Stay Connected:

ELSA-2025-15429

ELSA-2025-15429 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-09-10

Description


[5.14.0-570.41.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.41.1_6]
- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-107002]
- net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-109494]
- ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-109494]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109723]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109723]
- smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109723]
- crypto: tegra - Fix IV usage for AES ECB (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix format specifier in tegra_sha_prep_cmd() (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Use HMAC fallback when keyslots are full (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Reserve keyslots to allocate dynamically (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Set IV to NULL explicitly for AES ECB (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix CMAC intermediate result handling (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix HASH intermediate result handling (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Transfer HASH init function to crypto engine (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - check return value for hash do_one_req (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - finalize crypto req on error (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Do not use fixed size buffers (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Use separate buffer for setkey (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - remove redundant error check on ret (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - do not transfer req when tegra init fails (Nirmala Dalvi) [RHEL-107286]
- crypto: engine - Remove prepare/unprepare request (Nirmala Dalvi) [RHEL-107286]
- udmabuf: fix a buf size overflow issue during udmabuf creation (CKI Backport Bot) [RHEL-99746] {CVE-2025-37803}

[5.14.0-570.40.1_6]
- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106054] {CVE-2025-38392}


Related CVEs


CVE-2025-37803
CVE-2025-38392

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_aarch64_appstream
kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_aarch64_baseos_latest
kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_aarch64_codeready_builder
kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm03fed54e2e1342df8a7b574869b0ba62b055a490d18f28756baf784461d86a28-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm212f2fb6fc9f968e594fb1e3fe099839d40788426c6ea404ea94213e8a609023-ol9_aarch64_appstream
kernel-tools-5.14.0-570.41.1.0.1.el9_6.aarch64.rpmb1995f5ad4cf1cc802d50da8018b786a907663e668c06666b3d4e1d094707341-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.41.1.0.1.el9_6.aarch64.rpmb1995f5ad4cf1cc802d50da8018b786a907663e668c06666b3d4e1d094707341-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.41.1.0.1.el9_6.aarch64.rpmd4d89a36ca3cad32747bcb8f372d21e9a2b69b8464732652442597c643839dee-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.41.1.0.1.el9_6.aarch64.rpmd4d89a36ca3cad32747bcb8f372d21e9a2b69b8464732652442597c643839dee-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm3512f8322603b002db86f6076f27f86f6e57678d3dc8710168d7ca66a965b1ee-ol9_aarch64_codeready_builder
libperf-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm8203577c207e8294581591e90a5df64856fbf9d439b616966d6c062e07ff3601-ol9_aarch64_codeready_builder
perf-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm25a472cf69fefd4fb61ec39e505ae9d5057e8a6eb43ff826145e24e5b1bc9694-ol9_aarch64_appstream
python3-perf-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm2d116318339f1b90ed1d865e7e5b586b236942d90a3b0055946c5ef57cdee802-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm2d116318339f1b90ed1d865e7e5b586b236942d90a3b0055946c5ef57cdee802-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.41.1.0.1.el9_6.aarch64.rpmd68f569288ebc535eb743ad10c72e38fa868357faa89513360c6b0b0619c599e-ol9_aarch64_appstream
rv-5.14.0-570.41.1.0.1.el9_6.aarch64.rpm7be903122387baffd794590bf3863dde868aabd96741e97a5f6722f547fc4c12-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_x86_64_appstream
kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_x86_64_baseos_latest
kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_x86_64_codeready_builder
kernel-5.14.0-570.41.1.0.1.el9_6.src.rpma746b3c4b7f7285cc8cc5cdaedd80c50e8e115885cde37869c06339737dc4d71-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm96ec1772ed4926efde7d70cd3a94335e1ba6548004fb995f12f654d15c73d4ed-ol9_x86_64_baseos_latest
kernel-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm96ec1772ed4926efde7d70cd3a94335e1ba6548004fb995f12f654d15c73d4ed-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.41.1.0.1.el9_6.noarch.rpmbf8f1f46ff4dfbf376266c937780a1cddd9793e3173b26d59a9f906626f0d1fe-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.41.1.0.1.el9_6.noarch.rpmbf8f1f46ff4dfbf376266c937780a1cddd9793e3173b26d59a9f906626f0d1fe-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmd847f4147d8020ea9cc1175889eb6a20d75c23a940755605ec6ed8cd7b2d0f41-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmd847f4147d8020ea9cc1175889eb6a20d75c23a940755605ec6ed8cd7b2d0f41-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm59e8c0527d55c23cf83274b19eea5ec363a66f883e5d4e393241adf6a8d714a5-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm1c0af9009cd3db784b8cdfe0da3ff9f68e8a50522bc47e6630b3b48661f5b97e-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm1c0af9009cd3db784b8cdfe0da3ff9f68e8a50522bc47e6630b3b48661f5b97e-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm62804b21cb8234a39e13b001ba79f7a1d3f76eec24477662c9ab374c9b03897e-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm62804b21cb8234a39e13b001ba79f7a1d3f76eec24477662c9ab374c9b03897e-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm629e165ade595546aee681c2a4b0d7c49d9ef8d00bd0daa3aafa58b386a946e0-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm89d2e120cd061ca2b01960d8f5858aa8e8a68b2f73f2007fd4898ca45a934555-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm98bcba38f7905272f1465460bfae5eabb6011a0c0fd8e120a3ea661b2f06aa55-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm98bcba38f7905272f1465460bfae5eabb6011a0c0fd8e120a3ea661b2f06aa55-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm4e7233cfbc0521240e2022871e8f2b296bb4122a0e4245e3c8bd60f27464ecde-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm4e7233cfbc0521240e2022871e8f2b296bb4122a0e4245e3c8bd60f27464ecde-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm22550bacafb4a778e60b3543d6c760d9f8c874549c5458185e6ad2ae80f82cd3-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm22550bacafb4a778e60b3543d6c760d9f8c874549c5458185e6ad2ae80f82cd3-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm8f24ee52a86e2d0742675ab8d83264b3acbf0ac38d046ee0e535d9fa98a72b87-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm8f24ee52a86e2d0742675ab8d83264b3acbf0ac38d046ee0e535d9fa98a72b87-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmf5d19fe0fcf3ef4b23a725bccb0d1b0fcda50e65219ad800cee3eb8a0ad2d8de-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmc74966aec718c257b8b4449917e4bd79437d3e66e6a143a838b5f5cad8a315fd-ol9_x86_64_appstream
kernel-doc-5.14.0-570.41.1.0.1.el9_6.noarch.rpma3355fdb4533c85a5db96b298857ca1a527082fed8f5cb3aeea1f3ce9b36bddf-ol9_x86_64_appstream
kernel-headers-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmc53c8eef805f025f427ed7173bc1dce1506fe59208172c8e22cde30c707f10d9-ol9_x86_64_appstream
kernel-modules-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm0c2044951eb7d8badd53340fca080af5afd3305bc0da620de5a8183ebeb53a46-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm0c2044951eb7d8badd53340fca080af5afd3305bc0da620de5a8183ebeb53a46-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmef30245e1a26b7725fa678335b72701eb7b02bc12c483f41572319663bc92804-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmef30245e1a26b7725fa678335b72701eb7b02bc12c483f41572319663bc92804-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmfea2fbd13803bf13ed40c64e7cb011988973d4f7a011a1390b6cbc143cb5a0f6-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmfea2fbd13803bf13ed40c64e7cb011988973d4f7a011a1390b6cbc143cb5a0f6-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm8b9cca60ed5e39b7de087c79c34f0228b4d6658fc55b0b9621c5b218e837641a-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm8b9cca60ed5e39b7de087c79c34f0228b4d6658fc55b0b9621c5b218e837641a-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm004858d7010b74f1fe8068c69747b883de84e34f7c795232c7fab61e3802bf23-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm004858d7010b74f1fe8068c69747b883de84e34f7c795232c7fab61e3802bf23-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.41.1.0.1.el9_6.x86_64.rpme8e00be7dcce35920dc1acfd1a516b4499702816c65cbf3836240e9c596ea65a-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmb0b7206c6a7c55b31ebc97ad488d31203c3ce6c3293bd5295d681bb98b80ddb1-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmb0b7206c6a7c55b31ebc97ad488d31203c3ce6c3293bd5295d681bb98b80ddb1-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmad78ca9b3d141693ddc106368ec1df86cead87eed416cc591047e4210719922f-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmad78ca9b3d141693ddc106368ec1df86cead87eed416cc591047e4210719922f-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm04f178cc2e1836e9f30c03a81e30353ea58073dce042aee0d6330c41a18708aa-ol9_x86_64_codeready_builder
perf-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm13ef6ce9f929c25ff639107beb79a8c5941fb71ad950f1999266b894974c8467-ol9_x86_64_appstream
python3-perf-5.14.0-570.41.1.0.1.el9_6.x86_64.rpme57139b3302ad9ce3c68de1d157d21e350ddd21e1d9150489a1bda8087ccf315-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.41.1.0.1.el9_6.x86_64.rpme57139b3302ad9ce3c68de1d157d21e350ddd21e1d9150489a1bda8087ccf315-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.41.1.0.1.el9_6.x86_64.rpmb9c97fcb57a6a2006ad238a4889178ff71527df898f1b5af6484a63a808a140a-ol9_x86_64_appstream
rv-5.14.0-570.41.1.0.1.el9_6.x86_64.rpm505bbb038afc4f617f4f1233af5c669f22f1aaeda06479503efe07d34f26eaa7-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights