Stay Connected:

ELSA-2025-16880

ELSA-2025-16880 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-09-29

Description


[5.14.0-570.49.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.49.1_6]
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114335] {CVE-2025-39698}
- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682}

[5.14.0-570.48.1_6]
- perf trace: Add missing perf_tool__init() (Michael Petlan) [RHEL-105393]
- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-114962]
- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-114962]

[5.14.0-570.47.1_6]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113916]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113333] {CVE-2025-38718}
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-113039]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-112558]
- ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-112873]
- ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-112873]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-112558]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-112558]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-112558]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-112558]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-112558]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-112558]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-112558]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-112558]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-112558]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-112683]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-112683]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-112683]
- ice: Fix E825 initialization (Petr Oros) [RHEL-112683]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82136]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111196] {CVE-2025-38527}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109571]
- cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-109525]
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106432] {CVE-2025-38472}
- sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-91800]


Related CVEs


CVE-2025-38718
CVE-2025-39682
CVE-2025-38472
CVE-2025-38527
CVE-2025-39698

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_aarch64_appstream
kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_aarch64_baseos_latest
kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_aarch64_codeready_builder
kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm8fe4f6aacfe9c099bc96463abecfb51dde0a7dafa990d17387f4aed537838e9a-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm7471f869157123d29478b74e8681023953f3eed87069fb9f1e7105f6f5d21ab1-ol9_aarch64_appstream
kernel-tools-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm5a99b81877eb66bdf5fd8e8dfda061953ee68cadd2f42c357e45d48a2975f4d2-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm5a99b81877eb66bdf5fd8e8dfda061953ee68cadd2f42c357e45d48a2975f4d2-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm5c590078b89056edc9eb642cd014a7c517a8544f8739a4fbd84c6c67ca440296-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm5c590078b89056edc9eb642cd014a7c517a8544f8739a4fbd84c6c67ca440296-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm28f7855722ae9bd1c19252301565056eb18720f17ba1236f4741fe88e6522d50-ol9_aarch64_codeready_builder
libperf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm0b109af4227af2a7de0a2995e6e4abdb0cb3bb14fee83c38415e31119c4d7e53-ol9_aarch64_codeready_builder
perf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpmc901a8a961a08a66c43d7176ebb437919f4c1fac60889d75b699eeab5cfee8b7-ol9_aarch64_appstream
python3-perf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpmbba52e41376d3eb0ddceab7d81515a8294d73974e6a9cf29c1faff338c5dbde4-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpmbba52e41376d3eb0ddceab7d81515a8294d73974e6a9cf29c1faff338c5dbde4-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm977321755589968faca7ea403eead802672c4890a5e90b779affbc356e6746d0-ol9_aarch64_appstream
rv-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm168fca5af24b3fc604cd901ea76e3a9c91501228bab74e679eb757def7a3e3be-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_x86_64_appstream
kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_x86_64_baseos_latest
kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_x86_64_codeready_builder
kernel-5.14.0-570.49.1.0.1.el9_6.src.rpm400254bd246cdcb5705246f087bb01ab9230d2088170a5d1d810aa7415221e00-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm17f955e901f0b1efbe613bcfb1e04845f2536a2a2e76632cd32f693d4c5f83e0-ol9_x86_64_baseos_latest
kernel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm17f955e901f0b1efbe613bcfb1e04845f2536a2a2e76632cd32f693d4c5f83e0-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.49.1.0.1.el9_6.noarch.rpm5a4d1262dd967269815d8aa970c5f2eecc687826d952b6e920ea1da10cb5c6d3-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.49.1.0.1.el9_6.noarch.rpm5a4d1262dd967269815d8aa970c5f2eecc687826d952b6e920ea1da10cb5c6d3-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm7b539adf9a6d0d0dd4db2f1c862eaf5301837ca511540aff7f8009e98453c860-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm7b539adf9a6d0d0dd4db2f1c862eaf5301837ca511540aff7f8009e98453c860-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm1eba69c8deab6fea281ba8f2754412418efde622e116932722823c31d56abba5-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm601d756731e2bf1a7ca6ffeec5fb10b736f05e7e029f828ec5daa0b5eb6f77a1-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm601d756731e2bf1a7ca6ffeec5fb10b736f05e7e029f828ec5daa0b5eb6f77a1-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmf0b5c0b3f642205ae0680a18e872e302bcb13091f6313c836016df93c2010258-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmf0b5c0b3f642205ae0680a18e872e302bcb13091f6313c836016df93c2010258-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmf7fd35fd9f54b325a23314d4ed029bd53eea270912936d339b14b5ecc9742d4c-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmf391b22a3f57f71739448b0ca52e6aeb408740433c66e735e5ee74eb28fbfb85-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.49.1.0.1.el9_6.x86_64.rpme7d49b7fe61da7d22d0905f6fd4871765aaaefa70422acbe13303492f25b58ab-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.49.1.0.1.el9_6.x86_64.rpme7d49b7fe61da7d22d0905f6fd4871765aaaefa70422acbe13303492f25b58ab-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm81e232e4fd17e2c7f2eb69fe070c902c70ab390b4f8c7da6de45a371890296c1-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm81e232e4fd17e2c7f2eb69fe070c902c70ab390b4f8c7da6de45a371890296c1-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm5ec57f02da87b084b716c96c02ad339de1f2a50f5927afae76ca45994b89685e-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm5ec57f02da87b084b716c96c02ad339de1f2a50f5927afae76ca45994b89685e-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm6f8a86f3ee81d3ea567af81fb4f8893359abf41045676432e8997973a8123d2c-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm6f8a86f3ee81d3ea567af81fb4f8893359abf41045676432e8997973a8123d2c-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm7311152a5ec5a90d3786c7d23dc20e5aeeecd0fde281a0705b5941c1a279e4ca-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmb577989e1eb329c00b3f3d95231d6596f5953f384169fc85c60110dfaf38257a-ol9_x86_64_appstream
kernel-doc-5.14.0-570.49.1.0.1.el9_6.noarch.rpmb76ec9d97f104aac0000e7ab399c529938215e08bb842d7b7de60c522d1059b7-ol9_x86_64_appstream
kernel-headers-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm60a5842d4b8808558db529ff8bcd3f2cf648afe7455fb995e22fc71b963830dd-ol9_x86_64_appstream
kernel-modules-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm502cf66ad9cffd9a0242bb06a2b394be5bd1b7d46e1b8aef805e4e09534811c9-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm502cf66ad9cffd9a0242bb06a2b394be5bd1b7d46e1b8aef805e4e09534811c9-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmcde015a442f7461a6113437401dff27eb692248ea24ddaef183f3030d75dafd4-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmcde015a442f7461a6113437401dff27eb692248ea24ddaef183f3030d75dafd4-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm64e059c214a66235f5585a99b70013f9ed34c02da5c69fdf5bf4106703f3f538-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm64e059c214a66235f5585a99b70013f9ed34c02da5c69fdf5bf4106703f3f538-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm8832055f75a75855d5614cae3c88779fddcac09915c03d7ecdc74c0aa489220e-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm8832055f75a75855d5614cae3c88779fddcac09915c03d7ecdc74c0aa489220e-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmfa988a261bfc94398638904871eb80cfa579b860f927f91598448f2befafa06e-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmfa988a261bfc94398638904871eb80cfa579b860f927f91598448f2befafa06e-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm6bd6c466d4a04a054e7ff99af9b1c14f3a62d0d4005c53d5ce07f5cd4584e410-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm4992b1736d023987e89ef250253b02e4d8c7a15722c4342cdab9dd4554d233fb-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm4992b1736d023987e89ef250253b02e4d8c7a15722c4342cdab9dd4554d233fb-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm77da07d5f583a4b22df3a4878b2a7ba2a728b577b67159e006250445659d73bb-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm77da07d5f583a4b22df3a4878b2a7ba2a728b577b67159e006250445659d73bb-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm810b590b19e409ffef1667833f510d6502e2ea34b6dc94deae54aad7f44b857f-ol9_x86_64_codeready_builder
perf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmc27b15319967c58dba24ec83ebc13123b8013236c999401888735472955be3a5-ol9_x86_64_appstream
python3-perf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm0a562f7432fb91754ae1d8a68aefea91a6190e0eab97e7adf6badb937bb17a0f-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm0a562f7432fb91754ae1d8a68aefea91a6190e0eab97e7adf6badb937bb17a0f-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmc818acfcda41551b81e5f890e93f33c446ba77c56a6036cbc67748a887193d20-ol9_x86_64_appstream
rv-5.14.0-570.49.1.0.1.el9_6.x86_64.rpmba28561985f69d675b7153404600276602a2cf3e66cb8e022000684750162dfe-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights