ELSA-2025-9080

ELSA-2025-9080 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-06-17

Description


[5.14.0-570.22.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.22.1_6]
- Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87890] {CVE-2025-21969}
- Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (David Marlin) [RHEL-87890] {CVE-2025-21969}
- Revert 'SUNRPC: Revert e0a912e8ddba' (Benjamin Coddington) [RHEL-94811]
- mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Jay Shin) [RHEL-92291]
- mm: fix crashes from deferred split racing folio migration (Jay Shin) [RHEL-92291] {CVE-2024-42234}
- mm: memcg: fix split queue list crash when large folio migration (Jay Shin) [RHEL-92291]
- proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86808] {CVE-2025-21999}
- cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87941] {CVE-2025-21963}
- wifi: cfg80211: init wiphy_work before allocating rfkill fails (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
- wifi: cfg80211: cancel wiphy_work before freeing wiphy (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
- eth: bnxt: fix truesize for mb-xdp-pass case (CKI Backport Bot) [RHEL-88328] {CVE-2025-21961}
- vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92471]
- md: fix mddev uaf while iterating all_mddevs list (CKI Backport Bot) [RHEL-89062] {CVE-2025-22126}
- nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-91163]
- nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-91163]
- media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-90323]
- media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-90323]
- media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-90323]
- media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-90323]
- sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-86302]
- smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94460] {CVE-2025-37750}


Related CVEs


CVE-2025-22126
CVE-2025-21979
CVE-2025-21963
CVE-2025-21969
CVE-2025-37750
CVE-2025-21961
CVE-2025-21999

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_aarch64_appstream
kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_aarch64_baseos_latest
kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_aarch64_codeready_builder
kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.22.1.0.1.el9_6.aarch64.rpmb990f9b6e9c4392d95d26d01cfae101efc02e3b89c48391ffa73d0c01096cc1d-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.22.1.0.1.el9_6.aarch64.rpmaa045b120d0fe3b40c0480364716a08a4e97f48f43fef975f9ae6561d74b8735-ol9_aarch64_appstream
kernel-tools-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm08da6da728d11a47aae8ac2c64d14813b5384bbc5cd83456d84616b019174436-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm08da6da728d11a47aae8ac2c64d14813b5384bbc5cd83456d84616b019174436-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm0394e60cfe517120a4e22441d9d05afe0ebd1aaeabcd5db8bcb889dff7fbeec8-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm0394e60cfe517120a4e22441d9d05afe0ebd1aaeabcd5db8bcb889dff7fbeec8-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.22.1.0.1.el9_6.aarch64.rpmce3b6fb03516c7ee54804cb304f5c8a3b54b8afe9de7ed7604e3ca55620fb50a-ol9_aarch64_codeready_builder
perf-5.14.0-570.22.1.0.1.el9_6.aarch64.rpma7046dcab8581d06b126d776fcd0cb8c86ef4c988baa6bbe22f30567d8a60b96-ol9_aarch64_appstream
python3-perf-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm5a33bc2ea47c8958444550001ee2a4f20e49dc329c3b3d86faa419fdeea25bba-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm5a33bc2ea47c8958444550001ee2a4f20e49dc329c3b3d86faa419fdeea25bba-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.22.1.0.1.el9_6.aarch64.rpmc0cf4579620073d5eeb654c751ea2ff023c99de36a6cb5e8e014280fa3795b62-ol9_aarch64_appstream
rv-5.14.0-570.22.1.0.1.el9_6.aarch64.rpm0ac98077bb72a0bdd9e577a0f46eaa854cd98517965c3c333855c20e68080fc7-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_x86_64_appstream
kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_x86_64_baseos_latest
kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_x86_64_codeready_builder
kernel-5.14.0-570.22.1.0.1.el9_6.src.rpmf49329021aa9781ec8a928dfbd58add72f57274dc55169ed098a38214b9a455d-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmb42a93d4392310fe022c415f0506d18d37b3e0126327e5174280605adb5e296c-ol9_x86_64_baseos_latest
kernel-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmb42a93d4392310fe022c415f0506d18d37b3e0126327e5174280605adb5e296c-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.22.1.0.1.el9_6.noarch.rpm7d63457707c127ebd0da7368dec1603facf029e5af4f44438cc16725f5c7d547-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.22.1.0.1.el9_6.noarch.rpm7d63457707c127ebd0da7368dec1603facf029e5af4f44438cc16725f5c7d547-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpme735a60fa948e940d55850f39cbda30198103d035a53ec09bacd5dfc12ef8e43-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpme735a60fa948e940d55850f39cbda30198103d035a53ec09bacd5dfc12ef8e43-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm4154b141512501ba64e1b62b40ed228cdb15715febd75a84d78171f20e43330e-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmf8fe779f7f11f4c1a55454395a1acc6e87b81114766ec3d953dc7a57757902d4-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmf8fe779f7f11f4c1a55454395a1acc6e87b81114766ec3d953dc7a57757902d4-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmbd2641cd8939a1df14873d1e35ec139bc45356baaaadd4be5c7b4e7662154f7d-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmbd2641cd8939a1df14873d1e35ec139bc45356baaaadd4be5c7b4e7662154f7d-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmf8caa1741d23f70395d976474b15c0a2ce3a41cb94dd8c9a4d3785d851ff8fac-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm5203e72a0d2d54a9a3e3996f7dba5ed8786a85effc01abd05fb10884f9e08288-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm733c4d411b9209dce5fd83b7b3eeaf2085b4464bd153868daddcc917795ab2c6-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm733c4d411b9209dce5fd83b7b3eeaf2085b4464bd153868daddcc917795ab2c6-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm39bd66307f9fcf2b207ffdbabb0b29818d80a8a550570b1d4b740cc47d28542f-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm39bd66307f9fcf2b207ffdbabb0b29818d80a8a550570b1d4b740cc47d28542f-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmba719a71f11a9014d451ff68b75c78c5ff590fc596d288feee173f18d579b4b0-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmba719a71f11a9014d451ff68b75c78c5ff590fc596d288feee173f18d579b4b0-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmce20c99bdb20bcbf7c54f04ae3392b3640789194045ded109a9533fdff3fc70b-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmce20c99bdb20bcbf7c54f04ae3392b3640789194045ded109a9533fdff3fc70b-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm507a49a6d756bd4ae86db2023c39771ac01ce596272925b6cb0c820ea0865736-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmc868dec4ede44854cd7b1795eef208491f2eebb0c52645183ae4ebefca962e5f-ol9_x86_64_appstream
kernel-doc-5.14.0-570.22.1.0.1.el9_6.noarch.rpm9a13042a66be366a01ba856d176e399df64feb0fce6b3a34767d1461e9d4cae0-ol9_x86_64_appstream
kernel-headers-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmfe9f1753687222f0e450b5d8cfa75cfddcb1c0920ce711ed32b24abbd1f63fbd-ol9_x86_64_appstream
kernel-modules-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmae57e980fd65fe44735c42a854a692262a3affbde601e53cfb8726cee210267d-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmae57e980fd65fe44735c42a854a692262a3affbde601e53cfb8726cee210267d-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmfc14837f2c2fbda240c4573d190fa63e9b3f4888b99ed32b1835c15285135159-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmfc14837f2c2fbda240c4573d190fa63e9b3f4888b99ed32b1835c15285135159-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.22.1.0.1.el9_6.x86_64.rpme8f4faea4693f01f68ef1246471d861c098513df902b3360c55405fe6a36c0b2-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.22.1.0.1.el9_6.x86_64.rpme8f4faea4693f01f68ef1246471d861c098513df902b3360c55405fe6a36c0b2-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmf1630fab2305753a7b50cb05d1f6a7826a586dc84db0554ba53e4201fefaaee1-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmf1630fab2305753a7b50cb05d1f6a7826a586dc84db0554ba53e4201fefaaee1-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmd165af53fd7d7d1467be7bae64d4c91c09925f157e8ad8b04b58bdfce458cffb-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmd165af53fd7d7d1467be7bae64d4c91c09925f157e8ad8b04b58bdfce458cffb-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm5099f0b6f186bd3eb648233464ab45e2e20e47b59840e14ae754ca9135490cd7-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm49084167f3841a0abc79512ffdb22e047451e31807c704984104d2b0675a2bcc-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm49084167f3841a0abc79512ffdb22e047451e31807c704984104d2b0675a2bcc-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm48d58f7dce7ad7641513b39eaeb2f8569e6b40de04fbccb2d9c2c4f614c0be2a-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm48d58f7dce7ad7641513b39eaeb2f8569e6b40de04fbccb2d9c2c4f614c0be2a-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm963f757b9e85ede4ad8e1b7219a31647a599a1412e9e5f337b5d9a1b08d9bb4e-ol9_x86_64_codeready_builder
perf-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmd727882ce66db621494199228f3d7690a5969e2f78ad78d661c9e0229227d6d5-ol9_x86_64_appstream
python3-perf-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm07116ec830eefabe2fa3e5f1bfef4fba51c31d85d497f9989ba94103eb823a9d-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm07116ec830eefabe2fa3e5f1bfef4fba51c31d85d497f9989ba94103eb823a9d-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.22.1.0.1.el9_6.x86_64.rpm0ca6532e11e7bc6526e79726fc08902e8288c3079e269a6b75c900e4114965c3-ol9_x86_64_appstream
rv-5.14.0-570.22.1.0.1.el9_6.x86_64.rpmc609bee02cbf4ec4c118b6650c2690b0c5e4bca430034b8034d0b13ba5ac8646-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete