Stay Connected:

ELSA-2025-8643

ELSA-2025-8643 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-06-10

Description


[5.14.0-570.21.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.21.1_6]
- xsk: fix an integer overflow in xp_create_and_assign_umem() (CKI Backport Bot) [RHEL-87911] {CVE-2025-21997}
- vlan: enforce underlying device type (Guillaume Nault) [RHEL-87884] {CVE-2025-21920}
- net: fix geneve_opt length integer overflow (Guillaume Nault) [RHEL-87974] {CVE-2025-22055}
- net: gso: fix ownership in __udp_gso_segment (CKI Backport Bot) [RHEL-88333] {CVE-2025-21926}

[5.14.0-570.20.1_6]
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93253] {CVE-2025-37943}
- ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87985] {CVE-2025-37785}


Related CVEs


CVE-2025-37943
CVE-2025-21926
CVE-2025-21920
CVE-2025-21997
CVE-2025-22055
CVE-2025-37785

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_aarch64_appstream
kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_aarch64_baseos_latest
kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_aarch64_codeready_builder
kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm72c38ccb2a013017542ba1e38d2502ecc5b4098d8a26b28b85e5b23656524ec8-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.21.1.0.1.el9_6.aarch64.rpmdbf246fede0ce5e8cb8def277fb448161b3beb75d389b6ee8cbc263e8ad306ba-ol9_aarch64_appstream
kernel-tools-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm5b85ac818ca63a31ce8c5cb95045f1a635bce41574def7f26ad9db11f6388d4a-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm5b85ac818ca63a31ce8c5cb95045f1a635bce41574def7f26ad9db11f6388d4a-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.21.1.0.1.el9_6.aarch64.rpma538279858b498827d765544a5dca606a7fbb8632175d404651399ddd846dc2e-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.21.1.0.1.el9_6.aarch64.rpma538279858b498827d765544a5dca606a7fbb8632175d404651399ddd846dc2e-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm5640309dd9ac64e69d75f00fb637c2637e3f3ca9a6fb67976d4f6dbf0f7ae510-ol9_aarch64_codeready_builder
perf-5.14.0-570.21.1.0.1.el9_6.aarch64.rpmfaeaa5b0dbeed19b8d452bcdb628bef664fc045a569523c575d46c6fcf19f016-ol9_aarch64_appstream
python3-perf-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm3108bff485ec59f0003087740cc5afe3f7819e4c0ab91f6c8083b75a8e40e812-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm3108bff485ec59f0003087740cc5afe3f7819e4c0ab91f6c8083b75a8e40e812-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.21.1.0.1.el9_6.aarch64.rpmc776945c87c0ab187a5b819a9926dc98f4b365b06b6ac02e7d92f3697c9a819a-ol9_aarch64_appstream
rv-5.14.0-570.21.1.0.1.el9_6.aarch64.rpm91b96e9bd0ff236905a9b9cdb89e2dd1c8c6e9c924c5c9fc001d74a738cdb39c-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_x86_64_appstream
kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_x86_64_baseos_latest
kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_x86_64_codeready_builder
kernel-5.14.0-570.21.1.0.1.el9_6.src.rpm651ec1083021ab509da24233f6ce0aadcc15c7d17facc374da0b3f34e6f15ec8-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm537c9739df9cf40a1672a368832b4284bcc76c72d44bc24ae8ad0cd1ca0219ee-ol9_x86_64_baseos_latest
kernel-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm537c9739df9cf40a1672a368832b4284bcc76c72d44bc24ae8ad0cd1ca0219ee-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.21.1.0.1.el9_6.noarch.rpm7940e55f5073023f773b41e4c83abe9c9ad07b0ef3167cc318fd4b84b21c1a23-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.21.1.0.1.el9_6.noarch.rpm7940e55f5073023f773b41e4c83abe9c9ad07b0ef3167cc318fd4b84b21c1a23-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpmdfe139282bcc171e2b516d124e7431d5b49ae09799866db7171eb26e7c9918fd-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpmdfe139282bcc171e2b516d124e7431d5b49ae09799866db7171eb26e7c9918fd-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm006025998db13aa78d5da6c7583fde75c784aa4c2242750aafabb1b685b13512-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm0b3dddc8393786eb3806ff25d9fff9d798f53e1a643c5441f365860449450012-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm0b3dddc8393786eb3806ff25d9fff9d798f53e1a643c5441f365860449450012-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm03fbe30249fd7bddc7773cfbe111de093b142788f048e596bbe8d75ed0bc428d-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm03fbe30249fd7bddc7773cfbe111de093b142788f048e596bbe8d75ed0bc428d-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm55a55d12e73caaf7cffe5712d40556808a2b33e391c77b80222e1d3b08b53564-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm6fb3f15b6b704114db014237aa8907500d13e154d0a7c9d16cd703015cfaea9d-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm498fd2fe7a1481768932aab6702916c92f40f3354f67ba770c839085c4a0025a-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm498fd2fe7a1481768932aab6702916c92f40f3354f67ba770c839085c4a0025a-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm61417f57b991f53d6f43c670ff340ed051d17af01fb1f7f4adca79d50730f4e0-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm61417f57b991f53d6f43c670ff340ed051d17af01fb1f7f4adca79d50730f4e0-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm1eea4b23c8297395a7135b76550ccdb6721f1e88214688e9ea5f410d5faf3e2d-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm1eea4b23c8297395a7135b76550ccdb6721f1e88214688e9ea5f410d5faf3e2d-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.21.1.0.1.el9_6.x86_64.rpmf742f64849d7187361441cf65d92747adcce65c05ee19ebbc92fd119bcd58956-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.21.1.0.1.el9_6.x86_64.rpmf742f64849d7187361441cf65d92747adcce65c05ee19ebbc92fd119bcd58956-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm83ec91e888c4c712650d60687056412a44030e603a4d4f60eb3331b2618945a4-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm27e1d7e63d281cc57f6a6b76e4fda16cbd441c6cf242cc8f46f63c1b88f5d1fb-ol9_x86_64_appstream
kernel-doc-5.14.0-570.21.1.0.1.el9_6.noarch.rpm366316bcd0a436df2bb3c3d67e22544da6f007ae7b15b6d0cb8ff27d5402e3fd-ol9_x86_64_appstream
kernel-headers-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm8c5c775de4bca0daaee136e56b1bf7dcf44bfaa97b2661c555678a5e1534e125-ol9_x86_64_appstream
kernel-modules-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm9f9dde5fb742f284e933e1b9b3c72076ba989f207174e36be78a694c41bb9a94-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm9f9dde5fb742f284e933e1b9b3c72076ba989f207174e36be78a694c41bb9a94-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm0dddae5dd7ada4c3ff4240e6fa07673efb3c2a084bd635728f2d8a39a295f641-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm0dddae5dd7ada4c3ff4240e6fa07673efb3c2a084bd635728f2d8a39a295f641-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.21.1.0.1.el9_6.x86_64.rpmf9e7e63d31680786620d59440965228ec9ec81117e87cf1d876d3e3c16bdc6dc-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.21.1.0.1.el9_6.x86_64.rpmf9e7e63d31680786620d59440965228ec9ec81117e87cf1d876d3e3c16bdc6dc-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm78e3a99fb66e3c9580201f150bfadc401894683196163c0ffaee96b3cc1421b3-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm78e3a99fb66e3c9580201f150bfadc401894683196163c0ffaee96b3cc1421b3-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm8d6e0651ea1d343eb1796d5c80951078aa9be046d8e70cea480d7cc02d4defa9-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm8d6e0651ea1d343eb1796d5c80951078aa9be046d8e70cea480d7cc02d4defa9-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm4cf4ddf05591dc07d6adacc93bb4c38c4bd3b1291d98937b6dd5dbf70251c7ed-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm6db20d1f72ef8112cd5e548e747398c88776d68db80b4e532dd49bd1db481a42-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm6db20d1f72ef8112cd5e548e747398c88776d68db80b4e532dd49bd1db481a42-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm4021c78d0a169246cb306fd95234f03e1c6c7163e4207be9d9a3144a09b46d9d-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm4021c78d0a169246cb306fd95234f03e1c6c7163e4207be9d9a3144a09b46d9d-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm9462d178d6b114aab2ecf8adcb0bf15e4cb71da960c22dbda1364dbdd7b6bcb3-ol9_x86_64_codeready_builder
perf-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm59c35fa11d0a18676de0ff9f06d25b50ecb5aa229666cf97a93e26b13ffc7326-ol9_x86_64_appstream
python3-perf-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm02e1180559b3a2ff440e418c759d892480c5cfeee604d7b39255bf3d2a11f02c-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm02e1180559b3a2ff440e418c759d892480c5cfeee604d7b39255bf3d2a11f02c-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.21.1.0.1.el9_6.x86_64.rpma28760d7ee1eb62507a1c7933a55db8259a22881b47db07d7fce545554ab76f5-ol9_x86_64_appstream
rv-5.14.0-570.21.1.0.1.el9_6.x86_64.rpm6274a7d7567ce4631daa6f3a067fa8b4e640c5ff0b00903cfd79531e00d91ad3-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights