Stay Connected:

ELSA-2025-17760

ELSA-2025-17760 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-10-13

Description


[5.14.0-570.52.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.52.1_6]
- crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117232] {CVE-2023-53373}
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116186]
- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-115069]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-115069]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-115069]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-115069]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-115069]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-115069]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-115069]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-115069]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-115069]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-115069]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-115069]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-115069]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-115069]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-115069]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-115069]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-115069]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (Maxim Levitsky) [RHEL-115069]
- RDMA/mana_ib: use the correct page table index based on hardware page size (Maxim Levitsky) [RHEL-115069]
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Maxim Levitsky) [RHEL-115069]
- net: mana: Fix RX buf alloc_size alignment and atomic op panic (Maxim Levitsky) [RHEL-115069]
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114688] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114688]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114688] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111036] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111036] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111036] {CVE-2025-38556}
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111052] {CVE-2025-38614}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107109]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107109]


Related CVEs


CVE-2025-38556
CVE-2023-53373
CVE-2025-38614
CVE-2025-39757

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_aarch64_appstream
kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_aarch64_baseos_latest
kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_aarch64_codeready_builder
kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm40683da4d1a7a1be801ec8f91c99568bc0aa3a2397a1f835e011d6fc0c8e3991-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm14e821295d6321695480de2d2e47e6f4c75df6e8c19ee23b9ee5f55718896ae2-ol9_aarch64_appstream
kernel-tools-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm23f24bbd8fb85babe0275521ebd9d9652da69401e586579d5e223ac3c73923bf-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm23f24bbd8fb85babe0275521ebd9d9652da69401e586579d5e223ac3c73923bf-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm9126c3bda2b3c22077d38b73678d7abac23a2871361e542248e6839f106b4667-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm9126c3bda2b3c22077d38b73678d7abac23a2871361e542248e6839f106b4667-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm697cc8309859a79c482f6215f0232e63edfe26bfa686eee941efe19c9b7544e1-ol9_aarch64_codeready_builder
libperf-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm6bbb57cc527a38e20834b683bc98c3b422c18474c637bee7d04f6050b1f9077b-ol9_aarch64_codeready_builder
perf-5.14.0-570.52.1.0.1.el9_6.aarch64.rpme08ad929c3850664b44745e47429019384e687ecbd0f37378d43142bf0620292-ol9_aarch64_appstream
python3-perf-5.14.0-570.52.1.0.1.el9_6.aarch64.rpmbf0cfb07c1196f3be7e6104c13a5d1a746c2b50735644e62a0894cd8a0fc2a35-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.52.1.0.1.el9_6.aarch64.rpmbf0cfb07c1196f3be7e6104c13a5d1a746c2b50735644e62a0894cd8a0fc2a35-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.52.1.0.1.el9_6.aarch64.rpm93d718f1e97e1506668eafda000c1a1106bcb1c17a0f3e2d6032a2336b221831-ol9_aarch64_appstream
rv-5.14.0-570.52.1.0.1.el9_6.aarch64.rpmf5693995b9b1460eb5c1368e321caf616eebeca0715619491146423197d53711-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_x86_64_appstream
kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_x86_64_baseos_latest
kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_x86_64_codeready_builder
kernel-5.14.0-570.52.1.0.1.el9_6.src.rpmfcd1ac1964a31bb18fb875fc39f47ec63381ba857a55ac3bfaaac58a29ae3f7e-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm095235f786a5e6f295d815666f35afc17b92c2ed0f9c5c96b849b99a9e4a9b4c-ol9_x86_64_baseos_latest
kernel-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm095235f786a5e6f295d815666f35afc17b92c2ed0f9c5c96b849b99a9e4a9b4c-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.52.1.0.1.el9_6.noarch.rpm0e77701a6785802185428b2657334fc96c40658bb563d356366c0957cf8b5799-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.52.1.0.1.el9_6.noarch.rpm0e77701a6785802185428b2657334fc96c40658bb563d356366c0957cf8b5799-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm19aa3f7590d1aacfed966ae1e8502a9d4093efedf9a303d4bb6d65f43b2c6011-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm19aa3f7590d1aacfed966ae1e8502a9d4093efedf9a303d4bb6d65f43b2c6011-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm00ffa4043539ce9ebf4ccc5b54ab8380f922f084a959b3f78f85cf73f77f7702-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm5ecdc14884b5eaa2cd7314c0d69c28823b004141b656abadf110a8b98cc4e782-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm5ecdc14884b5eaa2cd7314c0d69c28823b004141b656abadf110a8b98cc4e782-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmd71bfa4a2f0c18ba8e1eca4b3c02490821ab0b849c6cf5c034e1adc5bf24d9b3-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmd71bfa4a2f0c18ba8e1eca4b3c02490821ab0b849c6cf5c034e1adc5bf24d9b3-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm229a8f3e3be16bab983d74c223fc6694a78fdd2b99cbd2ad575cc4ebbff84af2-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmd29c4dac382e3003e310d651e5dec78f656ab9741ecd21b466ebda3646bc08dc-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm175dfbb6d7f7b6f53b86085ddbd3f7b8c0c291ca087e9fc959795dd3557e7a2e-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm175dfbb6d7f7b6f53b86085ddbd3f7b8c0c291ca087e9fc959795dd3557e7a2e-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm3cb973446d3b4ec0d727ee7222b6e5403261d1b7eb1970a380fafeddfc7cd5d1-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm3cb973446d3b4ec0d727ee7222b6e5403261d1b7eb1970a380fafeddfc7cd5d1-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm7d5e7304fdb986c0a2422c8e20bd5f7183c7882267401cb08d4f5cff9b03e5c4-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm7d5e7304fdb986c0a2422c8e20bd5f7183c7882267401cb08d4f5cff9b03e5c4-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmacfadbcee5cf13ac00d34885142af79facd648df53c4268266073beb7414729b-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmacfadbcee5cf13ac00d34885142af79facd648df53c4268266073beb7414729b-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm5c163648d036e485bbabe823442be2b239fcf50fad97740afdb071714c1d7dd7-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm924fc621ed52565a5b42e54b91b8535b362034c2287613fd0c9d039a21921b27-ol9_x86_64_appstream
kernel-doc-5.14.0-570.52.1.0.1.el9_6.noarch.rpmcea317db1edc6dd831015846783f4fa889ad63a071c2c1c306d20c5961e77614-ol9_x86_64_appstream
kernel-headers-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmcd17f7bf1fad6e64b676c981b34d013815047119de42ae12fb7076e5bd706fe2-ol9_x86_64_appstream
kernel-modules-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm1ec7cbdbaab3157d4f39db6bcf4cdf5e95dec4d77ec16f8be4834ff9274b7f31-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm1ec7cbdbaab3157d4f39db6bcf4cdf5e95dec4d77ec16f8be4834ff9274b7f31-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm9f8b390a5c76b9dcd7506842409062f2e491419ac6ea8306994d02c0c2ca0e42-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm9f8b390a5c76b9dcd7506842409062f2e491419ac6ea8306994d02c0c2ca0e42-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmf3a4e373f524a8e24466341cf6899491489b20921203ec4a94a270d5e356342c-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmf3a4e373f524a8e24466341cf6899491489b20921203ec4a94a270d5e356342c-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm5a5ff740a316321ee7954ce8d271a6d589a96d81f8632930acef3a79e2541803-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm5a5ff740a316321ee7954ce8d271a6d589a96d81f8632930acef3a79e2541803-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.52.1.0.1.el9_6.x86_64.rpma746061cbb7851e89f96f5a2f5e2a622418fdbf8a2da06d65ce5802cd68c475f-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.52.1.0.1.el9_6.x86_64.rpma746061cbb7851e89f96f5a2f5e2a622418fdbf8a2da06d65ce5802cd68c475f-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmc628c06f6b8541f60848f412030c52de6cf4ce4fae8f98638995e339437b7f6b-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm9c163c09fad97b804249ec4fba4c319a7cd6e92bd8a33aaccaf4f7e9f4590172-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm9c163c09fad97b804249ec4fba4c319a7cd6e92bd8a33aaccaf4f7e9f4590172-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm4cb3a72b72a9e41c3d2abd6907ab83267754fd717ac71c8038e5b44419e7e5cb-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm4cb3a72b72a9e41c3d2abd6907ab83267754fd717ac71c8038e5b44419e7e5cb-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.52.1.0.1.el9_6.x86_64.rpma6f27b645177fbd92dffa85ea7d6cef96d6c06f77dc5b392a190bf72aefd7fe1-ol9_x86_64_codeready_builder
perf-5.14.0-570.52.1.0.1.el9_6.x86_64.rpma0a03057b269eb0c4f83398144518bfaaf03c158d3ae0919b10fd3f9e0e234c4-ol9_x86_64_appstream
python3-perf-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmd1aa91b0dae5dd44470ab4a84cf694bb2183da700fd616f05578d44f1fa4db82-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmd1aa91b0dae5dd44470ab4a84cf694bb2183da700fd616f05578d44f1fa4db82-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.52.1.0.1.el9_6.x86_64.rpmc2e1c77b7687cfdbcd814169c45574eca1405b2f465084f2b28074719c27a5a1-ol9_x86_64_appstream
rv-5.14.0-570.52.1.0.1.el9_6.x86_64.rpm08939a060218346fd20d41831428f64b0e06ded010ad5e140a5c3c3d5c7df6c1-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights