Stay Connected:

ELSA-2025-15661

ELSA-2025-15661 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-09-12

Description


[5.14.0-570.42.2.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.42.2_6]
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112780] {CVE-2025-38352}
- powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (CKI Backport Bot) [RHEL-113173]

[5.14.0-570.42.1_6]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103015]
- drm/framebuffer: Acquire internal references on GEM handles (Jose Exposito) [RHEL-106699] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Jose Exposito) [RHEL-106699] {CVE-2025-38449}
- drm/vkms: Fix use after free and double free on init error (CKI KWF BOT) [RHEL-99420] {CVE-2025-22097}
- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105933] {CVE-2025-38332}


Related CVEs


CVE-2025-38332
CVE-2025-38352
CVE-2025-38449
CVE-2025-22097

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_aarch64_appstream
kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_aarch64_baseos_latest
kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_aarch64_codeready_builder
kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm2180cde339c16ff46e3e01eaab26b6c86539d99e5ad3bfad067ba1a43d1daeb0-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm32afa1d2277953fa22aa767cbafc2cfe172db9ffb54273a97a0883df7f57c885-ol9_aarch64_appstream
kernel-tools-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm59c180980d760b8030ae198b1f6a1343642a624d1d0bca2c418c990b9fe2a8e3-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm59c180980d760b8030ae198b1f6a1343642a624d1d0bca2c418c990b9fe2a8e3-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.42.2.0.1.el9_6.aarch64.rpmb52031fb4a06ea0048870dd9d61101a75f2c8eb453f5cb2567d116444c31903d-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.42.2.0.1.el9_6.aarch64.rpmb52031fb4a06ea0048870dd9d61101a75f2c8eb453f5cb2567d116444c31903d-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm74073721d3a31f4f326498b0c2a116105a99d753bfb37b559d7e05ee28f0aa58-ol9_aarch64_codeready_builder
libperf-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm4fb03af3654135aee8a946ce75e23d6eb686717e0891371c575d03370aedbcf6-ol9_aarch64_codeready_builder
perf-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm730538d14453ac8d0b32090a54771dde2b0649b1621887488b83dfec5cd9f8ca-ol9_aarch64_appstream
python3-perf-5.14.0-570.42.2.0.1.el9_6.aarch64.rpmfa614868652fef8212c9ca8874f48d1253156f2b5de6487e0f224a0b8e7c0ea9-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.42.2.0.1.el9_6.aarch64.rpmfa614868652fef8212c9ca8874f48d1253156f2b5de6487e0f224a0b8e7c0ea9-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.42.2.0.1.el9_6.aarch64.rpm8a58d873eb291631a8cfcdfdbc21bdacbd403f9896761ca0023a75bf3a1c2050-ol9_aarch64_appstream
rv-5.14.0-570.42.2.0.1.el9_6.aarch64.rpme4764f2c4517544155317b74d546fe644fc39a6ea61b1c8a7beca48af2d869cb-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_x86_64_appstream
kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_x86_64_baseos_latest
kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_x86_64_codeready_builder
kernel-5.14.0-570.42.2.0.1.el9_6.src.rpm3cf4c2c4f7d92b305e2b7980365d8582c5520382633826c51c0e12bc9710d782-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm3539e832a5335b9e486b57ff9096997b4a703b8005f17fdad01121212857040b-ol9_x86_64_baseos_latest
kernel-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm3539e832a5335b9e486b57ff9096997b4a703b8005f17fdad01121212857040b-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.42.2.0.1.el9_6.noarch.rpm94f1c8d2cdf15d0019c781baf8460408978e2214489b8772630897291d2a44b5-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.42.2.0.1.el9_6.noarch.rpm94f1c8d2cdf15d0019c781baf8460408978e2214489b8772630897291d2a44b5-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmb0451c61ae518215934f7a9d6a40fe46f839700ab6da400990ede69d4595307d-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmb0451c61ae518215934f7a9d6a40fe46f839700ab6da400990ede69d4595307d-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmdef3f2a204100893f57fed665d330a77c742c8c399d4d50f4cc85ff7e650c512-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm28a2708d9d3654dc7ec239dd7c30151e9f3b141bb7c0f63b3677c660c6e765a5-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm28a2708d9d3654dc7ec239dd7c30151e9f3b141bb7c0f63b3677c660c6e765a5-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm8f44ced7df0004b95cae1eb9b2acf1d845b3fb9ca8d7c84d928dd334756d3188-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm8f44ced7df0004b95cae1eb9b2acf1d845b3fb9ca8d7c84d928dd334756d3188-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm1ef884a86aae7a4c34a01e861180747532fcb3978f7ccc81a0e04376d2e63319-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmc17e3c8f0e05f703a552f087c47ca8e97317386a5a0214a8b3ede2cc4fd33d70-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm3ca6ff0564ef7e5a433caf042947b9bd9a752b190dc4f03d1641e56f69605961-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm3ca6ff0564ef7e5a433caf042947b9bd9a752b190dc4f03d1641e56f69605961-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm0d3e30e0f30fa1198b920276919b37abe0826d3b22c87de626aad1b2218bd34a-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm0d3e30e0f30fa1198b920276919b37abe0826d3b22c87de626aad1b2218bd34a-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.42.2.0.1.el9_6.x86_64.rpma8cad89448879329175014dbbd299d9e092013168792e092f71ea9fbf064338f-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.42.2.0.1.el9_6.x86_64.rpma8cad89448879329175014dbbd299d9e092013168792e092f71ea9fbf064338f-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmb1ea10633b4873963d79bc72e3c30aa1a59b8789fd046a6a2035735ac6e82f61-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmb1ea10633b4873963d79bc72e3c30aa1a59b8789fd046a6a2035735ac6e82f61-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm69c2703eb4779f0d58fae4a1604a70e81343427746f31ba5827770fb4995feea-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm0ce637649b9ee20bcd78d4767bc482aea1f57737578cc70dd7ba4f243ef73214-ol9_x86_64_appstream
kernel-doc-5.14.0-570.42.2.0.1.el9_6.noarch.rpm5b895aa0733253d180c2c5dfb357889eb7129519222bc3cfed3b31153c8a1629-ol9_x86_64_appstream
kernel-headers-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm2de73981edb3ff7ffe034e10602ad5aa6b069c341c39a6669517cae55f9b6371-ol9_x86_64_appstream
kernel-modules-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm1b309a06b997ce1355479f41feec428d2d24624d13097ae545912c417aa0c984-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm1b309a06b997ce1355479f41feec428d2d24624d13097ae545912c417aa0c984-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmeeec1bf85d60cf754406a06e16d8dbdc0c39895e39a0e85d8ea9167a7ab699a6-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmeeec1bf85d60cf754406a06e16d8dbdc0c39895e39a0e85d8ea9167a7ab699a6-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm536ad70fe0ffce7b19d5ab5645c0092aa791866aaf1da7dc2f7eb0afbc2272f4-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm536ad70fe0ffce7b19d5ab5645c0092aa791866aaf1da7dc2f7eb0afbc2272f4-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm626c8cc2d924ff283a83cccd6c197839da408257a07e6845e290d21f9e8150a3-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm626c8cc2d924ff283a83cccd6c197839da408257a07e6845e290d21f9e8150a3-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm87c0d3777f9532d26d7c3412329c0f9f13f7f1269931a57d2edf72fc25e72028-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm87c0d3777f9532d26d7c3412329c0f9f13f7f1269931a57d2edf72fc25e72028-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm188bb62741ae8175c36e4f81ce8aad0e3b014ea5ae65237c7377b24be65d4261-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.42.2.0.1.el9_6.x86_64.rpma5f9029745e197dc28ee592add2a5bdae4eb2d83c3f1830dc4a487efb784e7b2-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.42.2.0.1.el9_6.x86_64.rpma5f9029745e197dc28ee592add2a5bdae4eb2d83c3f1830dc4a487efb784e7b2-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm9fc6ffe5d8677076757c783233e0ff2cf4eb795a6146e13ba3152e6483d9fe14-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm9fc6ffe5d8677076757c783233e0ff2cf4eb795a6146e13ba3152e6483d9fe14-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm0f53708b253e4ccded48f68265f9b5b0319f878fc8a69896001a763c4ff3cffd-ol9_x86_64_codeready_builder
perf-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm6424ee0af88c712717e8662e48ad446c4ace9ab784ed058a6bd4509854cc5261-ol9_x86_64_appstream
python3-perf-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmf424df3470ddd2142f48fa4b48224fdd42a6913f35eeea383cf32983d3506d32-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmf424df3470ddd2142f48fa4b48224fdd42a6913f35eeea383cf32983d3506d32-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.42.2.0.1.el9_6.x86_64.rpm2ba05b974156485c18f7956e4784a619fdfbc9c3b5aebd001a1d5497d0ee9c99-ol9_x86_64_appstream
rv-5.14.0-570.42.2.0.1.el9_6.x86_64.rpmf6aaab8892b029c44eccbcbcea74fa505f1cc7673e510a16df220910ca676be2-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights