Stay Connected:

ELSA-2025-16398

ELSA-2025-16398 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-09-23

Description


[5.14.0-570.46.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.46.1_6]
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}
- net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113558] {CVE-2025-39694}
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107301] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107301] {CVE-2025-38498}
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107649] {CVE-2025-37810}

[5.14.0-570.45.1_6]
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Adrian Moreno) [RHEL-113279]
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-108118]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-108118]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-108118]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-108118]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-108118]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-108118]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-108118]
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111766]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111766]


Related CVEs


CVE-2023-53125
CVE-2025-37810
CVE-2025-38498
CVE-2025-39694

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_aarch64_appstream
kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_aarch64_baseos_latest
kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_aarch64_codeready_builder
kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.46.1.0.1.el9_6.aarch64.rpma07720f6908c0fc23b9d3eea2a069dff0beda48a7f2a6529c1c4b1543d760a65-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm8281ec272d8721fe218d6dac8efbc404e289dcbefc228e76b506e416857bcf04-ol9_aarch64_appstream
kernel-tools-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm6838435e265c3400f786983d22dabd5bb79f76b0cf29c043d3d2c1412c6c801c-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm6838435e265c3400f786983d22dabd5bb79f76b0cf29c043d3d2c1412c6c801c-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.46.1.0.1.el9_6.aarch64.rpmc5080abbdfc028125a77c7ebae0072bd5509d62754681b34c33755597dafc092-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.46.1.0.1.el9_6.aarch64.rpmc5080abbdfc028125a77c7ebae0072bd5509d62754681b34c33755597dafc092-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.46.1.0.1.el9_6.aarch64.rpmce08b3e6b0da299912dbd5de2d4fc196c4ffe58405bd3562d3e5c1e3290c1c8c-ol9_aarch64_codeready_builder
libperf-5.14.0-570.46.1.0.1.el9_6.aarch64.rpmc5a23c9f0bc27078439c52090e3a016686f959628aea50d00c0215e797f1d9b9-ol9_aarch64_codeready_builder
perf-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm18c9601d98b3f853bb33b6b58c918b596a3296bd76d547e4f12e5761f9dd15ae-ol9_aarch64_appstream
python3-perf-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm03e7b8c646fd7c06860fcc875067aa9521ea524a061934f7bed8c68799874cdb-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm03e7b8c646fd7c06860fcc875067aa9521ea524a061934f7bed8c68799874cdb-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm5c480d577ad2f95ed8bec0c3fe6a7303343c19bda1c4119aa4bacb887d693170-ol9_aarch64_appstream
rv-5.14.0-570.46.1.0.1.el9_6.aarch64.rpm012e434ae1d2df18ba4075565942f2ee81c7b7b6d188679a158dd4c3bcb67564-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_x86_64_appstream
kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_x86_64_baseos_latest
kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_x86_64_codeready_builder
kernel-5.14.0-570.46.1.0.1.el9_6.src.rpma861c7fd28dcd673eb8614da400f7dc7d694dfd3df66f8cce5db4f8f91035332-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.46.1.0.1.el9_6.x86_64.rpme4232c6db0a02600eeb02cfa66c10721d6a91fa15c27a2ebf78d37fa7a78aca4-ol9_x86_64_baseos_latest
kernel-5.14.0-570.46.1.0.1.el9_6.x86_64.rpme4232c6db0a02600eeb02cfa66c10721d6a91fa15c27a2ebf78d37fa7a78aca4-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.46.1.0.1.el9_6.noarch.rpm456dcfa0a76bc8a1a296fdc615f022b37ad116aae00a2cca07320d16a3933abb-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.46.1.0.1.el9_6.noarch.rpm456dcfa0a76bc8a1a296fdc615f022b37ad116aae00a2cca07320d16a3933abb-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmcec7075d52bf9de8188c10614afbfa77405924c8d688b4eff1d80c4670ed8184-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmcec7075d52bf9de8188c10614afbfa77405924c8d688b4eff1d80c4670ed8184-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm946ec8ff161cdfae2d8a19e461363d4b43594a5cc4d0bca3b5af89cdf60f351d-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm34ff8d5c231671d3819bbbb9d6265b1e5c1ed68edd271607b5668f904e7b229f-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm34ff8d5c231671d3819bbbb9d6265b1e5c1ed68edd271607b5668f904e7b229f-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmefe553e18bea299a745ef25c8ef019fbd942f84442f24bb22abca5a119bbcd5e-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmefe553e18bea299a745ef25c8ef019fbd942f84442f24bb22abca5a119bbcd5e-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm1a78364bfc2f7701e76a20088e20dd419d44688cb6fbc29d5698a861b380fc86-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmfecbf46b9f0dc91bdcc120e64c311569d0e58b807c2db4b721ec054e339f5fce-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm33cccc1b1ca8667d57d20717718bf926831143757e9e87bab323cdc4582ae6a7-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm33cccc1b1ca8667d57d20717718bf926831143757e9e87bab323cdc4582ae6a7-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmaf2a8d4ed06a8da44f9148357a5349c939637ceffb5ec56685392a0c3561ef2e-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmaf2a8d4ed06a8da44f9148357a5349c939637ceffb5ec56685392a0c3561ef2e-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.46.1.0.1.el9_6.x86_64.rpme2bff07db8ae7549d390e9c58e1ae7500ef284ece1101cd5f5e464a91e2d80a3-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.46.1.0.1.el9_6.x86_64.rpme2bff07db8ae7549d390e9c58e1ae7500ef284ece1101cd5f5e464a91e2d80a3-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm29d9e68dfddeefb2c9bc381e976fbc48b4ad330ad0b2ed6c4801867bf2566539-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm29d9e68dfddeefb2c9bc381e976fbc48b4ad330ad0b2ed6c4801867bf2566539-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm4c553029b4076791624c71621bd5f21647141d6c26f0b67f9cb0ece4e50e2920-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm047a6e5a47b14d2422a297040ebc99501e750d2cda74dc9061f8fe3fb7344726-ol9_x86_64_appstream
kernel-doc-5.14.0-570.46.1.0.1.el9_6.noarch.rpmfaad884a5531759189ca3c5a404dc3ae29812798ccea0f17adc3c2e85e4aad36-ol9_x86_64_appstream
kernel-headers-5.14.0-570.46.1.0.1.el9_6.x86_64.rpme7dd2b086f881f4c2058a91ddbc0b92579fe19f3cc09929b1daa314e1fe7ea55-ol9_x86_64_appstream
kernel-modules-5.14.0-570.46.1.0.1.el9_6.x86_64.rpma903ee7499c839c00bbd4a3ac6ff48a39168807aff0a5978da44b531ef23678f-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.46.1.0.1.el9_6.x86_64.rpma903ee7499c839c00bbd4a3ac6ff48a39168807aff0a5978da44b531ef23678f-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm9efa1ab9ba23590ca88f84c9647aad136f7a2533fa64542050cf955a3ca640d8-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm9efa1ab9ba23590ca88f84c9647aad136f7a2533fa64542050cf955a3ca640d8-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm788775a438d1b6aff56f9b49fcfa8560bf25d157247ad9173f8231518fc49f48-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm788775a438d1b6aff56f9b49fcfa8560bf25d157247ad9173f8231518fc49f48-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm8d6748607bc9ed2880579a18e1f30d99f845bb23a61ce5961705c4ea4fd6485d-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm8d6748607bc9ed2880579a18e1f30d99f845bb23a61ce5961705c4ea4fd6485d-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmd69523757e892e4f422b40373805217222b3cc5b187557641be7fb0796697045-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmd69523757e892e4f422b40373805217222b3cc5b187557641be7fb0796697045-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm7737dede3c46433e8aac36bafd3e7c53e1e7c3fdca9ba25e7e594b64895b2170-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmd931f856158dad2087d13b6bc0d4ee59e10dc93e7eb52061346495f062cfeb8c-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmd931f856158dad2087d13b6bc0d4ee59e10dc93e7eb52061346495f062cfeb8c-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmf610d27064dc9f14e0807fa68e40149200d5713312daa8f46fe07c539ef5dab0-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmf610d27064dc9f14e0807fa68e40149200d5713312daa8f46fe07c539ef5dab0-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.46.1.0.1.el9_6.x86_64.rpma491b3e9abc934192c64d1a754deb8df511d6fd4735b30e0bd1297ba8dddbccc-ol9_x86_64_codeready_builder
perf-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmc3d26530bb9ef304e406bfda30c5cfc926a91082e4911a98f7b5aae079a2617d-ol9_x86_64_appstream
python3-perf-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm3a1d8c307f031187a3f2f9a243fdb682afa542c39a6adbc710ee51659baf695e-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm3a1d8c307f031187a3f2f9a243fdb682afa542c39a6adbc710ee51659baf695e-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.46.1.0.1.el9_6.x86_64.rpmb090a15874e5250684007b0b87611fc8f10a7aa24231a32d9686cf58d9a25783-ol9_x86_64_appstream
rv-5.14.0-570.46.1.0.1.el9_6.x86_64.rpm191c335c8b446e296834e81a8c0f2c35ea4f8543a6e754094a768a28bf46f632-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights