-5.14.0-570.30.1.0.1.el9_6.x86_64.rpm426463ddc8276f79e602d41a560c07ba55fcec17094c2e3e13acaa6d4a7f3f00-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights