Stay Connected:

ELSA-2025-19105

ELSA-2025-19105 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-10-28

Description


[5.14.0-570.58.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.58.1]
- pstore/ram: Check start of empty przs during init (CKI Backport Bot) [RHEL-122067] {CVE-2023-53331}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114299] {CVE-2025-39718}

[5.14.0-570.57.1]
- NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-118731]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113610] {CVE-2025-39730}

[5.14.0-570.56.1]
- NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-111706]
- nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-111706]
- Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-111706]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-117879]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-117879]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-117879]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-117879]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-117879]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-117879]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-117879] {CVE-2025-39819}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114848] {CVE-2025-39751}
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-116232]
- xfs: make sure sb_fdblocks is non-negative (CKI Backport Bot) [RHEL-114540]
- block: fix adding folio to bio (Ming Lei) [RHEL-96789]


Related CVEs


CVE-2023-53331
CVE-2025-39718
CVE-2025-39819
CVE-2025-39730
CVE-2025-39751

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_aarch64_appstream
kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_aarch64_baseos_latest
kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_aarch64_codeready_builder
kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm6a38fae82dbaa5fe90779b4874f2efcde42e56355951930dec34ad6d4ab0dece-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm2320279d8f94f9b5ef5b4d6c0be5b9143c2b42a40198a48c1d8a9381d8a11edb-ol9_aarch64_appstream
kernel-tools-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm4d4cff57de436ad49919abe141c50e17c757d3b14308a888dc032adf18c47aaa-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm4d4cff57de436ad49919abe141c50e17c757d3b14308a888dc032adf18c47aaa-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm341e3afab221b3347113145017eb6ff6d6ae33c96007d2f649a3ede1354e8fdc-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm341e3afab221b3347113145017eb6ff6d6ae33c96007d2f649a3ede1354e8fdc-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.58.1.0.1.el9_6.aarch64.rpme60e164b3cc3a5cc207dd5fd25be1197c0d00f8e71493a79634fb0fd480aa212-ol9_aarch64_codeready_builder
libperf-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm462f250fc3ff1664506bcb752cafdf86bc7203386f911b8b97d75d4705b54f35-ol9_aarch64_codeready_builder
perf-5.14.0-570.58.1.0.1.el9_6.aarch64.rpmfdd6b915214e46e17ee970c17fc2cf5eae4109b3a05a43c79fed54b442351f10-ol9_aarch64_appstream
python3-perf-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm98cda0eb236ee4a3f93ea10bc7028a47ab415bd2ee48b60bf6fe99761e055e66-ol9_aarch64_appstream
rtla-5.14.0-570.58.1.0.1.el9_6.aarch64.rpma079fd5176cb74e4796080a9bc8942401d0254ed959563612bfa5b251dee4923-ol9_aarch64_appstream
rv-5.14.0-570.58.1.0.1.el9_6.aarch64.rpm5423f1ea6cc79579b6006adca155e19b76d12644ff58c014c85f85976f049f2e-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_x86_64_appstream
kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_x86_64_baseos_latest
kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_x86_64_codeready_builder
kernel-5.14.0-570.58.1.0.1.el9_6.src.rpm7f1e76df67f5967646f37e0488c65f142e4087abee35b4afc208421f3cf34a91-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm7442e9616dc102df403efa725a770460ad4cc482371c0737a42c8fb0df3b6700-ol9_x86_64_baseos_latest
kernel-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm7442e9616dc102df403efa725a770460ad4cc482371c0737a42c8fb0df3b6700-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.58.1.0.1.el9_6.noarch.rpme132a126ff003c8a144c093a4ae33ea53d4215149c0ad971281317b2638af6bd-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.58.1.0.1.el9_6.noarch.rpme132a126ff003c8a144c093a4ae33ea53d4215149c0ad971281317b2638af6bd-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm89e28facccb9bb42dc0abb287dee33ff45e531a4c984b8c60a4dddfa19b5ddb7-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm89e28facccb9bb42dc0abb287dee33ff45e531a4c984b8c60a4dddfa19b5ddb7-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma5261d587d5171e85613fe3ea32ceb395631ce839ffecfa2f3357cd0cadb280e-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.58.1.0.1.el9_6.x86_64.rpmc98d4b65f3d07b19e556577d69ad6f2c003ffb150daf242c90d465e75c53ca56-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.58.1.0.1.el9_6.x86_64.rpmc98d4b65f3d07b19e556577d69ad6f2c003ffb150daf242c90d465e75c53ca56-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma77057fa60693f9e4856e42eb04f75872f70a4f8807f2ea180df2f2dd41e7590-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma77057fa60693f9e4856e42eb04f75872f70a4f8807f2ea180df2f2dd41e7590-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm5834cf2aa2c4fe1d092c6530a66e6723460e6b7b6e1faf870b014e1d3228ca0a-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm024baf90509603614bca57f0b81f84a81da837435d9a78ef1ffcbe081f33d8ef-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm1ee1002b1af620c43f28d33998bb9743268a5e74fd9dd6fe3597ef988054d246-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm1ee1002b1af620c43f28d33998bb9743268a5e74fd9dd6fe3597ef988054d246-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpmf5ffde3a4d790a45025f7ad61813b1ac822aaac48292ac6a3ef7a7fa088af7f6-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpmf5ffde3a4d790a45025f7ad61813b1ac822aaac48292ac6a3ef7a7fa088af7f6-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm7fd372ec3fa6827e56dee4efc0dbb57209465db7b06c73a9a9f7a7c2f4aa0a76-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm7fd372ec3fa6827e56dee4efc0dbb57209465db7b06c73a9a9f7a7c2f4aa0a76-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm768f9e83bb568490f50dddfa1169a1c7d3cd8edf9e6031d8974d00f3c742cea6-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm768f9e83bb568490f50dddfa1169a1c7d3cd8edf9e6031d8974d00f3c742cea6-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.58.1.0.1.el9_6.x86_64.rpme2dc784ef2efaa23f636ea50a42c593901b9f7325d15d2209172fb46d319747a-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm3f8beec17b7c9b383344d735c643aa17b73a3971ff246e71af843ddd5287f0b6-ol9_x86_64_appstream
kernel-doc-5.14.0-570.58.1.0.1.el9_6.noarch.rpmd024da2454cd7c35ba121541611497eb94d57ea31a85dddc9f3901fceb98083c-ol9_x86_64_appstream
kernel-headers-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm6f9e8bf656bb722752a45633c409f2568426fc07631762a85eda7ab9c1e5e1d8-ol9_x86_64_appstream
kernel-modules-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma4feb659fba9c6abc6abc4a78e4a978880f6261bab3187f1725b44b82962f95c-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma4feb659fba9c6abc6abc4a78e4a978880f6261bab3187f1725b44b82962f95c-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm565643c605f90cdb4ae81770430dc6f3bc604badd62f7233bc052aa3f530079f-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm565643c605f90cdb4ae81770430dc6f3bc604badd62f7233bc052aa3f530079f-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.58.1.0.1.el9_6.x86_64.rpmabfa4a4c5b251c5a6115d38cc97362e8595d4c69063f25de061e39ce1cb076a7-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.58.1.0.1.el9_6.x86_64.rpmabfa4a4c5b251c5a6115d38cc97362e8595d4c69063f25de061e39ce1cb076a7-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm2ce3dc897344aca6aee392d244eda3d3be0d226db44e1732a0b01e51fed6f44d-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm2ce3dc897344aca6aee392d244eda3d3be0d226db44e1732a0b01e51fed6f44d-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma25d355f7f26b3c4df7344a16229b4254ec961c3a394de79a346b7dabfbc0fdd-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.58.1.0.1.el9_6.x86_64.rpma25d355f7f26b3c4df7344a16229b4254ec961c3a394de79a346b7dabfbc0fdd-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm849aa02b83fa32119540e5db1088bbd0b65a30f8f1d0bce9c18b1278e2a9f5d6-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm60447853dc5134ea13c68d725e82466ef35b503d9fe42b5ac4d76e644b4e44e7-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm60447853dc5134ea13c68d725e82466ef35b503d9fe42b5ac4d76e644b4e44e7-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm22ea1c0aeee7b58d9550bd9464e9363fa854e5497848bd38776a4dc7baf9b85d-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm22ea1c0aeee7b58d9550bd9464e9363fa854e5497848bd38776a4dc7baf9b85d-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm7505a053d825a470a6385bd00d9114944d5838e7c60d5d1ebdc31cb4571ce4c8-ol9_x86_64_codeready_builder
perf-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm6b26a728b88d2d8cd01256fc434ed1cc9c2fe5129fda86d4809ca17be4f69eb8-ol9_x86_64_appstream
python3-perf-5.14.0-570.58.1.0.1.el9_6.x86_64.rpme070c2043e8fc4a50eb711df763c23d85d5f838be0f07ae9841c10a8be1db08f-ol9_x86_64_appstream
rtla-5.14.0-570.58.1.0.1.el9_6.x86_64.rpme9e6ebee2e7e303ae2752bee91ab781f242f1784217346905e00213ed22a43c4-ol9_x86_64_appstream
rv-5.14.0-570.58.1.0.1.el9_6.x86_64.rpm184381c18b6654589213d9f9d2bcaf578c3b9e7325d3ca231581203b80b3321f-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights