Stay Connected:

ELSA-2025-12746

ELSA-2025-12746 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-08-05

Description


[5.14.0-570.32.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.32.1_6]
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Davide Caratti) [RHEL-97522] {CVE-2025-38001 CVE-2025-37890}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97522] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Davide Caratti) [RHEL-97522] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97522]
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98847] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98871] {CVE-2025-21929}

[5.14.0-570.31.1_6]
- Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (David Marlin) [RHEL-95324] {CVE-2025-37918}
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Desnes Nunes) [RHEL-99029] {CVE-2025-22020}
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (John W. Linville) [RHEL-97499] {CVE-2022-49788}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103087]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103087] {CVE-2025-38052}
- md/raid1: Add check for missing source disk in process_checks() (CKI Backport Bot) [RHEL-97439]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101317] {CVE-2025-38087}
- padata: avoid UAF for reorder_work (Rafael Aquini) [RHEL-97031] {CVE-2025-21727 CVE-2025-21726}
- padata: fix UAF in padata_reorder (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- padata: fix sysfs store callback check (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- padata: Clean up in padata_do_multithreaded() (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
- platform/x86: dell_rbu: Fix list usage (David Arcari) [RHEL-100908]
- cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87900] {CVE-2025-21962}


Related CVEs


CVE-2025-21727
CVE-2025-21962
CVE-2025-22020
CVE-2022-49788
CVE-2025-21928
CVE-2025-38052
CVE-2025-21929
CVE-2025-38087
CVE-2025-37890

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_aarch64_appstream
kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_aarch64_baseos_latest
kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_aarch64_codeready_builder
kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm5e3ff601abb8e2df8bc129adee8ebe68cb37b6f4048d2999beabd3d9557c9438-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm74ed5bbe918f38a8096ba6675ea8b021c82983ec9c5c4564b697feb9f55b4f00-ol9_aarch64_appstream
kernel-tools-5.14.0-570.32.1.0.1.el9_6.aarch64.rpmb15491552f8ef50350c8baf10f37f2f1b218b3e9d3eb0cb310c3c6cafed276d6-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.32.1.0.1.el9_6.aarch64.rpmb15491552f8ef50350c8baf10f37f2f1b218b3e9d3eb0cb310c3c6cafed276d6-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.32.1.0.1.el9_6.aarch64.rpmabff57dea4ed3641ccca0a2493f8ec60f4b9ac1295bd78b6385911e6742dd52d-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.32.1.0.1.el9_6.aarch64.rpmabff57dea4ed3641ccca0a2493f8ec60f4b9ac1295bd78b6385911e6742dd52d-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm792c5c7363ac637d626d00777d8040f9dc5f98ae187c0a95bf9fa13883f70058-ol9_aarch64_codeready_builder
perf-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm3a3eca3816ab221660a008f877fc7632a0165c5562830373fac22b11ec5cdee7-ol9_aarch64_appstream
python3-perf-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm84dcd0ec30b18ca0f03fbb2e8a70e080f8d5daede3e19ef394e23af2faf40a06-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm84dcd0ec30b18ca0f03fbb2e8a70e080f8d5daede3e19ef394e23af2faf40a06-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm2d3f08175214c979fa3cf3da9ee3b7d41fcac7a527b47c6b88e9b3c81c9cd2f5-ol9_aarch64_appstream
rv-5.14.0-570.32.1.0.1.el9_6.aarch64.rpm3cc3a966c90f7b897cb686ddfcf1c7177e6c3b34e811bafb87358708ce271cc8-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_x86_64_appstream
kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_x86_64_baseos_latest
kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_x86_64_codeready_builder
kernel-5.14.0-570.32.1.0.1.el9_6.src.rpm89f926cd0dc4c1886fa476e56b7456bbcee1774763ffd4631ef07fb1772b8544-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmaf825dccb52862330bee4362b24b7f7cd40dac9ea0968c1660259df8695f3f64-ol9_x86_64_baseos_latest
kernel-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmaf825dccb52862330bee4362b24b7f7cd40dac9ea0968c1660259df8695f3f64-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.32.1.0.1.el9_6.noarch.rpm76d18dfe8fee0c57a6507bc531059326a43fc2df24e994bdd3e5bb1fc548ed84-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.32.1.0.1.el9_6.noarch.rpm76d18dfe8fee0c57a6507bc531059326a43fc2df24e994bdd3e5bb1fc548ed84-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm46d5b84653e4e8d1b1baed7d86188cdc4fac613f4448063c28f7d9f251e6b2d5-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm46d5b84653e4e8d1b1baed7d86188cdc4fac613f4448063c28f7d9f251e6b2d5-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm914633c95a00450b017ee6574b7800f41b9ef5821ecce075b90868be410dafda-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm2dac7bdf61b00f340f537e9cdb2313f427a570aa7792e106d258b1dda12122db-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm2dac7bdf61b00f340f537e9cdb2313f427a570aa7792e106d258b1dda12122db-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmee1c137d9f1be7cc06699ad4bde3b3cea3ab5991915b38697635eae3769644f9-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmee1c137d9f1be7cc06699ad4bde3b3cea3ab5991915b38697635eae3769644f9-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm18eb5e93bd15488a80dc3d3d8f164fcd6c2754aeba1fbb93ecd440e0832e4dc8-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm343330265cf23b0dd28b0bc18c62612631f4101868fb4d1f3a8e906b76eacdd5-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmf3b7abfc5eddaffd0efd808f1afe034d216f9ecdd109e817a9a4b3566c56cc04-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmf3b7abfc5eddaffd0efd808f1afe034d216f9ecdd109e817a9a4b3566c56cc04-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpme86fff39ebbd753857334ecab20af14708d0da8e0b8dc859ede7b4edf3def0ad-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpme86fff39ebbd753857334ecab20af14708d0da8e0b8dc859ede7b4edf3def0ad-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm7d1af883e74d90f8584b8d17331d02cd30d1f351400d17ec7cf4a06a6c9f0047-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm7d1af883e74d90f8584b8d17331d02cd30d1f351400d17ec7cf4a06a6c9f0047-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm97f41cba45a6ef6068e8f8678b479a8752f8c216b47d5c0b0abe3f7a058a81ac-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm97f41cba45a6ef6068e8f8678b479a8752f8c216b47d5c0b0abe3f7a058a81ac-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmb569f825b9e53a44a1a1b928407e3305104b6f9f5a208f98d5962593e15f8afd-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.32.1.0.1.el9_6.x86_64.rpma272809a62ded615131e9fae0e6a812ee894073e45043ea7e2bf421b5776dac6-ol9_x86_64_appstream
kernel-doc-5.14.0-570.32.1.0.1.el9_6.noarch.rpm9926f5fc9a86de0ee7101322b77971dce805b61cd49ff8cb9f17aefb7aa40a0f-ol9_x86_64_appstream
kernel-headers-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm91491462aa2bb769dd605602dc6611f89ff31d64aa5d2b6e3577cbc4c2d40893-ol9_x86_64_appstream
kernel-modules-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm66de9ffffd84cb0f6b53f15d81ad0fa7698f339efe3d94ebaf18a9b1da3aea1f-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm66de9ffffd84cb0f6b53f15d81ad0fa7698f339efe3d94ebaf18a9b1da3aea1f-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmb8a39dbef47c1f8de8808c8115e88f6884628bc31b4b670e74add48ee35cd942-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmb8a39dbef47c1f8de8808c8115e88f6884628bc31b4b670e74add48ee35cd942-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm4a6d05bd93373d66712ec87a855803270df948bdc8b3979f88a5698bbd788bc5-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm4a6d05bd93373d66712ec87a855803270df948bdc8b3979f88a5698bbd788bc5-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmeedb4a90542ab9b667c1166b67a5e5970a19f43053be6bc7578c463b7f92065b-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.32.1.0.1.el9_6.x86_64.rpmeedb4a90542ab9b667c1166b67a5e5970a19f43053be6bc7578c463b7f92065b-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm96907edd50d37d5b16f1ad8c3ee4857e033bbb5c161b7383898fe7426b6aa0ef-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm96907edd50d37d5b16f1ad8c3ee4857e033bbb5c161b7383898fe7426b6aa0ef-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm0fc9a7a3ee9a5ea905896ba3b434fb7f17f509ce6e0886f4cc7b5deacb54236f-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm921bf26ea3ec95d930ab3b9cd936810523b45d462014db6fefcd2d6c79f1ee41-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm921bf26ea3ec95d930ab3b9cd936810523b45d462014db6fefcd2d6c79f1ee41-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm713442c0ed56e22cf2eda3b3a16aa6ad60ffcd9bdbb57526ca2375796915a095-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm713442c0ed56e22cf2eda3b3a16aa6ad60ffcd9bdbb57526ca2375796915a095-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm597d12f1276b10bf906fa0480f28a4b980c4eec94392029c6792b78c9788ff5e-ol9_x86_64_codeready_builder
perf-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm0cbabb9aec80df7df08f00d3ff390875ce472b6edd60a95bd9d445627fd8f463-ol9_x86_64_appstream
python3-perf-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm09ea9eb318fdf220763a136e0a143df5f9e9c5749b382a2de9f058dbd2ba0fd7-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm09ea9eb318fdf220763a136e0a143df5f9e9c5749b382a2de9f058dbd2ba0fd7-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm04758746d1b667e8acaf170e1d4c606509ee3b658dd90ccf0b51518035d2407d-ol9_x86_64_appstream
rv-5.14.0-570.32.1.0.1.el9_6.x86_64.rpm385226d5870a27282b80d92b815e6a0fcd1f7883a160c0b4ee3a842ab96a1330-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights