ELSA-2025-3506

ELSA-2025-3506 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-04-02

Description

[5.14.0-503.35.1_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.35.1_5]
- cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged (Mark Langsdorf) [RHEL-78643]
- coresight: etm4x: Add ACPI support in platform driver (Mark Salter) [RHEL-80223]
- block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-73024]
- md: fix deadlock between mddev_suspend and flush bio (Nigel Croxon) [RHEL-76058] {CVE-2024-43855}
- redhat/configs: replace IOMMU_DEFAULT_DMA_STRICT with IOMMU_DEFAULT_DMA_LAZY (Jerry Snitselaar) [RHEL-76412]
- ibmvnic: Only record tx completed bytes once per handler (Mamatha Inamdar) [RHEL-71289]
- ibmvnic: Only replenish rx pool when resources are getting low (Mamatha Inamdar) [RHEL-71289]
- ibmvnic: Return error code on TX scrq flush fail (Mamatha Inamdar) [RHEL-71289]
- intel_idle: fix ACPI _CST matching for newer Xeon platforms (David Arcari) [RHEL-62987]

Related CVEs

CVE-2024-43855

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_aarch64_appstream
	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_aarch64_codeready_builder
	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_aarch64_u5_baseos_patch
	bpftool-7.4.0-503.35.1.el9_5.aarch64.rpm	c30ba06e282a6bcf563ded896eee2363b7c914bc6a10baed4f32d8a93cfa8744	-	ol9_aarch64_baseos_latest
	bpftool-7.4.0-503.35.1.el9_5.aarch64.rpm	c30ba06e282a6bcf563ded896eee2363b7c914bc6a10baed4f32d8a93cfa8744	-	ol9_aarch64_u5_baseos_patch
	kernel-cross-headers-5.14.0-503.35.1.el9_5.aarch64.rpm	484c7a90e547292f2cd0c67e4035b4a9e2cb9916fac769f0072d8370ee807aa0	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-503.35.1.el9_5.aarch64.rpm	d46c34f22f98b482107fbeb65b7cca9850395ee23ac3d4f8df02bf916d6dc43b	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-503.35.1.el9_5.aarch64.rpm	14555ef47f1dda9fdd9cfe2e0cbebcfca180e9cb6aa1b14eb0476d1e76105dea	-	ol9_aarch64_baseos_latest
	kernel-tools-5.14.0-503.35.1.el9_5.aarch64.rpm	14555ef47f1dda9fdd9cfe2e0cbebcfca180e9cb6aa1b14eb0476d1e76105dea	-	ol9_aarch64_u5_baseos_patch
	kernel-tools-libs-5.14.0-503.35.1.el9_5.aarch64.rpm	370533e56024c7f593c41e816e3c71cfc3b4ab9059061d35b3bb6700a7c69ec7	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-503.35.1.el9_5.aarch64.rpm	370533e56024c7f593c41e816e3c71cfc3b4ab9059061d35b3bb6700a7c69ec7	-	ol9_aarch64_u5_baseos_patch
	kernel-tools-libs-devel-5.14.0-503.35.1.el9_5.aarch64.rpm	0fc078e38cdd09d5975445ce89503ce297aaf19e81374505d460c6b64aaa0227	-	ol9_aarch64_codeready_builder
	perf-5.14.0-503.35.1.el9_5.aarch64.rpm	dce2107c11aafa6c7f715698bb71ce935d5c39711747fe31704f02ac3679bf8f	-	ol9_aarch64_appstream
	python3-perf-5.14.0-503.35.1.el9_5.aarch64.rpm	a4d37ca6f9a0b2fca79246715837e47108c2662382a35da073136da8b1e5d180	-	ol9_aarch64_baseos_latest
	python3-perf-5.14.0-503.35.1.el9_5.aarch64.rpm	a4d37ca6f9a0b2fca79246715837e47108c2662382a35da073136da8b1e5d180	-	ol9_aarch64_u5_baseos_patch
	rtla-5.14.0-503.35.1.el9_5.aarch64.rpm	3dfeaf7ce5b79554fa3427584c9813b22d88879ad1761aeaefc6ea4135c7cd5d	-	ol9_aarch64_appstream
	rv-5.14.0-503.35.1.el9_5.aarch64.rpm	316b0101e417abc60c420dfc6c808ccfe36b6af66469480eaa213dacd5cead20	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_x86_64_appstream
	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_x86_64_codeready_builder
	kernel-5.14.0-503.35.1.el9_5.src.rpm	40b69deaf8b8778a586445cf44b6e376296c0e2952334d0af53c2e1392140a53	-	ol9_x86_64_u5_baseos_patch
	bpftool-7.4.0-503.35.1.el9_5.x86_64.rpm	5bd0e49f2307c7befcba257ff2cb6cec3bfb42b226d5a72cdca860e6023c4ab2	-	ol9_x86_64_baseos_latest
	bpftool-7.4.0-503.35.1.el9_5.x86_64.rpm	5bd0e49f2307c7befcba257ff2cb6cec3bfb42b226d5a72cdca860e6023c4ab2	-	ol9_x86_64_u5_baseos_patch
	kernel-5.14.0-503.35.1.el9_5.x86_64.rpm	4c697d92759a61a5ab20e613f722fbcc7a32d09a15bd8dc20d347e5625822103	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-503.35.1.el9_5.x86_64.rpm	4c697d92759a61a5ab20e613f722fbcc7a32d09a15bd8dc20d347e5625822103	-	ol9_x86_64_u5_baseos_patch
	kernel-abi-stablelists-5.14.0-503.35.1.el9_5.noarch.rpm	e26ee3abda58bfa0c6aecc7622af66711ceddf28b7c989ee5c144b2dd1609047	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-503.35.1.el9_5.noarch.rpm	e26ee3abda58bfa0c6aecc7622af66711ceddf28b7c989ee5c144b2dd1609047	-	ol9_x86_64_u5_baseos_patch
	kernel-core-5.14.0-503.35.1.el9_5.x86_64.rpm	e059d85dfcf7806fefe8130530023dee4bd6e68258ff23e5641adb32e758e6dc	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-503.35.1.el9_5.x86_64.rpm	e059d85dfcf7806fefe8130530023dee4bd6e68258ff23e5641adb32e758e6dc	-	ol9_x86_64_u5_baseos_patch
	kernel-cross-headers-5.14.0-503.35.1.el9_5.x86_64.rpm	b76c467b6d039d349fbe77dd9c3cfa950d1a8ef751e4d6f574cabb3df528b502	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-503.35.1.el9_5.x86_64.rpm	62aeec820e11a1df3f9fa69eaabfe63473232c47629f085c7491af4bdb81bcc4	-	ol9_x86_64_baseos_latest
	kernel-debug-5.14.0-503.35.1.el9_5.x86_64.rpm	62aeec820e11a1df3f9fa69eaabfe63473232c47629f085c7491af4bdb81bcc4	-	ol9_x86_64_u5_baseos_patch
	kernel-debug-core-5.14.0-503.35.1.el9_5.x86_64.rpm	a70ca6b3d6b1768f1d4d4af55b5e3c9de8f2926a31cb5cf33a469835bb8fda65	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-503.35.1.el9_5.x86_64.rpm	a70ca6b3d6b1768f1d4d4af55b5e3c9de8f2926a31cb5cf33a469835bb8fda65	-	ol9_x86_64_u5_baseos_patch
	kernel-debug-devel-5.14.0-503.35.1.el9_5.x86_64.rpm	f671898c9668a0b0c2bf95677e70b7bdb852be132d39c5cc741d9092bc743743	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-503.35.1.el9_5.x86_64.rpm	51ace5bb394c24ca18c0589b16e3b5caf7586e546671641a2343b0f1d59b5bfa	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-503.35.1.el9_5.x86_64.rpm	b8ca1145d07b57d4a50fa2e5e8a73554d60403921d43c5e581d7909fa319763a	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-5.14.0-503.35.1.el9_5.x86_64.rpm	b8ca1145d07b57d4a50fa2e5e8a73554d60403921d43c5e581d7909fa319763a	-	ol9_x86_64_u5_baseos_patch
	kernel-debug-modules-core-5.14.0-503.35.1.el9_5.x86_64.rpm	d08f09786eb39e7d01a967a8726698ff147ab877f758035fb93fb29dab663a89	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-503.35.1.el9_5.x86_64.rpm	d08f09786eb39e7d01a967a8726698ff147ab877f758035fb93fb29dab663a89	-	ol9_x86_64_u5_baseos_patch
	kernel-debug-modules-extra-5.14.0-503.35.1.el9_5.x86_64.rpm	768e4ad6e7b67b5a86ba96d4edd65c90aca5a240ef778b0813ca0c97c9edb294	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-503.35.1.el9_5.x86_64.rpm	768e4ad6e7b67b5a86ba96d4edd65c90aca5a240ef778b0813ca0c97c9edb294	-	ol9_x86_64_u5_baseos_patch
	kernel-debug-uki-virt-5.14.0-503.35.1.el9_5.x86_64.rpm	6ea6ca791e613b5c4f60fdfc1681a0d968eb024ed6932d993b82191bcb368615	-	ol9_x86_64_baseos_latest
	kernel-debug-uki-virt-5.14.0-503.35.1.el9_5.x86_64.rpm	6ea6ca791e613b5c4f60fdfc1681a0d968eb024ed6932d993b82191bcb368615	-	ol9_x86_64_u5_baseos_patch
	kernel-devel-5.14.0-503.35.1.el9_5.x86_64.rpm	0f91dcfb87fa9e2e48de1bc2f7fb70f8a43ece7692874ae2d8be962c949c2339	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-503.35.1.el9_5.x86_64.rpm	757e3c62df83fbf2b873b06988cfb1ffe9eaf527b058bf6ba5dd5b5e22a9ac4d	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-503.35.1.el9_5.noarch.rpm	297fc84744d6ed3de4329255f694c2170569275923a66e3e10bcde459917562e	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-503.35.1.el9_5.x86_64.rpm	c224a4592178db627a55001d1cd50af05b2a353df8e7ca9954665bbd694e97f9	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-503.35.1.el9_5.x86_64.rpm	4168f2e1c880b8565db9dbb54943bdd3563cc98769068ce9ef58c34f216db4a0	-	ol9_x86_64_baseos_latest
	kernel-modules-5.14.0-503.35.1.el9_5.x86_64.rpm	4168f2e1c880b8565db9dbb54943bdd3563cc98769068ce9ef58c34f216db4a0	-	ol9_x86_64_u5_baseos_patch
	kernel-modules-core-5.14.0-503.35.1.el9_5.x86_64.rpm	6a44b6f8c7d31ab15ab43a08c0dd2aad63cbb7fce1c23c4d371485a531718b1a	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-503.35.1.el9_5.x86_64.rpm	6a44b6f8c7d31ab15ab43a08c0dd2aad63cbb7fce1c23c4d371485a531718b1a	-	ol9_x86_64_u5_baseos_patch
	kernel-modules-extra-5.14.0-503.35.1.el9_5.x86_64.rpm	6263fc55b8598869608ccf02cbdd4262b47cfe0a379b90077f777a477eedb40c	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-503.35.1.el9_5.x86_64.rpm	6263fc55b8598869608ccf02cbdd4262b47cfe0a379b90077f777a477eedb40c	-	ol9_x86_64_u5_baseos_patch
	kernel-tools-5.14.0-503.35.1.el9_5.x86_64.rpm	13a08bc905ecaa18e3e531ff540a5549a8196355e2941e4b01e90249be3d46d9	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-503.35.1.el9_5.x86_64.rpm	13a08bc905ecaa18e3e531ff540a5549a8196355e2941e4b01e90249be3d46d9	-	ol9_x86_64_u5_baseos_patch
	kernel-tools-libs-5.14.0-503.35.1.el9_5.x86_64.rpm	8fa88bfca73d0a336afd333689d942b6b106ff28874cb25ffa3860187f0822ad	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-503.35.1.el9_5.x86_64.rpm	8fa88bfca73d0a336afd333689d942b6b106ff28874cb25ffa3860187f0822ad	-	ol9_x86_64_u5_baseos_patch
	kernel-tools-libs-devel-5.14.0-503.35.1.el9_5.x86_64.rpm	8cc1ad1c19e7e696d3fda3920ceca3407ada3b097d7f4c6a786b91e5a816f2ca	-	ol9_x86_64_codeready_builder
	kernel-uki-virt-5.14.0-503.35.1.el9_5.x86_64.rpm	2ed43bcbe2147d907be6d6435a088de3ee2588140c1d2d1f39cbc91dfd18d13c	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-5.14.0-503.35.1.el9_5.x86_64.rpm	2ed43bcbe2147d907be6d6435a088de3ee2588140c1d2d1f39cbc91dfd18d13c	-	ol9_x86_64_u5_baseos_patch
	kernel-uki-virt-addons-5.14.0-503.35.1.el9_5.x86_64.rpm	6eb5ef321ce41192b72c3d2bc7797415be7532c9882cbed232bbc4f42857cf41	-	ol9_x86_64_baseos_latest
	kernel-uki-virt-addons-5.14.0-503.35.1.el9_5.x86_64.rpm	6eb5ef321ce41192b72c3d2bc7797415be7532c9882cbed232bbc4f42857cf41	-	ol9_x86_64_u5_baseos_patch
	libperf-5.14.0-503.35.1.el9_5.x86_64.rpm	779621578ce01396392699badda3b26714d958cea081ca233629e69cd5f4bc94	-	ol9_x86_64_codeready_builder
	perf-5.14.0-503.35.1.el9_5.x86_64.rpm	ca5877fa6118b0671c57806c6cfed2aebd29289245bb237efb0ded93e456e172	-	ol9_x86_64_appstream
	python3-perf-5.14.0-503.35.1.el9_5.x86_64.rpm	33f3e6a6fec2e4e262584834aaadc093217421444c7dcba82ef5a620a16c462e	-	ol9_x86_64_baseos_latest
	python3-perf-5.14.0-503.35.1.el9_5.x86_64.rpm	33f3e6a6fec2e4e262584834aaadc093217421444c7dcba82ef5a620a16c462e	-	ol9_x86_64_u5_baseos_patch
	rtla-5.14.0-503.35.1.el9_5.x86_64.rpm	8c347300c4a02777a8ada5910611f028f3598e4a1de3d584b1dc3c135181386f	-	ol9_x86_64_appstream
	rv-5.14.0-503.35.1.el9_5.x86_64.rpm	f423f222bbc5357d2589a6b3cb5cf880455a99443a863aef7af3ecfcd2c404ea	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team