Stay Connected:

ELSA-2025-14420

ELSA-2025-14420 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-08-25

Description


[5.14.0-570.37.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.37.1_6]
- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108152] {CVE-2025-38417}
- ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-105151]
- ethtool: Fix set RXNFC command with symmetric RSS hash (Mohammad Heib) [RHEL-103526]
- drm/i915: Give i915 and xe each their own display tracepoints (Jocelyn Falempe) [RHEL-94419]

[5.14.0-570.36.1_6]
- udp: Fix memory accounting leak. (Xin Long) [RHEL-104091] {CVE-2025-22058}
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104719] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104719]


Related CVEs


CVE-2025-22058
CVE-2025-38417
CVE-2025-37914

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_aarch64_appstream
kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_aarch64_baseos_latest
kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_aarch64_codeready_builder
kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.37.1.0.1.el9_6.aarch64.rpmdb53484048bdff0056659f82e56c29178075095697bd2638af6f79d31abbac34-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm86d79c013fd3d9d7baffc88c2077cfc3c796a9a74576d9f0d1c6ca7b3065e294-ol9_aarch64_appstream
kernel-tools-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm2843aa31fd27619ed4fc3b0d67f480fc8b5c43f29e4d51ae67ff22a13af08d29-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm2843aa31fd27619ed4fc3b0d67f480fc8b5c43f29e4d51ae67ff22a13af08d29-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm04f76e936782fc6e49d57ebe81ad6aadd5735c8b976f8fa624699fb3c03e28b3-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm04f76e936782fc6e49d57ebe81ad6aadd5735c8b976f8fa624699fb3c03e28b3-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm28770bbd49e6a601005e03f2da44d985468c84421114bf969aaed2d87ea6f98c-ol9_aarch64_codeready_builder
perf-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm9c45f3dd9c393e0538c2a65712c78b41025ef586ee513ba5ed6d483dccfca1f6-ol9_aarch64_appstream
python3-perf-5.14.0-570.37.1.0.1.el9_6.aarch64.rpmbe70861f31112a3dbab7d507cf629f838912f4a05c1c3c4db08000c8b0126410-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.37.1.0.1.el9_6.aarch64.rpmbe70861f31112a3dbab7d507cf629f838912f4a05c1c3c4db08000c8b0126410-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.37.1.0.1.el9_6.aarch64.rpm7a8c6171badbb65d7fe5cb146a70790b701ef8557612d9ee75200837e255223c-ol9_aarch64_appstream
rv-5.14.0-570.37.1.0.1.el9_6.aarch64.rpmc9e24c2c8df0df3f194a7a957c71a448489a6bae364a53007a60fed6fed8f927-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_x86_64_appstream
kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_x86_64_baseos_latest
kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_x86_64_codeready_builder
kernel-5.14.0-570.37.1.0.1.el9_6.src.rpm144907617d2aa6793bce98d153c4f51367a02f9f06e90bc95100da167d693b22-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm6769e35d36e2fb2297e0af244501cce1fae1eeb1a7a593bfe9fbabd275762b7e-ol9_x86_64_baseos_latest
kernel-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm6769e35d36e2fb2297e0af244501cce1fae1eeb1a7a593bfe9fbabd275762b7e-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.37.1.0.1.el9_6.noarch.rpm15d5fdfe8fa27ea8fc9b78f71d6358e91189163bc2dcebe836e9388f0a7d6790-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.37.1.0.1.el9_6.noarch.rpm15d5fdfe8fa27ea8fc9b78f71d6358e91189163bc2dcebe836e9388f0a7d6790-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmb6127c0357d21b5644b1c7ffcca3895a3f82e5c3b6e55e9f1018641dd8a0ce92-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmb6127c0357d21b5644b1c7ffcca3895a3f82e5c3b6e55e9f1018641dd8a0ce92-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmf6702b15f4f7cc9f9b120cd9817a7ee6604568068de39378c057c43a6e82b54a-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.37.1.0.1.el9_6.x86_64.rpme904875dcfb022885eb33c9842b6bddb8cba0f4e11b9014467d5e176a21c6793-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.37.1.0.1.el9_6.x86_64.rpme904875dcfb022885eb33c9842b6bddb8cba0f4e11b9014467d5e176a21c6793-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm9084d98d3adb38c8e9e50636d803644b1b1ab3148e6fc6699835f1374e1851c5-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm9084d98d3adb38c8e9e50636d803644b1b1ab3148e6fc6699835f1374e1851c5-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm19e0083a34b35b5de5d10688d1c0088bcc07fcce30098a0a9f39cced44b17077-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmc5f6e8ad45be070c75e4ec2b7300dd4dd5ac7feaafc45ac0210c28121b519943-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm56681b13bd367a3af749f575de25f325a52f672b6eae22797e7346d3f17039f9-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm56681b13bd367a3af749f575de25f325a52f672b6eae22797e7346d3f17039f9-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpme1c297fb5b8cb0ba93e7fbd0dfa9ee02bed2840940f8e91d7a751ce7498d67a9-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpme1c297fb5b8cb0ba93e7fbd0dfa9ee02bed2840940f8e91d7a751ce7498d67a9-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.37.1.0.1.el9_6.x86_64.rpme3a21f93b49c77b1eb4fae1d70ada0e8f9b9e3c0aebf9001501c6b914db80557-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.37.1.0.1.el9_6.x86_64.rpme3a21f93b49c77b1eb4fae1d70ada0e8f9b9e3c0aebf9001501c6b914db80557-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm900f04cffd501978549cc0f9d12a7a8e68462512d25477faf764b482067265f5-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm900f04cffd501978549cc0f9d12a7a8e68462512d25477faf764b482067265f5-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmd65e70b89d5ad49ec234d236c2874eb7aa95244c655d980d8dbf8d3f1e50dff3-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm4a71218e3b5a9e38c0ced1dd3b3d296ef40df3c015c7fa1372e43ee3b823b962-ol9_x86_64_appstream
kernel-doc-5.14.0-570.37.1.0.1.el9_6.noarch.rpm8d789ec08f0d148d95b86af62a6f7a35ba349521f438346aad3c9726a06a1d6d-ol9_x86_64_appstream
kernel-headers-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmb7416237782421319ad6395918bafaa63611beec5d281b09a9ca47d9b677dee2-ol9_x86_64_appstream
kernel-modules-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm8e02078e357c19c0ee480a4bf810d786a0cc1bbc6436fcf2189b55e25151b095-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm8e02078e357c19c0ee480a4bf810d786a0cc1bbc6436fcf2189b55e25151b095-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmcee1f0165fd5aec8791a4885b757d2204cd6f0125200a5915af4f4863e0686d6-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmcee1f0165fd5aec8791a4885b757d2204cd6f0125200a5915af4f4863e0686d6-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm7c862357aafdfa29d114a92c926da4179a0488ce621c75879a5b3c7ee8a5f8dd-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm7c862357aafdfa29d114a92c926da4179a0488ce621c75879a5b3c7ee8a5f8dd-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm62993cdd65a95a7cd1dd95b20c54b98e7513706436f52afde85909dafd542f47-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm62993cdd65a95a7cd1dd95b20c54b98e7513706436f52afde85909dafd542f47-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm46381b4a415b1027cdd5b5125a30c2e5560b5ce3f728fe524ba3df25198b2743-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm46381b4a415b1027cdd5b5125a30c2e5560b5ce3f728fe524ba3df25198b2743-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.37.1.0.1.el9_6.x86_64.rpma63870fb61ed5f034de5b3acecfd530543647122e5e2bdd8876d24505abc3598-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmb978a3a66da8df06586813b83a5d09e6287f6f4fe46a7d316cccfa20cf049457-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmb978a3a66da8df06586813b83a5d09e6287f6f4fe46a7d316cccfa20cf049457-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm41dc1c3b0e0f351c48704feef77e6d9cb0c07417c1fe8bef3748aa365118bdbc-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm41dc1c3b0e0f351c48704feef77e6d9cb0c07417c1fe8bef3748aa365118bdbc-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm72e0947aa69b4d239067f3d08a6de7fae3fe66e09a3cbd173128672dd71176af-ol9_x86_64_codeready_builder
perf-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm9a5b29c69c0c000d5ccf57d5ab127296499697f37d9aae874ed0706ca862c162-ol9_x86_64_appstream
python3-perf-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmd565786a3353faf5c750ff0c8e3515dd6b9f9e906c245dcc1af5a9d317483753-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.37.1.0.1.el9_6.x86_64.rpmd565786a3353faf5c750ff0c8e3515dd6b9f9e906c245dcc1af5a9d317483753-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm4f252722f693fb61239cf6274fa290073afdf6451b29c77e370a384dda85b049-ol9_x86_64_appstream
rv-5.14.0-570.37.1.0.1.el9_6.x86_64.rpm2828c7aa3b6c2d961a1fd2f53783a7f45b6825aa9755bd20b45cf2507cfe4256-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights