Stay Connected:

ELSA-2025-19409

ELSA-2025-19409 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-11-03

Description


[5.14.0-570.60.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.60.1]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-117437]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-117437]
- crypto: xts - Handle EBUSY correctly (CKI Backport Bot) [RHEL-119235] {CVE-2023-53494}

[5.14.0-570.59.1]
- nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-105111]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-120964]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-120964]
- NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-118857]
- SUNRPC: Cleanup/fix initial rq_pages allocation (Benjamin Coddington) [RHEL-108160]
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (CKI Backport Bot) [RHEL-116666] {CVE-2022-50367}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116384] {CVE-2025-39702}


Related CVEs


CVE-2022-50367
CVE-2023-53494
CVE-2025-39702

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_aarch64_appstream
kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_aarch64_baseos_latest
kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_aarch64_codeready_builder
kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm6ca4f8be4f1abe733a60b4d19148bf9a888e159e13af014ce74b5f79474ee173-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm34784b7afde4d38d13042b89a3d8c087975f0270feb6ff36ef1fe57cea3326b4-ol9_aarch64_appstream
kernel-tools-5.14.0-570.60.1.0.1.el9_6.aarch64.rpme9c306e0066eaa10bae953830058ebcc1057a8e6f8fde052982d42a7306457b6-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.60.1.0.1.el9_6.aarch64.rpme9c306e0066eaa10bae953830058ebcc1057a8e6f8fde052982d42a7306457b6-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.60.1.0.1.el9_6.aarch64.rpmb0b18773d257c1656ad2d45fa8712e1ea724c7b6f37d61ad6ee25f7ee835b302-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.60.1.0.1.el9_6.aarch64.rpmb0b18773d257c1656ad2d45fa8712e1ea724c7b6f37d61ad6ee25f7ee835b302-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm32baeedbb928b8b11d9fa68f8fac97d1f18484f62f559ab41340f92e74aa0896-ol9_aarch64_codeready_builder
libperf-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm4330235fb3c5b91816bd84204b1c8c0947d7266613164003b382745f8d2e98b5-ol9_aarch64_codeready_builder
perf-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm574dba3f4121b5deb2c451b105e6d40cc4c182dff1f6f7e125001a79b74f81a1-ol9_aarch64_appstream
python3-perf-5.14.0-570.60.1.0.1.el9_6.aarch64.rpma4be1108de5a658ae8b272f5acde97726ae5d54e33db8e2a20bbe3513be3fc2d-ol9_aarch64_appstream
rtla-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm40ebb3a304ec3ca171d46c0d58e64ed372151f1eb1564543e24885aa3d2ef15a-ol9_aarch64_appstream
rv-5.14.0-570.60.1.0.1.el9_6.aarch64.rpm10b813eb588cfcb42665e1724998d0442861b1971fc75b6f2dff42fd5ff1cc16-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_x86_64_appstream
kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_x86_64_baseos_latest
kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_x86_64_codeready_builder
kernel-5.14.0-570.60.1.0.1.el9_6.src.rpm6a59b009abaf680c5b36f21146dc25d0760647176757c1fc623071924f427f15-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm845127ff8798b710f417763f447b5f9ec7a22e1b6d68dbb5a831923affc34957-ol9_x86_64_baseos_latest
kernel-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm845127ff8798b710f417763f447b5f9ec7a22e1b6d68dbb5a831923affc34957-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.60.1.0.1.el9_6.noarch.rpm1faaf1a8dfbf25e491af000b52235f1916d89ac5a7931ca1ae15b126fb7728ab-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.60.1.0.1.el9_6.noarch.rpm1faaf1a8dfbf25e491af000b52235f1916d89ac5a7931ca1ae15b126fb7728ab-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpma3f1d0a819ec0e45dfc15079dbfd23ec691b098ed2ea819d1f9e82d04e820d86-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpma3f1d0a819ec0e45dfc15079dbfd23ec691b098ed2ea819d1f9e82d04e820d86-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm8f49e25af0bbbbdff62afa7da1a871f027dc294d142196cd363fbb46355fc0d3-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm5cf051aa95eae80ff491ba37ddfaaa8466322b7f5540027dcc0a53dd68c4b6f4-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm5cf051aa95eae80ff491ba37ddfaaa8466322b7f5540027dcc0a53dd68c4b6f4-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm5d6032503b766cf82796a2d61d0f1833792dffaaa1246bdabe7bd6c2f3573a9e-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm5d6032503b766cf82796a2d61d0f1833792dffaaa1246bdabe7bd6c2f3573a9e-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm2bacda4066d4093f57ff374d3b6712562eb3816b0e7b88c3d457417f5b473de7-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm8c3f09cc02960a2200beab44734d90271b58bb0a6207f8c2d9b3c116995ea4e3-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm882516235f02cd8101325d6a86525faee1e50086391b79dac0e7fd0de5a43b46-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm882516235f02cd8101325d6a86525faee1e50086391b79dac0e7fd0de5a43b46-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm87cf1615ef5267cd0bf97e5eef7af33622a52acb7f076f9f571ad4351de1d746-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm87cf1615ef5267cd0bf97e5eef7af33622a52acb7f076f9f571ad4351de1d746-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm3dbc27f4c04189e60c19c8ef290d04bc825ae0cafe82a13b7a75fb6b5c46f47f-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm3dbc27f4c04189e60c19c8ef290d04bc825ae0cafe82a13b7a75fb6b5c46f47f-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm8a16321c6f52c54a57af2ccbbc27342c7cd858c821508d56f695c2808304174a-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm8a16321c6f52c54a57af2ccbbc27342c7cd858c821508d56f695c2808304174a-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.60.1.0.1.el9_6.x86_64.rpme343fb681e04bff7abfd82811f94849d05e51e622ce52f10217ed5c294d8973d-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm7f84b554a87002c4d54350fe5dbb917569453b5fff468d1e5c83146fbf17efcb-ol9_x86_64_appstream
kernel-doc-5.14.0-570.60.1.0.1.el9_6.noarch.rpme68db49e49c3b7a90d5da64b6c5022cc9149995541d031f4306ad73875bc029f-ol9_x86_64_appstream
kernel-headers-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmd4f6e0db840551d9a3a17b3ad1391550d7db343cb1b8eabcb64b29b30ba261ef-ol9_x86_64_appstream
kernel-modules-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm80c4f1a9ce092f867e1907b204bca048b5f425ea5f2fbf2cf00087a687ec9b3f-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm80c4f1a9ce092f867e1907b204bca048b5f425ea5f2fbf2cf00087a687ec9b3f-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm9e86a87ab2c97d684a1f2e746edcc3c20f69933796c194be295c1e3ea1a58a00-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm9e86a87ab2c97d684a1f2e746edcc3c20f69933796c194be295c1e3ea1a58a00-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmb2aa2f45291c41c70743aefe24e7e16a1c4275a858acdd468cb8369f90f11552-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmb2aa2f45291c41c70743aefe24e7e16a1c4275a858acdd468cb8369f90f11552-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmb209461592e54791b36b4c0009f88dda9939931cf2eea22d09a0772872126b9f-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmb209461592e54791b36b4c0009f88dda9939931cf2eea22d09a0772872126b9f-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm942eff8e49b791dc4fc40a80154b90c7c2993e0fd26ae6a782e47250ecb8fa88-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm942eff8e49b791dc4fc40a80154b90c7c2993e0fd26ae6a782e47250ecb8fa88-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmec98b8f44ee6c7ceca55b658f380ec2f2ba13e1191e571d71734bccc1590ceef-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm9a546f96c8bf4f872a6ba403c331197d9f7e263147e19962cbf1ba70bb8b4327-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm9a546f96c8bf4f872a6ba403c331197d9f7e263147e19962cbf1ba70bb8b4327-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm2c7ee88d7b798a90f365a6e95143bcec7654452128287ad50fe194c1e7773537-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm2c7ee88d7b798a90f365a6e95143bcec7654452128287ad50fe194c1e7773537-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm2895049f430e1865e8dd3fb5a1d1587af55a0a6ba654efa4c7bdedb8e859a335-ol9_x86_64_codeready_builder
perf-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm09cb42f220c6e7e3693507413624731902fc6e8fa6f5cbc8854aa9bb64b9f99c-ol9_x86_64_appstream
python3-perf-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmbbbfd24d60ea113cb4f96324df6b077f9c4dd773737447660100bf0665443933-ol9_x86_64_appstream
rtla-5.14.0-570.60.1.0.1.el9_6.x86_64.rpm6f2af5124fef67351445d2d2ec01a7d314493297e1c7a97ab7f8cfa0c88bee7e-ol9_x86_64_appstream
rv-5.14.0-570.60.1.0.1.el9_6.x86_64.rpmcc7592a8921790de45d6af5f0e8de3a08ebc8bac9fb45022748bc77517972182-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights