Stay Connected:

ELSA-2025-1659

ELSA-2025-1659 - kernel security update

Type:SECURITY
Severity:MODERATE
Release Date:2025-02-28

Description


- [5.14.0-503.26.1_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.26.1_5]
- redhat: drop Y issues from changelog (Jan Stancek)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075] {CVE-2024-53104}

[5.14.0-503.25.1_5]
- md/md-bitmap: fix writing non bitmap pages (CKI Backport Bot) [RHEL-76800]

[5.14.0-503.24.1_5]
- smb: client: fix potential race in cifs_put_tcon() (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: don't try following DFS links in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: allow reconnect when sending ioctl (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: allow more DFS referrals to be cached (Jay Shin) [RHEL-73594 RHEL-70959]
- smb3: fix broken reconnect when password changing on the server by allowing password rotation (Jay Shin) [RHEL-73594 RHEL-57983]
- i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69857 RHEL-30524]
- mm: migrate: fix getting incorrect page mapping during page migration (Rafael Aquini) [RHEL-70898 RHEL-27742 RHEL-28873] {CVE-2023-52490}
- mm: migrate: record the mlocked page status to remove unnecessary lru drain (Rafael Aquini) [RHEL-70898 RHEL-27742]
- mm: convert migrate_pages() to work on folios (Rafael Aquini) [RHEL-70898 RHEL-27742]
- migrate_pages_batch: simplify retrying and failure counting of large folios (Rafael Aquini) [RHEL-70898 RHEL-27742]


Related CVEs


CVE-2023-52490

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_aarch64_appstream
kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_aarch64_baseos_latest
kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_aarch64_codeready_builder
kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_aarch64_u5_baseos_patch
bpftool-7.4.0-503.26.1.el9_5.aarch64.rpm1835f8e227d52455c7f9c6ab946f64cd-ol9_aarch64_baseos_latest
bpftool-7.4.0-503.26.1.el9_5.aarch64.rpm1835f8e227d52455c7f9c6ab946f64cd-ol9_aarch64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.26.1.el9_5.aarch64.rpm24bc2cd857d03975d74fc673845911bc-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-503.26.1.el9_5.aarch64.rpm851d7bd313d377f5b3f805714fbbdede-ol9_aarch64_appstream
kernel-tools-5.14.0-503.26.1.el9_5.aarch64.rpm53ce1f5ab00bceb5680e04e024406124-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-503.26.1.el9_5.aarch64.rpm53ce1f5ab00bceb5680e04e024406124-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.26.1.el9_5.aarch64.rpme4f788a348c9b1c363399d154c5c7768-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-503.26.1.el9_5.aarch64.rpme4f788a348c9b1c363399d154c5c7768-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.26.1.el9_5.aarch64.rpm0c674e931f4757620f4aec494dc42db1-ol9_aarch64_codeready_builder
perf-5.14.0-503.26.1.el9_5.aarch64.rpm1c14da1df32f4340a17d40efca9beb62-ol9_aarch64_appstream
python3-perf-5.14.0-503.26.1.el9_5.aarch64.rpm4f2fab948961b2f8be6a861a93e32816-ol9_aarch64_baseos_latest
python3-perf-5.14.0-503.26.1.el9_5.aarch64.rpm4f2fab948961b2f8be6a861a93e32816-ol9_aarch64_u5_baseos_patch
rtla-5.14.0-503.26.1.el9_5.aarch64.rpm2c48e624fb782a43e3af33cd17f10ac9-ol9_aarch64_appstream
rv-5.14.0-503.26.1.el9_5.aarch64.rpm57cfc0140df03043d6a3945e8974fee4-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_x86_64_appstream
kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_x86_64_baseos_latest
kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_x86_64_codeready_builder
kernel-5.14.0-503.26.1.el9_5.src.rpm0eb48f272b0d99320684bbdc91027bc7-ol9_x86_64_u5_baseos_patch
bpftool-7.4.0-503.26.1.el9_5.x86_64.rpm4bb0f33b18f62dc63b8f2338828e257c-ol9_x86_64_baseos_latest
bpftool-7.4.0-503.26.1.el9_5.x86_64.rpm4bb0f33b18f62dc63b8f2338828e257c-ol9_x86_64_u5_baseos_patch
kernel-5.14.0-503.26.1.el9_5.x86_64.rpm95c68263e391acffe6afdd2a9a0e7e4a-ol9_x86_64_baseos_latest
kernel-5.14.0-503.26.1.el9_5.x86_64.rpm95c68263e391acffe6afdd2a9a0e7e4a-ol9_x86_64_u5_baseos_patch
kernel-abi-stablelists-5.14.0-503.26.1.el9_5.noarch.rpmb075fabb6d07750859f2f05502f36fe6-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-503.26.1.el9_5.noarch.rpmb075fabb6d07750859f2f05502f36fe6-ol9_x86_64_u5_baseos_patch
kernel-core-5.14.0-503.26.1.el9_5.x86_64.rpma7529396598c3c5b7c8e7cc574c17c6e-ol9_x86_64_baseos_latest
kernel-core-5.14.0-503.26.1.el9_5.x86_64.rpma7529396598c3c5b7c8e7cc574c17c6e-ol9_x86_64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.26.1.el9_5.x86_64.rpmc059292af2da6310036cacf8a8dd007b-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-503.26.1.el9_5.x86_64.rpmdf3fdb5c969be148e579bb25394972da-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-503.26.1.el9_5.x86_64.rpmdf3fdb5c969be148e579bb25394972da-ol9_x86_64_u5_baseos_patch
kernel-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpmf6fb2cc5491604b0aec9806198a2f611-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpmf6fb2cc5491604b0aec9806198a2f611-ol9_x86_64_u5_baseos_patch
kernel-debug-devel-5.14.0-503.26.1.el9_5.x86_64.rpmc13a879158512a141a992bcfea3cce18-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-503.26.1.el9_5.x86_64.rpm49dddb85fe5c7c3117959ea52881851a-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpmfa48f5a754eff2690adaaae5bcc37497-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpmfa48f5a754eff2690adaaae5bcc37497-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm40435085468e5963719b6bd75180dc3e-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm40435085468e5963719b6bd75180dc3e-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm9e9f7f733295cc244167c2ef88a21a74-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm9e9f7f733295cc244167c2ef88a21a74-ol9_x86_64_u5_baseos_patch
kernel-debug-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm4f805241c9c63211369a5a8ecaf93162-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm4f805241c9c63211369a5a8ecaf93162-ol9_x86_64_u5_baseos_patch
kernel-devel-5.14.0-503.26.1.el9_5.x86_64.rpm5a84dbfc5c11f8f8e7b4cb3a63b500b6-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-503.26.1.el9_5.x86_64.rpme5763ee896a2dcb2bbc92cd49c66c982-ol9_x86_64_appstream
kernel-doc-5.14.0-503.26.1.el9_5.noarch.rpm526d13906f67a0e6eb8105e0467018b6-ol9_x86_64_appstream
kernel-headers-5.14.0-503.26.1.el9_5.x86_64.rpm000d17b2aa9903e012c545ab8d41105e-ol9_x86_64_appstream
kernel-modules-5.14.0-503.26.1.el9_5.x86_64.rpm3e9c93652f6d60339c43b16481f88c06-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-503.26.1.el9_5.x86_64.rpm3e9c93652f6d60339c43b16481f88c06-ol9_x86_64_u5_baseos_patch
kernel-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm0d7181d24f739a7e83f9451868543cf4-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm0d7181d24f739a7e83f9451868543cf4-ol9_x86_64_u5_baseos_patch
kernel-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm91cb85efe6231ebe671771e275ca99e3-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm91cb85efe6231ebe671771e275ca99e3-ol9_x86_64_u5_baseos_patch
kernel-tools-5.14.0-503.26.1.el9_5.x86_64.rpmcfb3ee020990cb26f027d710f2cb608d-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-503.26.1.el9_5.x86_64.rpmcfb3ee020990cb26f027d710f2cb608d-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.26.1.el9_5.x86_64.rpm3473704370db4e170a3ce8f606616df9-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-503.26.1.el9_5.x86_64.rpm3473704370db4e170a3ce8f606616df9-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.26.1.el9_5.x86_64.rpm2e3f205558b8bec6e6155ae28f9b705d-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpmf7f7a0b9a29a5f3ee669df99ec684fe3-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpmf7f7a0b9a29a5f3ee669df99ec684fe3-ol9_x86_64_u5_baseos_patch
kernel-uki-virt-addons-5.14.0-503.26.1.el9_5.x86_64.rpm5307c949af01a77fbfe70b3faeadea23-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-503.26.1.el9_5.x86_64.rpm5307c949af01a77fbfe70b3faeadea23-ol9_x86_64_u5_baseos_patch
libperf-5.14.0-503.26.1.el9_5.x86_64.rpma94eac243d2e28df683cba93941dd3d1-ol9_x86_64_codeready_builder
perf-5.14.0-503.26.1.el9_5.x86_64.rpmce9fb125cea397c182440b8d3064415a-ol9_x86_64_appstream
python3-perf-5.14.0-503.26.1.el9_5.x86_64.rpm740ae82733a3c71271265c624a040e45-ol9_x86_64_baseos_latest
python3-perf-5.14.0-503.26.1.el9_5.x86_64.rpm740ae82733a3c71271265c624a040e45-ol9_x86_64_u5_baseos_patch
rtla-5.14.0-503.26.1.el9_5.x86_64.rpmb37bfc6ac9b6c9e50010bd86200e482e-ol9_x86_64_appstream
rv-5.14.0-503.26.1.el9_5.x86_64.rpmeed9d4ec327f714d10e5ce3f74bb72b7-ol9_x86_64_appstream


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights