Stay Connected:

ELSA-2025-1659

ELSA-2025-1659 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-02-28

Description


- [5.14.0-503.26.1_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.26.1_5]
- redhat: drop Y issues from changelog (Jan Stancek)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075] {CVE-2024-53104}

[5.14.0-503.25.1_5]
- md/md-bitmap: fix writing non bitmap pages (CKI Backport Bot) [RHEL-76800]

[5.14.0-503.24.1_5]
- smb: client: fix potential race in cifs_put_tcon() (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: don't try following DFS links in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: allow reconnect when sending ioctl (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
- smb: client: allow more DFS referrals to be cached (Jay Shin) [RHEL-73594 RHEL-70959]
- smb3: fix broken reconnect when password changing on the server by allowing password rotation (Jay Shin) [RHEL-73594 RHEL-57983]
- i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69857 RHEL-30524]
- mm: migrate: fix getting incorrect page mapping during page migration (Rafael Aquini) [RHEL-70898 RHEL-27742 RHEL-28873] {CVE-2023-52490}
- mm: migrate: record the mlocked page status to remove unnecessary lru drain (Rafael Aquini) [RHEL-70898 RHEL-27742]
- mm: convert migrate_pages() to work on folios (Rafael Aquini) [RHEL-70898 RHEL-27742]
- migrate_pages_batch: simplify retrying and failure counting of large folios (Rafael Aquini) [RHEL-70898 RHEL-27742]


Related CVEs


CVE-2023-52490

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_aarch64_appstream
kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_aarch64_baseos_latest
kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_aarch64_codeready_builder
kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_aarch64_u5_baseos_patch
bpftool-7.4.0-503.26.1.el9_5.aarch64.rpm77bbc18bda58da80d21c20c2247607ed482fb0daa1028751e4a7b0c2727e393f-ol9_aarch64_baseos_latest
bpftool-7.4.0-503.26.1.el9_5.aarch64.rpm77bbc18bda58da80d21c20c2247607ed482fb0daa1028751e4a7b0c2727e393f-ol9_aarch64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.26.1.el9_5.aarch64.rpmc8e86039d576edcaf77242a13f2d55ef169186f06c4c415fa67b42e5b71a45a0-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-503.26.1.el9_5.aarch64.rpm03d24d2337104fdd31f3899556093c95f6eb4a3722a0cea79c8b9f15d3f19676-ol9_aarch64_appstream
kernel-tools-5.14.0-503.26.1.el9_5.aarch64.rpmcca6d0cc467e16e8a3b61918f1d6618185057915bacca29b8862b2b7444926ee-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-503.26.1.el9_5.aarch64.rpmcca6d0cc467e16e8a3b61918f1d6618185057915bacca29b8862b2b7444926ee-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.26.1.el9_5.aarch64.rpm1df46a0dfc860bd73066586c3ebd95a982651f95fb36ff3f3d02c84daa192616-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-503.26.1.el9_5.aarch64.rpm1df46a0dfc860bd73066586c3ebd95a982651f95fb36ff3f3d02c84daa192616-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.26.1.el9_5.aarch64.rpm6e623462f530ed9542fdc61ce094f6d04c233687c3463bf6867f1048333bd366-ol9_aarch64_codeready_builder
perf-5.14.0-503.26.1.el9_5.aarch64.rpmf5705ba90afc088274b2f2d15370d4e110acafb192b2a16884305c753ccc86b8-ol9_aarch64_appstream
python3-perf-5.14.0-503.26.1.el9_5.aarch64.rpmc6b137a9422963e9a259ef92c1fe07572f21a20c8d89dc06a03eaf4626a6c6a1-ol9_aarch64_baseos_latest
python3-perf-5.14.0-503.26.1.el9_5.aarch64.rpmc6b137a9422963e9a259ef92c1fe07572f21a20c8d89dc06a03eaf4626a6c6a1-ol9_aarch64_u5_baseos_patch
rtla-5.14.0-503.26.1.el9_5.aarch64.rpmc3343f7ff92003bf26ca88289e8836306f4cdf5c27a9ea05747a27d2935962b3-ol9_aarch64_appstream
rv-5.14.0-503.26.1.el9_5.aarch64.rpm744833094c9d010a89f93ecf167bb173d685a7642ed509e16819ea0b892b616f-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_x86_64_appstream
kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_x86_64_baseos_latest
kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_x86_64_codeready_builder
kernel-5.14.0-503.26.1.el9_5.src.rpmc5e65fa68a416a683af09d7d57e3ea3f74870e0dd25364bb4aa8ab8f0cecb1f1-ol9_x86_64_u5_baseos_patch
bpftool-7.4.0-503.26.1.el9_5.x86_64.rpm1d3fd54948c4e714ae6db2b738e2dcd13f80ec07be1e6fd7bfacdc3269f48bb4-ol9_x86_64_baseos_latest
bpftool-7.4.0-503.26.1.el9_5.x86_64.rpm1d3fd54948c4e714ae6db2b738e2dcd13f80ec07be1e6fd7bfacdc3269f48bb4-ol9_x86_64_u5_baseos_patch
kernel-5.14.0-503.26.1.el9_5.x86_64.rpm39b6b2b7af6762d5126e4ee0f781e072ef861679db97ce0d68380ebb57d00ee2-ol9_x86_64_baseos_latest
kernel-5.14.0-503.26.1.el9_5.x86_64.rpm39b6b2b7af6762d5126e4ee0f781e072ef861679db97ce0d68380ebb57d00ee2-ol9_x86_64_u5_baseos_patch
kernel-abi-stablelists-5.14.0-503.26.1.el9_5.noarch.rpmc5c8d5551b1277eb19d9daad9654b9282077a2995ce523883f451a5803741d7e-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-503.26.1.el9_5.noarch.rpmc5c8d5551b1277eb19d9daad9654b9282077a2995ce523883f451a5803741d7e-ol9_x86_64_u5_baseos_patch
kernel-core-5.14.0-503.26.1.el9_5.x86_64.rpm659fe30c7a78db12fefc1cc562563da98067be191613f5da3d594fe5034254a6-ol9_x86_64_baseos_latest
kernel-core-5.14.0-503.26.1.el9_5.x86_64.rpm659fe30c7a78db12fefc1cc562563da98067be191613f5da3d594fe5034254a6-ol9_x86_64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.26.1.el9_5.x86_64.rpm9bdd6a5e33ea7baf10557491700747abaa76735b86a0fbe529c6e045a4b64a87-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-503.26.1.el9_5.x86_64.rpm69ad15702a4621f73866760090e1d169787e9099ae29e256d8af374d51b33500-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-503.26.1.el9_5.x86_64.rpm69ad15702a4621f73866760090e1d169787e9099ae29e256d8af374d51b33500-ol9_x86_64_u5_baseos_patch
kernel-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpm546cef19fc5367036d121e1106dbc001021168b5ddd6c4eb7280bd81818db8b9-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpm546cef19fc5367036d121e1106dbc001021168b5ddd6c4eb7280bd81818db8b9-ol9_x86_64_u5_baseos_patch
kernel-debug-devel-5.14.0-503.26.1.el9_5.x86_64.rpmd165574b0eebc2eaf67e241aece4e30785dd53ce43d0be2263ec519a7a77eca8-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-503.26.1.el9_5.x86_64.rpm4a0925f6999ed52d309ca1e95de558679d88941b42dbb5c7d1f8c69a402e3a9f-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpm14332c92a85008c66343eea309f7ff005b2d0e08ca46f3d4cdb521b5abb34bf2-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpm14332c92a85008c66343eea309f7ff005b2d0e08ca46f3d4cdb521b5abb34bf2-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpmc0271ebd38cd0a5ee79a693f17406d7abc0ee45f85c008ee3bff8e2347e1edef-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpmc0271ebd38cd0a5ee79a693f17406d7abc0ee45f85c008ee3bff8e2347e1edef-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm19c9b40b63ff83e9ebe9d20f71b6919e7364c87189d4a81369e43a744951c06d-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm19c9b40b63ff83e9ebe9d20f71b6919e7364c87189d4a81369e43a744951c06d-ol9_x86_64_u5_baseos_patch
kernel-debug-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm6a67598ade8f3df2fef5e0b08a797f31cb4dcfae2e1a8ed96a2bee766380c2f0-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm6a67598ade8f3df2fef5e0b08a797f31cb4dcfae2e1a8ed96a2bee766380c2f0-ol9_x86_64_u5_baseos_patch
kernel-devel-5.14.0-503.26.1.el9_5.x86_64.rpm350c8f8e95fa9e37530a7bc0e9db0bbffb94bdefa762f8ef7a25a7cb659721dd-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-503.26.1.el9_5.x86_64.rpm510f8ee2ce1c535c4d6a0464039be54820819cc1996e01f43a38571fa684b2d9-ol9_x86_64_appstream
kernel-doc-5.14.0-503.26.1.el9_5.noarch.rpmd57c8eacb0b49faee909c9fa2e2685bf08b1df47a3b97dc87b07b34835e83f5f-ol9_x86_64_appstream
kernel-headers-5.14.0-503.26.1.el9_5.x86_64.rpme29ebcc184f1e7d7760d37b370e4a8f53f92e490e25d7fd7145455561c02e2a5-ol9_x86_64_appstream
kernel-modules-5.14.0-503.26.1.el9_5.x86_64.rpmf217d20b29f588c032abc03aa8ef5a7cbbfb04eaa63c90f93bd6eb782d626da7-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-503.26.1.el9_5.x86_64.rpmf217d20b29f588c032abc03aa8ef5a7cbbfb04eaa63c90f93bd6eb782d626da7-ol9_x86_64_u5_baseos_patch
kernel-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpmf47af7f89d25b1726a6a3d8c233a3a7c278ca02321f08bb10832a9c348f66958-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpmf47af7f89d25b1726a6a3d8c233a3a7c278ca02321f08bb10832a9c348f66958-ol9_x86_64_u5_baseos_patch
kernel-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm902f700921f4b29359d84d323ba9e0b29a6d3fa1efdfe7f9ee45f379f1d92d79-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm902f700921f4b29359d84d323ba9e0b29a6d3fa1efdfe7f9ee45f379f1d92d79-ol9_x86_64_u5_baseos_patch
kernel-tools-5.14.0-503.26.1.el9_5.x86_64.rpma39c29a63c8a0f6f60abe757e638e0f3839055da7eb5a7d5f9de673bcebb2025-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-503.26.1.el9_5.x86_64.rpma39c29a63c8a0f6f60abe757e638e0f3839055da7eb5a7d5f9de673bcebb2025-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.26.1.el9_5.x86_64.rpm42fc3e6f54666c86502530835c1b48c2f2607c714fc99f0ced64f2c6d1b9aa06-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-503.26.1.el9_5.x86_64.rpm42fc3e6f54666c86502530835c1b48c2f2607c714fc99f0ced64f2c6d1b9aa06-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.26.1.el9_5.x86_64.rpm435b9445d240a787f16cab5fc19499330662464c8ceb420776065d41e1dfb215-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm50885e6d7b648013ae65437bda300744e14c04b6b75c72e1cbcca018f597d0fa-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-503.26.1.el9_5.x86_64.rpm50885e6d7b648013ae65437bda300744e14c04b6b75c72e1cbcca018f597d0fa-ol9_x86_64_u5_baseos_patch
kernel-uki-virt-addons-5.14.0-503.26.1.el9_5.x86_64.rpmd09c4552d37cb6bc662d5fdc7cf15a4a68839ccda67c06f0e13c0a857e97486e-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-503.26.1.el9_5.x86_64.rpmd09c4552d37cb6bc662d5fdc7cf15a4a68839ccda67c06f0e13c0a857e97486e-ol9_x86_64_u5_baseos_patch
libperf-5.14.0-503.26.1.el9_5.x86_64.rpm24809dbd1abae8439b2b86101c972f3aee23dea28a4445f33c51958b4431d370-ol9_x86_64_codeready_builder
perf-5.14.0-503.26.1.el9_5.x86_64.rpm27b15b6648205ce788ae06ef16de7e6f3a791cabb8dcba1f02abad7f7bfa6d01-ol9_x86_64_appstream
python3-perf-5.14.0-503.26.1.el9_5.x86_64.rpmd920924c2e9ba21ae49da65e0d4825266ee5d15471f4837acac1328b9eea3812-ol9_x86_64_baseos_latest
python3-perf-5.14.0-503.26.1.el9_5.x86_64.rpmd920924c2e9ba21ae49da65e0d4825266ee5d15471f4837acac1328b9eea3812-ol9_x86_64_u5_baseos_patch
rtla-5.14.0-503.26.1.el9_5.x86_64.rpm995262f164195f35fdaf9f1657caf6dd6a2a7b1f2a63b2d8302b8aa3eab92250-ol9_x86_64_appstream
rv-5.14.0-503.26.1.el9_5.x86_64.rpm8519e9fcfe4af65f4ea147f7c137a281d24551e9c17de4730431868f06359434-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights