Stay Connected:

ELSA-2025-3937

ELSA-2025-3937 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-04-17

Description


- [5.14.0-503.38.1_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.38.1_5]
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CKI Backport Bot) [RHEL-86726] {CVE-2024-53150}

[5.14.0-503.37.1_5]
- scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77123]

[5.14.0-503.36.1_5]
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode (Steve Best) [RHEL-67636]
- cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-79672]
- ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-76141]
- ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-76141]
- ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-76141]
- gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-74413]
- gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-74413]
- gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-74413] {CVE-2024-57933}
- gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-74413] {CVE-2024-57932}
- gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-74413]
- gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-74413]
- gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-74413] {CVE-2024-40937}
- gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-74413]


Related CVEs


CVE-2024-53150

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_aarch64_appstream
kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_aarch64_baseos_latest
kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_aarch64_codeready_builder
kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_aarch64_u5_baseos_patch
bpftool-7.4.0-503.38.1.el9_5.aarch64.rpmd3cadb5142b7c396d9bf8807bca929aea304de2e4e22289dbf82d3192f4facf9-ol9_aarch64_baseos_latest
bpftool-7.4.0-503.38.1.el9_5.aarch64.rpmd3cadb5142b7c396d9bf8807bca929aea304de2e4e22289dbf82d3192f4facf9-ol9_aarch64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.38.1.el9_5.aarch64.rpm36381d28af990a614fdfde9bdc47c19f900b73eba0ddccb216a70602abe638bf-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-503.38.1.el9_5.aarch64.rpm30b0d497afb39fd62df8b31963124c1fa90e157fec9d4112123350d1acb0119f-ol9_aarch64_appstream
kernel-tools-5.14.0-503.38.1.el9_5.aarch64.rpme68a1cb3fb0bcbd185318169dca8262f1d22c05c0b3b0827dc4cb405008bc4a7-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-503.38.1.el9_5.aarch64.rpme68a1cb3fb0bcbd185318169dca8262f1d22c05c0b3b0827dc4cb405008bc4a7-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.38.1.el9_5.aarch64.rpm006cbc8fb6dd6125c3debcac7eac58f849555d2aa839d3281a2d9fcb94538de7-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-503.38.1.el9_5.aarch64.rpm006cbc8fb6dd6125c3debcac7eac58f849555d2aa839d3281a2d9fcb94538de7-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.38.1.el9_5.aarch64.rpmeda065211dd95a823a9474da0921b1f5450795f3e4d40427cb2b8e841d1a4b60-ol9_aarch64_codeready_builder
perf-5.14.0-503.38.1.el9_5.aarch64.rpmcbe4fddc790a314cb74a612376f88619653f9e400179aac0cdba96b15006bd2a-ol9_aarch64_appstream
python3-perf-5.14.0-503.38.1.el9_5.aarch64.rpmdd34bb676e461ca6292bc10e6bb819366065549410293f39d3c780086f245042-ol9_aarch64_baseos_latest
python3-perf-5.14.0-503.38.1.el9_5.aarch64.rpmdd34bb676e461ca6292bc10e6bb819366065549410293f39d3c780086f245042-ol9_aarch64_u5_baseos_patch
rtla-5.14.0-503.38.1.el9_5.aarch64.rpmf49fcbe1cd54de9d9b290bf236687cbbd303f6298dfd09fc4ec4852a70b1f551-ol9_aarch64_appstream
rv-5.14.0-503.38.1.el9_5.aarch64.rpmaad5ad6f082a3e4e19a3a1440cca48dc73ae4cc7024d5672349935b6e65d77fd-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_x86_64_appstream
kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_x86_64_baseos_latest
kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_x86_64_codeready_builder
kernel-5.14.0-503.38.1.el9_5.src.rpm8aebf9daf15959421371a7c32c9163a916dcecfe2296c9f64d3e18cfbbccdf37-ol9_x86_64_u5_baseos_patch
bpftool-7.4.0-503.38.1.el9_5.x86_64.rpmaa7e996f75db4ced10b8a2944a474d6393b9f9e9feedc7509b11678f38f839aa-ol9_x86_64_baseos_latest
bpftool-7.4.0-503.38.1.el9_5.x86_64.rpmaa7e996f75db4ced10b8a2944a474d6393b9f9e9feedc7509b11678f38f839aa-ol9_x86_64_u5_baseos_patch
kernel-5.14.0-503.38.1.el9_5.x86_64.rpm1b4e5c085bbf732ce7f6391d7da04adf6792e6116707e5cf437730725c53ae34-ol9_x86_64_baseos_latest
kernel-5.14.0-503.38.1.el9_5.x86_64.rpm1b4e5c085bbf732ce7f6391d7da04adf6792e6116707e5cf437730725c53ae34-ol9_x86_64_u5_baseos_patch
kernel-abi-stablelists-5.14.0-503.38.1.el9_5.noarch.rpmbbab6c94960ecc5a71681d73f7def2042625e4030c13d27422fa6a2ef425d418-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-503.38.1.el9_5.noarch.rpmbbab6c94960ecc5a71681d73f7def2042625e4030c13d27422fa6a2ef425d418-ol9_x86_64_u5_baseos_patch
kernel-core-5.14.0-503.38.1.el9_5.x86_64.rpm21c7d34d28f4240c573bea9ef0dc95c810faf4b6a8e3c6e6527b3b991cfc814f-ol9_x86_64_baseos_latest
kernel-core-5.14.0-503.38.1.el9_5.x86_64.rpm21c7d34d28f4240c573bea9ef0dc95c810faf4b6a8e3c6e6527b3b991cfc814f-ol9_x86_64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.38.1.el9_5.x86_64.rpm06428e36886472f000ce6ab38df4ccb00e13f76bdc596ed124afeb8f301ed54a-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-503.38.1.el9_5.x86_64.rpmfb1c13292380246364ec9b0b036b3f9be89315118d05d7ff9e711d9930754a72-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-503.38.1.el9_5.x86_64.rpmfb1c13292380246364ec9b0b036b3f9be89315118d05d7ff9e711d9930754a72-ol9_x86_64_u5_baseos_patch
kernel-debug-core-5.14.0-503.38.1.el9_5.x86_64.rpme69fcc677d20287c621039cca18f152e33896a268058dc1ccb01515bd8c6f345-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-503.38.1.el9_5.x86_64.rpme69fcc677d20287c621039cca18f152e33896a268058dc1ccb01515bd8c6f345-ol9_x86_64_u5_baseos_patch
kernel-debug-devel-5.14.0-503.38.1.el9_5.x86_64.rpmaf6ccbca5a20077c04839a2eabaa3da8d98387ecf79968a38100890779d91388-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-503.38.1.el9_5.x86_64.rpm5aea3027a21a136caa24387328a9370222edd41ea921b0c116517df2c4383836-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-503.38.1.el9_5.x86_64.rpm32d10c3d8ec1e44ac57442fc2f9a8542259ca46be82158fa1dd8eb53398ba148-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-503.38.1.el9_5.x86_64.rpm32d10c3d8ec1e44ac57442fc2f9a8542259ca46be82158fa1dd8eb53398ba148-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm08df400ead1878bdf2a42499f0546c79726930c188028067e0c967f484c04c2d-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm08df400ead1878bdf2a42499f0546c79726930c188028067e0c967f484c04c2d-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpmed3865cbf81b80ec09e6dc121e519acbae96858e6a462849df687109c1465913-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpmed3865cbf81b80ec09e6dc121e519acbae96858e6a462849df687109c1465913-ol9_x86_64_u5_baseos_patch
kernel-debug-uki-virt-5.14.0-503.38.1.el9_5.x86_64.rpme27e256c13941b2d2de785e2223e3e421917488d80da4ece132e6561a00d69e6-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-503.38.1.el9_5.x86_64.rpme27e256c13941b2d2de785e2223e3e421917488d80da4ece132e6561a00d69e6-ol9_x86_64_u5_baseos_patch
kernel-devel-5.14.0-503.38.1.el9_5.x86_64.rpma95a5fcfe661aea9b347e698ebff53a1aedd14e4da6c8dd3659a0c076444857b-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-503.38.1.el9_5.x86_64.rpma80c0f42a997158c60ec76ca19a3c15a4c0044b6f15aeef55c3afe97fe2dcd30-ol9_x86_64_appstream
kernel-doc-5.14.0-503.38.1.el9_5.noarch.rpmd3274702718987d533c28ca9f13fc311549fa079a6180fd84fcad3fc468612cf-ol9_x86_64_appstream
kernel-headers-5.14.0-503.38.1.el9_5.x86_64.rpma5f634452e1d5c9d42a60bfe7e05201cafcbfd461380a49af9f12d80f02b5201-ol9_x86_64_appstream
kernel-modules-5.14.0-503.38.1.el9_5.x86_64.rpm16ef696fec7d094ae3936d0965fabc3bbbfd5ee0dc008e21996863483f03d9ea-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-503.38.1.el9_5.x86_64.rpm16ef696fec7d094ae3936d0965fabc3bbbfd5ee0dc008e21996863483f03d9ea-ol9_x86_64_u5_baseos_patch
kernel-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm35b48cb9858e2a0a57e6ec75ef4b5cb8c4f8565bfebd3db89f655a64d6b3863c-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm35b48cb9858e2a0a57e6ec75ef4b5cb8c4f8565bfebd3db89f655a64d6b3863c-ol9_x86_64_u5_baseos_patch
kernel-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm5b4069d896286181f9fa5bc7b93cf5cf98fb5238c27aeb1b44668a88b7a0e171-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm5b4069d896286181f9fa5bc7b93cf5cf98fb5238c27aeb1b44668a88b7a0e171-ol9_x86_64_u5_baseos_patch
kernel-tools-5.14.0-503.38.1.el9_5.x86_64.rpm62bc02bdd7fe87b0225fa0554eb20658ca49962be3f297042a3b326a6b809adf-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-503.38.1.el9_5.x86_64.rpm62bc02bdd7fe87b0225fa0554eb20658ca49962be3f297042a3b326a6b809adf-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.38.1.el9_5.x86_64.rpmfc116fc5fd61845367bedc8ddc79e06015552ea8e3d57138e7752349c1b5161f-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-503.38.1.el9_5.x86_64.rpmfc116fc5fd61845367bedc8ddc79e06015552ea8e3d57138e7752349c1b5161f-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.38.1.el9_5.x86_64.rpm176ed31711efe4c50a5b074ce03b8a4040c5e18bea72567ad395163dac0d90e1-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-503.38.1.el9_5.x86_64.rpm0fb3f1de0d3bd99a964c55224d5814cba9e14983b6b553c7a97d7f9e1c7e9eeb-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-503.38.1.el9_5.x86_64.rpm0fb3f1de0d3bd99a964c55224d5814cba9e14983b6b553c7a97d7f9e1c7e9eeb-ol9_x86_64_u5_baseos_patch
kernel-uki-virt-addons-5.14.0-503.38.1.el9_5.x86_64.rpm82d0e0e12c2610e879a108a32e25c3ca38a8f1ebc0b7b823788d2aa95b8d996c-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-503.38.1.el9_5.x86_64.rpm82d0e0e12c2610e879a108a32e25c3ca38a8f1ebc0b7b823788d2aa95b8d996c-ol9_x86_64_u5_baseos_patch
libperf-5.14.0-503.38.1.el9_5.x86_64.rpm87d0dc72a176ed993cadf9be31ab25575efa57999c1c75695219408c9891009a-ol9_x86_64_codeready_builder
perf-5.14.0-503.38.1.el9_5.x86_64.rpmdfdcf2b01d6f7e467c96d223ca81a7c6e51c290f272cf6de0e97b8cc09314e1b-ol9_x86_64_appstream
python3-perf-5.14.0-503.38.1.el9_5.x86_64.rpmbac95ee46508812d9d599bfbc875910c2b2a09b337feaeab75894cb7a8a70001-ol9_x86_64_baseos_latest
python3-perf-5.14.0-503.38.1.el9_5.x86_64.rpmbac95ee46508812d9d599bfbc875910c2b2a09b337feaeab75894cb7a8a70001-ol9_x86_64_u5_baseos_patch
rtla-5.14.0-503.38.1.el9_5.x86_64.rpm729944b285bc1a5c55991d6d205577a2c3d1e17642a1329bd5beda8c10ef3cc6-ol9_x86_64_appstream
rv-5.14.0-503.38.1.el9_5.x86_64.rpmd8d77217db520e1c8ec62c758c7a96b919d2fe980b005beef7bfbefce0a727f3-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights