Stay Connected:

ELSA-2025-13602

ELSA-2025-13602 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-08-13

Description


[5.14.0-570.33.2.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.33.2_6]
- Revert 'sch_htb: make htb_qlen_notify() idempotent' (Patrick Talbert) [RHEL-108138]
- Revert 'sch_drr: make drr_qlen_notify() idempotent' (Patrick Talbert) [RHEL-108138]
- Revert 'sch_qfq: make qfq_qlen_notify() idempotent' (Patrick Talbert) [RHEL-108138]
- Revert 'codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()' (Patrick Talbert) [RHEL-108138]
- Revert 'sch_htb: make htb_deactivate() idempotent' (Patrick Talbert) [RHEL-108138]
- Revert 'net/sched: Always pass notifications when child class becomes empty' (Patrick Talbert) [RHEL-108138]

[5.14.0-570.33.1_6]
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
- redhat: update BUILD_TARGET to rhel-9.6.0-z-test-pesign (Jan Stancek)
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102666]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Charles Mirabile) [RHEL-102652]
- PCI: Fix pci_enable_acs() support for the ACS quirks (Charles Mirabile) [RHEL-102652]
- Documentation: Fix pci=config_acs= example (Charles Mirabile) [RHEL-102652]
- Revert 'PCI: Wait for device readiness with Configuration RRS' (John W. Linville) [RHEL-94414]
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82564]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82564]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103219] {CVE-2025-38292}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102235] {CVE-2025-38079}


Related CVEs


CVE-2025-38079
CVE-2025-38292

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_aarch64_appstream
kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_aarch64_baseos_latest
kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_aarch64_codeready_builder
kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.33.2.0.1.el9_6.aarch64.rpma385129d5900088768ec194124a3772f9f8b5f3d311ccd8e58a4a8ffacecea58-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm8de039ffb639c6dc854848cd65d1f84458df76caab0c23e46762a9c798f0a58f-ol9_aarch64_appstream
kernel-tools-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm61db0bb4cc636320548f19097a2589086f38c58c444a4572581ba6631fdd8613-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm61db0bb4cc636320548f19097a2589086f38c58c444a4572581ba6631fdd8613-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm77af7553ade9773c30853c951e8c7a6880bfb73fb0fe926664067ac0b356eba8-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm77af7553ade9773c30853c951e8c7a6880bfb73fb0fe926664067ac0b356eba8-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm55382ea4ec20c3310e1b07d2cc40983b88d16b5844444474fb41f7c1f1ae5c2b-ol9_aarch64_codeready_builder
perf-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm5d944bce40bdbe5575dec15e283a8903a5699f8cb54f90f2630310216ffba509-ol9_aarch64_appstream
python3-perf-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm3cf47436bf5ba5351197d88f11e2586e6d54d0b3f18f6f0a360672929376f3b4-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm3cf47436bf5ba5351197d88f11e2586e6d54d0b3f18f6f0a360672929376f3b4-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.33.2.0.1.el9_6.aarch64.rpmce601b931bd9835b5a4e0fc2bc15d1db1e0d726520b8002394f68f2c21c0bfda-ol9_aarch64_appstream
rv-5.14.0-570.33.2.0.1.el9_6.aarch64.rpm1f763f1cb866271e276d06a262c045afa569405e9e4cff031cab5700492bfc05-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_x86_64_appstream
kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_x86_64_baseos_latest
kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_x86_64_codeready_builder
kernel-5.14.0-570.33.2.0.1.el9_6.src.rpm928d6b6885e5a8767a77781da911d413c62925e3237696b272fab6c229e9d48d-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmc9d134e433dede558ba32d7fcb9510792c4419eb312ffca966df37ae54fd28a2-ol9_x86_64_baseos_latest
kernel-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmc9d134e433dede558ba32d7fcb9510792c4419eb312ffca966df37ae54fd28a2-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.33.2.0.1.el9_6.noarch.rpmdfd405cdb9ebc2342cfcf6714f70f053ae28df6b87f5824c01c596c8b29cd77d-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.33.2.0.1.el9_6.noarch.rpmdfd405cdb9ebc2342cfcf6714f70f053ae28df6b87f5824c01c596c8b29cd77d-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmaf0a304d4b3f42153f1220702cf6db5e666550f0d0b0fc3d4574532b0f14affb-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmaf0a304d4b3f42153f1220702cf6db5e666550f0d0b0fc3d4574532b0f14affb-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmd2d871927c7558d777af7ede879046863a0fcb78fa0f51c0fcee504dcebf9943-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm7ce55ca6f6151ceac309334ee95728e3583afc695b0f4d37216e527946981b40-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm7ce55ca6f6151ceac309334ee95728e3583afc695b0f4d37216e527946981b40-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmfb0f1da85e18d75828d2b168c397f674572ffd6d4cbd807f6df71f617bd13085-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmfb0f1da85e18d75828d2b168c397f674572ffd6d4cbd807f6df71f617bd13085-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm7470dd00d463b6277aca3d0a47684c2c882cbb9225b78568f04c0da0f3614244-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm37540a477a5d9b56b128265bca68f3f4db0974f782d8f1122b4343fab189bacd-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmfec4cf2f7c6245c3499db1710de0f6af74274c9818a13c597d025037f4ec38c3-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmfec4cf2f7c6245c3499db1710de0f6af74274c9818a13c597d025037f4ec38c3-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm4de6e0e8b51333c866a6cf0bce9a87f1aaba475597dfd3846b61dc70b914ddea-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm4de6e0e8b51333c866a6cf0bce9a87f1aaba475597dfd3846b61dc70b914ddea-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm472c7e75eada6ca7fb5a0e8ca4ae5fd8e33bbfbfa27d90a29beab1a885b18356-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm472c7e75eada6ca7fb5a0e8ca4ae5fd8e33bbfbfa27d90a29beab1a885b18356-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm826c52b768a37974de9c729b776f6c5db94242f49f3554884cddd250430eab36-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm826c52b768a37974de9c729b776f6c5db94242f49f3554884cddd250430eab36-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm0e7a73c568d1df2a94fdcbce7778d1a0ac782bb2c46546ef311a97e1133db138-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm4f3bae2d54f6c5523a35faa644b74ec2616df85bad0eb202a3c665fc41cb958c-ol9_x86_64_appstream
kernel-doc-5.14.0-570.33.2.0.1.el9_6.noarch.rpm8beef49ca2194365dd6d39e5265ef06508240ddcddee1d60b6598ddf2464c4cd-ol9_x86_64_appstream
kernel-headers-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm047eeb19a1b5700f03f07113e356bc32895eb9d3cf022978d46b89a55ccc538c-ol9_x86_64_appstream
kernel-modules-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm0afff3757534b8f913a24bb4dc3edfecd6de510da9bc0bfdfd0549b0bf7be4b3-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm0afff3757534b8f913a24bb4dc3edfecd6de510da9bc0bfdfd0549b0bf7be4b3-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm0ed1556969ba5c000d7bd0311a0232eaf2167ae7143bf9c502f6d33ed139f109-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm0ed1556969ba5c000d7bd0311a0232eaf2167ae7143bf9c502f6d33ed139f109-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm68c41ed5c67b7437a84d52c7d1b6e4603cb45aec9945e2e9c736d6c7faefce6a-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm68c41ed5c67b7437a84d52c7d1b6e4603cb45aec9945e2e9c736d6c7faefce6a-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmc91b6673b73b2f2ccabcf6e5c0781910754d4861046cd470e82640848923eb10-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmc91b6673b73b2f2ccabcf6e5c0781910754d4861046cd470e82640848923eb10-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm7efdb81d0da994b0c255c224f6eb01b68e4e5334c77622fd3e32515962a75b90-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm7efdb81d0da994b0c255c224f6eb01b68e4e5334c77622fd3e32515962a75b90-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmad599b21a12034815a448c46bf22863c6b84f2b5661b39400e9db2383785a181-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm30a17e60f3ae8fda01a30c0c4a217b57b118ff742dca84d4dd29efb04265c57f-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm30a17e60f3ae8fda01a30c0c4a217b57b118ff742dca84d4dd29efb04265c57f-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.33.2.0.1.el9_6.x86_64.rpma6f7490bc00fc6e2b88252f9801deeb2945d14dcfcab6b46029467d078146b87-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.33.2.0.1.el9_6.x86_64.rpma6f7490bc00fc6e2b88252f9801deeb2945d14dcfcab6b46029467d078146b87-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmc45a137804eb2e59ffc7b0481de2e7562a7279966274d33e51b66daac67fe461-ol9_x86_64_codeready_builder
perf-5.14.0-570.33.2.0.1.el9_6.x86_64.rpmf7d0e9a676fae707de4c9eef6d34aa9fe6a5bb4925eb6770aaa951ae74e75c31-ol9_x86_64_appstream
python3-perf-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm86834d7a1c5d8f2a827bfccb7186e6fd9a8d6ea672e6bb46c667b0b9675ea67f-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm86834d7a1c5d8f2a827bfccb7186e6fd9a8d6ea672e6bb46c667b0b9675ea67f-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.33.2.0.1.el9_6.x86_64.rpm9df5c12c18cf6a8794b2a7ad74519b9ffb946dafec69acd3aad29f35fbca99b2-ol9_x86_64_appstream
rv-5.14.0-570.33.2.0.1.el9_6.x86_64.rpma4723f673417f6b3e827cc8b2435adad708b68ef4081b5362347e7ab41311ed8-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights