ELSA-2025-18281

ELSA-2025-18281 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-10-20

Description


[5.14.0-570.55.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.55.1]
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119115] {CVE-2025-39841}

[5.14.0-570.54.1]
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113836] {CVE-2022-50087}
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110811]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110811] {CVE-2025-38571}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118256] {CVE-2025-39817}
- sunrpc: fix handling of server side tls alerts (Steve Dickson) [RHEL-111070] {CVE-2025-38566}
- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (Jay Shin) [RHEL-116679]

[5.14.0-570.53.1]
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117578] {CVE-2025-39849}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114436]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114436]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114436]
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93610] {CVE-2025-22026}
- irdma: free iwdev->rf after removing MSI-X (CKI Backport Bot) [RHEL-111485]


Related CVEs


CVE-2022-50087
CVE-2025-38566
CVE-2025-38571
CVE-2025-39817
CVE-2025-39849
CVE-2025-39841
CVE-2025-22026

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_aarch64_appstream
kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_aarch64_baseos_latest
kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_aarch64_codeready_builder
kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmaa62c11ea2dea3c9b228ea48267c4ce9cc495e48a00d4d9e9481aec48801c0dc-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.55.1.0.1.el9_6.aarch64.rpme0573f4c0dcaee5c772eb6d7aea6793c228944a836ad71e292f871353e79f753-ol9_aarch64_appstream
kernel-tools-5.14.0-570.55.1.0.1.el9_6.aarch64.rpm4fb6577374148638e90302d194e6b1266fe8b4ab4b3cd95ed1e6ca3ca271279a-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.55.1.0.1.el9_6.aarch64.rpm4fb6577374148638e90302d194e6b1266fe8b4ab4b3cd95ed1e6ca3ca271279a-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmec5814ab1aa7e3caaccad6fbb4ac5bc457c318e525065ae479415e07474f3352-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmec5814ab1aa7e3caaccad6fbb4ac5bc457c318e525065ae479415e07474f3352-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmda981817214d830af32f4b57bff92da245f86d0eaa9e6e397267b5777e67216d-ol9_aarch64_codeready_builder
perf-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmcec8a68cc47d9397d453257202f46c9c84587592643b5882265a92c05d7a9d54-ol9_aarch64_appstream
python3-perf-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmb534a5fab2c47598db4775953b25ad168dd886c0dc97be889e41c8cbc0c856b9-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.55.1.0.1.el9_6.aarch64.rpmb534a5fab2c47598db4775953b25ad168dd886c0dc97be889e41c8cbc0c856b9-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.55.1.0.1.el9_6.aarch64.rpm3ff00a921e7fd6f12fc94bbf437e90b2136b79909fbf76191c7a00baad9034d8-ol9_aarch64_appstream
rv-5.14.0-570.55.1.0.1.el9_6.aarch64.rpm3886118e1b5ceb8d625aa4b15281fb57b4214ee36c3c2ff6bf5827460dd87c36-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_x86_64_appstream
kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_x86_64_baseos_latest
kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_x86_64_codeready_builder
kernel-5.14.0-570.55.1.0.1.el9_6.src.rpm4eed33b6d41095741d0407adeaa77fd67f11d2d16255eec52377be89a923ecd1-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm4a1ac2ce7f67025c6da2d0f6cc0eeb208904a0d9c8aaf953882bdfa0d947b0e2-ol9_x86_64_baseos_latest
kernel-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm4a1ac2ce7f67025c6da2d0f6cc0eeb208904a0d9c8aaf953882bdfa0d947b0e2-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.55.1.0.1.el9_6.noarch.rpma4e91a24faab9e9ba61bbf8943f1446220450a77efd9c70648350f4b584b89bb-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.55.1.0.1.el9_6.noarch.rpma4e91a24faab9e9ba61bbf8943f1446220450a77efd9c70648350f4b584b89bb-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm0a19bbd298fdfc95bc63dc1d47be3c1a717234c3bf1fe0f2df43826e5f07c7b5-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm0a19bbd298fdfc95bc63dc1d47be3c1a717234c3bf1fe0f2df43826e5f07c7b5-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmb2a5cba3ba27383212953cee5041c32b9fe312592e14722be466830dd8a02c00-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmc0e4f77474d3dbe4ac61f3aac3aa8687ef22db074d6c749ef9abf0845a07df41-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmc0e4f77474d3dbe4ac61f3aac3aa8687ef22db074d6c749ef9abf0845a07df41-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm503dcb33b73ce8431433142c1a9a92616606c4fcfd9317938182ebd0fb72f1e3-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm503dcb33b73ce8431433142c1a9a92616606c4fcfd9317938182ebd0fb72f1e3-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.55.1.0.1.el9_6.x86_64.rpma84192c29034f78a55674f0a4193e4a13c3b7ea9fbd98c639b70e888a15d5bc0-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm05c2d2f955deabb45157ed69153e24c0ae2e1bc0049dec7ff3b6fe47c2959a68-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmd99e151d73eb9860f179b77bb267dc85c2f6657a747ea27585b93661f16404c2-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmd99e151d73eb9860f179b77bb267dc85c2f6657a747ea27585b93661f16404c2-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm9b8e0ab09416a84d498a8c332c71e8f9f28c6bac1e75fdd787af1b4d0ff0a639-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm9b8e0ab09416a84d498a8c332c71e8f9f28c6bac1e75fdd787af1b4d0ff0a639-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmcde7626dfe0a12b1c3ee3aa967ea65f3c854c9935c0f3cdab5cf51108e9169cd-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmcde7626dfe0a12b1c3ee3aa967ea65f3c854c9935c0f3cdab5cf51108e9169cd-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmbe8b16b63450c805a38dd50442c4e8e38c8fcc12b77da88a114f9e95ff3f575e-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmbe8b16b63450c805a38dd50442c4e8e38c8fcc12b77da88a114f9e95ff3f575e-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm46209aba032b270870983224d806b7793d963e05829fa26b610da10cbc67869b-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm08cc543587d82af539f70094d94d0be525a8e14ebada40e6382eb2f9e1dff254-ol9_x86_64_appstream
kernel-doc-5.14.0-570.55.1.0.1.el9_6.noarch.rpm7a12dfb5517b9d155a15499ed895931c40467738ece841231210d6c86182d3b8-ol9_x86_64_appstream
kernel-headers-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm25c5e511575bbcfb046e17dac8419155b5117fe42cfb50b416501c03c8517a56-ol9_x86_64_appstream
kernel-modules-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm6c4bcdada9e0e299c981295ac38304827c5c37406d5e832d369eddc5b8520d58-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm6c4bcdada9e0e299c981295ac38304827c5c37406d5e832d369eddc5b8520d58-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm0d3af5dcb1ebd961ca1f2f1320bd989dd67d521b9d9a8a49385975d68b719eb3-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm0d3af5dcb1ebd961ca1f2f1320bd989dd67d521b9d9a8a49385975d68b719eb3-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm110b5449ca2fa1df0e22e68a45c37dab9b2b0a32c00afe0ee18a9070672b347e-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm110b5449ca2fa1df0e22e68a45c37dab9b2b0a32c00afe0ee18a9070672b347e-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmf3ee03d047e043e1f1f95860913ed82e7e3509b91dd66224f15e23116b17a772-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmf3ee03d047e043e1f1f95860913ed82e7e3509b91dd66224f15e23116b17a772-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm6420b0b5a04e066e82b75a01df524f908da3f03c83ed71b5fb5338974e5e0ab6-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm6420b0b5a04e066e82b75a01df524f908da3f03c83ed71b5fb5338974e5e0ab6-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm2fa90944901ec763c82974b192ff25618834eeff5cbca007b11434f43ad9307c-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm4d22387737cc1bd28586b55e92e8c25c23ebf29ef2160f139932e2e778193ddb-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm4d22387737cc1bd28586b55e92e8c25c23ebf29ef2160f139932e2e778193ddb-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm80184c944feeb5efe6bf1e5fd3bb01afadd77f962939a54616bdc208d689019a-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm80184c944feeb5efe6bf1e5fd3bb01afadd77f962939a54616bdc208d689019a-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmdde95b211da94bf39f21ec6f1d3a267a03f2e7e3a19596612fbfd4ffb037b8c3-ol9_x86_64_codeready_builder
perf-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmda87b1b7f8798e58f0cf6558e0adf8512bc6c5bed472e36df50a941d550a9616-ol9_x86_64_appstream
python3-perf-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmadbb93058fc9ad1c380084091e756313576917b511ef7fe3591fafd321ebf9b4-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.55.1.0.1.el9_6.x86_64.rpmadbb93058fc9ad1c380084091e756313576917b511ef7fe3591fafd321ebf9b4-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm80dd0994afa51f529c1f87fbbdcdc0e36dd695121c3400e4d7d1b95cdaf2134e-ol9_x86_64_appstream
rv-5.14.0-570.55.1.0.1.el9_6.x86_64.rpm8e108e5a826b8bd89628bf242c5f8cdf2640a69373a11a1d559069b5f92e6198-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete