Stay Connected:

ELSA-2025-9302

ELSA-2025-9302 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-06-23

Description


[5.14.0-570.23.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.23.1_6]
- ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94248] {CVE-2025-37738}
- ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89019] {CVE-2025-22104}
- ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-88310] {CVE-2025-21883}
- ice: Fix deinitializing VF in error path (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
- ice: add E830 HW VF mailbox message limit support (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88322] {CVE-2025-21919}
- redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-89730]
- media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-89730]
- media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-89730]
- media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-89730]
- ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93629] {CVE-2025-23150}


Related CVEs


CVE-2025-21919
CVE-2025-21883
CVE-2025-23150
CVE-2025-22104
CVE-2025-37738

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_aarch64_appstream
kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_aarch64_baseos_latest
kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_aarch64_codeready_builder
kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.23.1.0.1.el9_6.aarch64.rpmff03c7eb8ed639eabbe3d88366a02c014d644505c77ad41313305ec07fa395f8-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.23.1.0.1.el9_6.aarch64.rpm978adbeceda08352e2a92a451d4d94681b62e637f3b408092a7e44bc9a7359a5-ol9_aarch64_appstream
kernel-tools-5.14.0-570.23.1.0.1.el9_6.aarch64.rpm8084615870615cac4d231056a8145533016a8cbce1487e27ea3261b2fc3ec4d4-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.23.1.0.1.el9_6.aarch64.rpm8084615870615cac4d231056a8145533016a8cbce1487e27ea3261b2fc3ec4d4-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.23.1.0.1.el9_6.aarch64.rpmcfef96858f9dd85d0593d7e406aea0f7fd875ad9cc74e276a05b2f79a59a14ea-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.23.1.0.1.el9_6.aarch64.rpmcfef96858f9dd85d0593d7e406aea0f7fd875ad9cc74e276a05b2f79a59a14ea-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.23.1.0.1.el9_6.aarch64.rpm8b5cf1d9852314036054d9019b2aef97170ce0cec2ab622454078947f14dcdd8-ol9_aarch64_codeready_builder
perf-5.14.0-570.23.1.0.1.el9_6.aarch64.rpmcc2f590dd6613d8557caa06fe30d2d0a4b911c48805508f09263df30028e081c-ol9_aarch64_appstream
python3-perf-5.14.0-570.23.1.0.1.el9_6.aarch64.rpm018a25c8b7a57ab154c5f875d78b8fbf2df5b41a9bb90b8ee9bf492e290f945e-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.23.1.0.1.el9_6.aarch64.rpm018a25c8b7a57ab154c5f875d78b8fbf2df5b41a9bb90b8ee9bf492e290f945e-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.23.1.0.1.el9_6.aarch64.rpmebe32ec4367d4f3caa1923e7c55aa799d56b886d151d577d6babc826f1d2cf5d-ol9_aarch64_appstream
rv-5.14.0-570.23.1.0.1.el9_6.aarch64.rpmce33d8c65431505518259dd7f71b765e468cdb96b7d1a197fd9951d468e76d56-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_x86_64_appstream
kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_x86_64_baseos_latest
kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_x86_64_codeready_builder
kernel-5.14.0-570.23.1.0.1.el9_6.src.rpm632498c76ee55a8bd73e595ee125b675508b0b1c5717cda565e666954529451d-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm51dfcf94db097f9cb2fab18404ec12d51a4897552b5710670149dce81858e093-ol9_x86_64_baseos_latest
kernel-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm51dfcf94db097f9cb2fab18404ec12d51a4897552b5710670149dce81858e093-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.23.1.0.1.el9_6.noarch.rpm52601cc668d585dca18973a4edf4973b6b73cd61d3e0acac4a2ab10318d405f0-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.23.1.0.1.el9_6.noarch.rpm52601cc668d585dca18973a4edf4973b6b73cd61d3e0acac4a2ab10318d405f0-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm836ab9d8affa063692bae65bc5993959be62720fcb82efdf19f08a23b21c90de-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm836ab9d8affa063692bae65bc5993959be62720fcb82efdf19f08a23b21c90de-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm539ee289e860c7c58943e178d10d5494c8c3bacb590352a38f4ab369c2659a37-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd466e6bc08f6a05f8b2c7934cfedbeabe7d62241920a57b53cc75653ecfb3961-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd466e6bc08f6a05f8b2c7934cfedbeabe7d62241920a57b53cc75653ecfb3961-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd78e5caa3986e7b66fec67a220120f7747b664d183dc4608f0ba353defd65f8a-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd78e5caa3986e7b66fec67a220120f7747b664d183dc4608f0ba353defd65f8a-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm5f7c6ba1b1e49ea116f2dbfff17e33ffe2ea0fccb8a01e9b038ac0e98fd9bd60-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.23.1.0.1.el9_6.x86_64.rpme0405a1664baad5e63d7988d0bf23a8f2cab8dda718f4b15ea6d7616d556e399-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm022052f6999a8833a212058913ed6f5d7c472f6211005eb1d8b363817867bcf9-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm022052f6999a8833a212058913ed6f5d7c472f6211005eb1d8b363817867bcf9-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpme5d4ae1a29c60549dac445a87d77e84046b2f0ca16d3af7d9c6e36833ba39afe-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpme5d4ae1a29c60549dac445a87d77e84046b2f0ca16d3af7d9c6e36833ba39afe-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmac9be09635171d7b980c15ce7806237bdf69f0a373560058949582e7e29bb0a3-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmac9be09635171d7b980c15ce7806237bdf69f0a373560058949582e7e29bb0a3-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmf76f19be49fb47424d9602897cd761d4e59c7f3f2f13dae83b80ed2ab19ca0d6-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmf76f19be49fb47424d9602897cd761d4e59c7f3f2f13dae83b80ed2ab19ca0d6-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm81134a74a3a5132d28ac8fa30d5967560fd12ca4d391a0b52bd4f7cba6fa0d55-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmdbe8beb910027485f3272afa2360a2337a959411a9a7ecc8db78f94593dda048-ol9_x86_64_appstream
kernel-doc-5.14.0-570.23.1.0.1.el9_6.noarch.rpm7d356e68d551d63e0c0ba29954f051cd1d8136ff22d164a36fd2cf9043a9fb7f-ol9_x86_64_appstream
kernel-headers-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmf032602f0e1756731966f1af8be88cd8f4254d28c586687c5ca8b20cc2ef8d85-ol9_x86_64_appstream
kernel-modules-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm9227ff812bbb39008cde42417dbe1a2826964af961c3fbb02db457b262682a3d-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm9227ff812bbb39008cde42417dbe1a2826964af961c3fbb02db457b262682a3d-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmcca10ffdd209e5ba641fc9e13d7cf19466c74c8d7e427bf3cc6e2d579ae8fef4-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmcca10ffdd209e5ba641fc9e13d7cf19466c74c8d7e427bf3cc6e2d579ae8fef4-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd4bb8c87143d694576958eedce93a35c703d8ff40da75c3c7d497868c22ae171-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd4bb8c87143d694576958eedce93a35c703d8ff40da75c3c7d497868c22ae171-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm51126918a09da239f115faf91bf8f16b7002bfc11bcf915a61a2530fcf2a52c9-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm51126918a09da239f115faf91bf8f16b7002bfc11bcf915a61a2530fcf2a52c9-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm4769a1124c3cafe7588ff0a3a2e8f94696d9d412332e3c835559e9161a641a4c-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm4769a1124c3cafe7588ff0a3a2e8f94696d9d412332e3c835559e9161a641a4c-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmcc7140e9c6d366ab476f5e6d831e3a2c9daeb43a8c88f393e5ccdc34c3dcf248-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm746cfefb6a84a0c4dffcec5fb062e2ce16052cc2c76339ed86fba307bf03ce65-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm746cfefb6a84a0c4dffcec5fb062e2ce16052cc2c76339ed86fba307bf03ce65-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm700f20f4e28a9e858feda7b48b91092aef9e9a7ec7afe024a9c2e66a28d36be2-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm700f20f4e28a9e858feda7b48b91092aef9e9a7ec7afe024a9c2e66a28d36be2-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm26457161ccb4ba9bf270a65c04cd0a79504a68b4b976bc344bda20334436a888-ol9_x86_64_codeready_builder
perf-5.14.0-570.23.1.0.1.el9_6.x86_64.rpmd57076f265b2427f367fa2b78e4af76246b0f1d365577f1f0553582b5fa7d3a3-ol9_x86_64_appstream
python3-perf-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm00657cc3938281e84024b7ec804b99886ad3b06529b70d3fb8fcfc58417904b4-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm00657cc3938281e84024b7ec804b99886ad3b06529b70d3fb8fcfc58417904b4-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm71d4e9c863f84afa6eb6d7a69d138f5a16e891140bf1e0ab9b73272a752d1e20-ol9_x86_64_appstream
rv-5.14.0-570.23.1.0.1.el9_6.x86_64.rpm44b570856de5cea6fe61e9bc3a44aa551cf72a8dc9d5e5749f7a6200e7f38b04-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights