ELSA-2025-8333

ELSA-2025-8333 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-06-02

Description


[5.14.0-570.19.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.19.1_6]
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87254] {CVE-2022-3424}
- ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89546] {CVE-2025-21764}
- ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89546] {CVE-2025-21765}
- net: add dev_net_rcu() helper (Xin Long) [RHEL-89546] {CVE-2025-21765}
- page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Hoiland-Jorgensen) [RHEL-84151]
- page_pool: Move pp_magic check into helper functions (Toke Hoiland-Jorgensen) [RHEL-84151]
- ext4: fallback to complex scan if aligned scan doesn't work (Jay Shin) [RHEL-85984]
- drm/mgag200: Added support for the new device G200eH5 (Jocelyn Falempe) [RHEL-88907]


Related CVEs


CVE-2022-3424
CVE-2025-21764

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_aarch64_appstream
kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_aarch64_baseos_latest
kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_aarch64_codeready_builder
kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm03f97794ec5ba68ed2b92e2575e936aef31725c66fc57cb014459e41ed6511de-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.19.1.0.1.el9_6.aarch64.rpmc404ab1c93f72c5792b983eeaa177263a81f66a98f1fb8d96fedec939efa5eb5-ol9_aarch64_appstream
kernel-tools-5.14.0-570.19.1.0.1.el9_6.aarch64.rpma8010e3e222f26bbeb0b0211134674b28c499f631fff61fbbc30564890b1dcda-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.19.1.0.1.el9_6.aarch64.rpma8010e3e222f26bbeb0b0211134674b28c499f631fff61fbbc30564890b1dcda-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm85d30ec2ed40da8f8fdc927d8873c12d5981133c4a7290fcd1a27618330627aa-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm85d30ec2ed40da8f8fdc927d8873c12d5981133c4a7290fcd1a27618330627aa-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.19.1.0.1.el9_6.aarch64.rpmc24f746865b68cda6272a2a9e342e4cf28524ff74ed415261fc9422d3ad6b874-ol9_aarch64_codeready_builder
perf-5.14.0-570.19.1.0.1.el9_6.aarch64.rpma1cf72940aa614fc03799bc63a91a61955c91020210aa7893fc8e7b4faccf194-ol9_aarch64_appstream
python3-perf-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm56914d25a23500cc133e9b76f5ac167311aeb02df1ead5846a4a548b8b7e586f-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm56914d25a23500cc133e9b76f5ac167311aeb02df1ead5846a4a548b8b7e586f-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm69c760e408c7e6f78dd57d1f3c436d10262a2ff3bca49777bacbfc74d13bdc7c-ol9_aarch64_appstream
rv-5.14.0-570.19.1.0.1.el9_6.aarch64.rpm5a0e69ba64ff33a11c8b067e68f6a073c060003c1f37b839a60543e8a9d7481c-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_x86_64_appstream
kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_x86_64_baseos_latest
kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_x86_64_codeready_builder
kernel-5.14.0-570.19.1.0.1.el9_6.src.rpm842c6a28a4c9121a6ed2a9f094b1072c0db35b57bcac5bedcb2dce53a1e67bb5-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmf6c8e7e78b139172dcd841cdea60006af3906b909b09cb70352a836843751675-ol9_x86_64_baseos_latest
kernel-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmf6c8e7e78b139172dcd841cdea60006af3906b909b09cb70352a836843751675-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.19.1.0.1.el9_6.noarch.rpmc85deb6ab38723766fed1057de8a0f28e32e03d3a871d52f2130da97738f8ce5-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.19.1.0.1.el9_6.noarch.rpmc85deb6ab38723766fed1057de8a0f28e32e03d3a871d52f2130da97738f8ce5-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm8fee65f8b1638e23596bb9a16b802fe38b5f127a1c23fa527ff702d6c2c14e52-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm8fee65f8b1638e23596bb9a16b802fe38b5f127a1c23fa527ff702d6c2c14e52-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm7126d6c34dc8ce0cb7034ab13f49308d487d51982cf24bc729404986e2b16c6c-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmcadf15d24a46c8eb25710de27bf4680f77fe0252b5c8a8c0f19f2f5857f33c05-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmcadf15d24a46c8eb25710de27bf4680f77fe0252b5c8a8c0f19f2f5857f33c05-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpma985ee2e2491809687599de19950ed0ed78ec11901be1e79656b745847ab0834-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpma985ee2e2491809687599de19950ed0ed78ec11901be1e79656b745847ab0834-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm43468507fe3ed2b1aa07f2b044bab6a400d6727b05fc8ed80dbbcf0223550769-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm9b9a437814fa508ee38c6ad4a4dbe6d46abc72fa0af09e46273e5f6165de0b72-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmadcef8e6305eeef21c7313e259a980fee27017d8a8c6a2483375198529714847-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmadcef8e6305eeef21c7313e259a980fee27017d8a8c6a2483375198529714847-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm136aaff3e50202b960984444f7b7d0876440f112bd019a949b4e834978cf8898-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm136aaff3e50202b960984444f7b7d0876440f112bd019a949b4e834978cf8898-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm56cb8d746014e97537ede42a32ab15f969773b710fa817175c66112f6b4df37e-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm56cb8d746014e97537ede42a32ab15f969773b710fa817175c66112f6b4df37e-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm408b2d654488fe3d73be4f716ff07df726d0ca68035b2dd1002d40be7641d84c-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm408b2d654488fe3d73be4f716ff07df726d0ca68035b2dd1002d40be7641d84c-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm91c2b0ec48bbe27836b09548c112be98748774946014566d9c799953da63ba85-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmc786e31acf95e9e4cdf2414b7d592620b7aa994003f3069fc0c2820b41311492-ol9_x86_64_appstream
kernel-doc-5.14.0-570.19.1.0.1.el9_6.noarch.rpmb4ca074648ce67f7a8ca4efb9335200dfa5c68f82163119cb41215b87e57ebf4-ol9_x86_64_appstream
kernel-headers-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm3f42fdeec9b9d974c69b1f7b08ac5257681fbb31c9d91a6eb34976a3fd8d97a8-ol9_x86_64_appstream
kernel-modules-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm2da685d86006cef6b7e5cc564d37fe788aab6f3059f64c89fb55e754fd968d1e-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm2da685d86006cef6b7e5cc564d37fe788aab6f3059f64c89fb55e754fd968d1e-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm6c4421e8427a694cbd2459a0e27d804aa8d3d941acafe0bc1117a21e451e7f37-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm6c4421e8427a694cbd2459a0e27d804aa8d3d941acafe0bc1117a21e451e7f37-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm71af203460e8783f3000c8d9c3dd1151d43cc72e3caaa6972d79e3b530d24e33-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm71af203460e8783f3000c8d9c3dd1151d43cc72e3caaa6972d79e3b530d24e33-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm340bd6e3292b02ba44df037160a94e2fa12be999bf9eae96d5a95e876a5dc7eb-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm340bd6e3292b02ba44df037160a94e2fa12be999bf9eae96d5a95e876a5dc7eb-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmc77493bd3267a70b72c997f184cee7e82e214dd6bacf934d50d1755d42f11972-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmc77493bd3267a70b72c997f184cee7e82e214dd6bacf934d50d1755d42f11972-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmd7d0be5a5ae9b9be4956c0f4abf835de88fca3cd61196aff797e62ff783f4084-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.19.1.0.1.el9_6.x86_64.rpma3dae9c5a98ce855e732f2260fa45066757a26468e296c5a75bcebd8431a9ecc-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.19.1.0.1.el9_6.x86_64.rpma3dae9c5a98ce855e732f2260fa45066757a26468e296c5a75bcebd8431a9ecc-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm614ad0593cb57e22f9619081bee2ed4a6014edff809bbb79b149f8ca98469ba4-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm614ad0593cb57e22f9619081bee2ed4a6014edff809bbb79b149f8ca98469ba4-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm339d9f96e090a341687926273ead0389eec59372f3e5de2523b1df48b52c9de7-ol9_x86_64_codeready_builder
perf-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm0efc07b3eea291b3fe738034b1cce75e0ca63a81053f4cdfa019282083a56cda-ol9_x86_64_appstream
python3-perf-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm021cb1437575f588458f9f62e8f44fc2a1deeef110438cf37aa9886a19435032-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm021cb1437575f588458f9f62e8f44fc2a1deeef110438cf37aa9886a19435032-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.19.1.0.1.el9_6.x86_64.rpm2ddc67deaed071b5de974b968722394619ab4f32dfaf87b57330b70876f04d8f-ol9_x86_64_appstream
rv-5.14.0-570.19.1.0.1.el9_6.x86_64.rpmb1d1da45410505cab34a410adeb1f02503c4155ca017c9ae4a231be9d92bdb02-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete