Stay Connected:

ELSA-2025-9880

ELSA-2025-9880 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-06-30

Description


[5.14.0-570.24.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-570.24.1_6]
- Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93465] {CVE-2023-52933}
- net/mlx5: Fill out devlink dev info only for PFs (CKI Backport Bot) [RHEL-93770]
- dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89487]
- dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89487]
- dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89487]
- dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89487]
- NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-96060]
- pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-96060]
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-96060]
- x86/tsc: Use topology_max_packages() to get package number (David Arcari) [RHEL-96886]
- scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-97519]


Related CVEs


CVE-2023-52933

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_aarch64_appstream
kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_aarch64_baseos_latest
kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_aarch64_codeready_builder
kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_aarch64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.24.1.0.1.el9_6.aarch64.rpm6343ee6c8c3ed618b2f874a388b7f21dc9087ca2c34007d7799a2ec92c104d17-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-570.24.1.0.1.el9_6.aarch64.rpm5c221dede5f60676ff55a947cac7630ac412e38328da01005f75b20e4e3926e1-ol9_aarch64_appstream
kernel-tools-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmf645eab6941b4b59e472cbf9d1af2780fb2abce5248ef535b40fe98f55c53d14-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmf645eab6941b4b59e472cbf9d1af2780fb2abce5248ef535b40fe98f55c53d14-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmb7f52550609e033eb4a42d3fee802caab9b391c75d866afa99f27bcff3428dc5-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmb7f52550609e033eb4a42d3fee802caab9b391c75d866afa99f27bcff3428dc5-ol9_aarch64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmc137148921913cb81238513521ccb35b2b28d134f9475d471419f9ff2189cc27-ol9_aarch64_codeready_builder
perf-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmdd9d69617578370747a7527b7daac0c93c5a1fdbcefde942ff4d6811d2734140-ol9_aarch64_appstream
python3-perf-5.14.0-570.24.1.0.1.el9_6.aarch64.rpm845557d3714210ed0824eed8e656a5d968efbb0c7fec78c8f856e81f82e23b7b-ol9_aarch64_baseos_latest
python3-perf-5.14.0-570.24.1.0.1.el9_6.aarch64.rpm845557d3714210ed0824eed8e656a5d968efbb0c7fec78c8f856e81f82e23b7b-ol9_aarch64_u6_baseos_patch
rtla-5.14.0-570.24.1.0.1.el9_6.aarch64.rpme2d7867ea8e77c930b3cb3c8da123f312b884db0f1657dd30c2bcfc60f6082b0-ol9_aarch64_appstream
rv-5.14.0-570.24.1.0.1.el9_6.aarch64.rpmbab18ee9422cfc1ab0237530ef5e6163e7564fe375a4c39ceb8c8dd5f243166f-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_x86_64_appstream
kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_x86_64_baseos_latest
kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_x86_64_codeready_builder
kernel-5.14.0-570.24.1.0.1.el9_6.src.rpm4e0435c742c3bf83697631ba6c3787a0ffb9e6788a80a9c7a9bc304c976c2f92-ol9_x86_64_u6_baseos_patch
kernel-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmff6d5a01992d14428a08cae2a8f55ff67a38ad4f12044d8547329ff551d1245e-ol9_x86_64_baseos_latest
kernel-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmff6d5a01992d14428a08cae2a8f55ff67a38ad4f12044d8547329ff551d1245e-ol9_x86_64_u6_baseos_patch
kernel-abi-stablelists-5.14.0-570.24.1.0.1.el9_6.noarch.rpm0bbf9321ee26255abe7fbe7e9a38176063c9e4bceb8ee2db630c0070eb1e7763-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-570.24.1.0.1.el9_6.noarch.rpm0bbf9321ee26255abe7fbe7e9a38176063c9e4bceb8ee2db630c0070eb1e7763-ol9_x86_64_u6_baseos_patch
kernel-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm983be77e37cd84964454fdde97f72061a715c3ef812230c587b93fe2e786a23f-ol9_x86_64_baseos_latest
kernel-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm983be77e37cd84964454fdde97f72061a715c3ef812230c587b93fe2e786a23f-ol9_x86_64_u6_baseos_patch
kernel-cross-headers-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmd8151c785aee7dcdb2295e20d8dea8d876164ee2a9e530c7c2b5d2de46e6e723-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5f33c606a6e3d16c2c9b7cf67e557d212dc6b2f27008afeccb1fbda64043cd51-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5f33c606a6e3d16c2c9b7cf67e557d212dc6b2f27008afeccb1fbda64043cd51-ol9_x86_64_u6_baseos_patch
kernel-debug-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmbcdc4b489bbb4de7552c5bc87308d23f01de8f682f4a962843c40be4c1d7e4cc-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmbcdc4b489bbb4de7552c5bc87308d23f01de8f682f4a962843c40be4c1d7e4cc-ol9_x86_64_u6_baseos_patch
kernel-debug-devel-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmce97d3014914b73009ac5894d118732d23d85652fb3539528a8cf2a6f734282b-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm2a1f72bfda3b4194fc4bba618de92af77c48f8be7c7fca3ed050cb395c2cdd2d-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm8c3c0399517e7968350cae280735d65403389ab2368b3fed6ae6f14c4abc4f05-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm8c3c0399517e7968350cae280735d65403389ab2368b3fed6ae6f14c4abc4f05-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmd5bf2e501ef39af152f0e1164d7bd9cce339d4027be44ffe9be6be1844749ac5-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmd5bf2e501ef39af152f0e1164d7bd9cce339d4027be44ffe9be6be1844749ac5-ol9_x86_64_u6_baseos_patch
kernel-debug-modules-extra-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5a0a711717976f32cf3fc364bd5931d83b553579110484d947f9f2eb846b60fe-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5a0a711717976f32cf3fc364bd5931d83b553579110484d947f9f2eb846b60fe-ol9_x86_64_u6_baseos_patch
kernel-debug-uki-virt-5.14.0-570.24.1.0.1.el9_6.x86_64.rpme603116f3cbb40fc939181f61cdf0098387c85792c6c3364ac230f371328567e-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-570.24.1.0.1.el9_6.x86_64.rpme603116f3cbb40fc939181f61cdf0098387c85792c6c3364ac230f371328567e-ol9_x86_64_u6_baseos_patch
kernel-devel-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmec428e6dc57c56ab3e24bfe293f90992374d687a2b635c62338d6c2d04cb2c23-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5b5e121fda793e6c07e2ceb38a5ed7f065f7334d341dfd7408653c075a05c43c-ol9_x86_64_appstream
kernel-doc-5.14.0-570.24.1.0.1.el9_6.noarch.rpm04fc814a7dfc1c789d91d8cb0975bb882c57de0f34fea8d8083fd4ea5324a669-ol9_x86_64_appstream
kernel-headers-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm9a678d510ccd0ff4b6e19ce4755f2d457aa310e433f9ac33fc714e33b57107d2-ol9_x86_64_appstream
kernel-modules-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm219f8e23351210219a9e8cb99a23b8d756cf1877456632c2f7592a4b2f120bfb-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm219f8e23351210219a9e8cb99a23b8d756cf1877456632c2f7592a4b2f120bfb-ol9_x86_64_u6_baseos_patch
kernel-modules-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm51d86ff4757f34aaa948ed1866594bcdce9a5f239aac6a91dd03733f43d85f16-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm51d86ff4757f34aaa948ed1866594bcdce9a5f239aac6a91dd03733f43d85f16-ol9_x86_64_u6_baseos_patch
kernel-modules-extra-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5e248ed5856b6ff493909be0a8c477cafc45002fc24bc966a5c435132a7340fb-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5e248ed5856b6ff493909be0a8c477cafc45002fc24bc966a5c435132a7340fb-ol9_x86_64_u6_baseos_patch
kernel-tools-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm32b09e53d17444721b652aa3c4f75e31ec8848a9e808c24230fd03f528f70bf2-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm32b09e53d17444721b652aa3c4f75e31ec8848a9e808c24230fd03f528f70bf2-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5f4a81f6ddd2e0a75773136f4eb28367fc3fdad4f5f4adff667c68dee7117b16-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5f4a81f6ddd2e0a75773136f4eb28367fc3fdad4f5f4adff667c68dee7117b16-ol9_x86_64_u6_baseos_patch
kernel-tools-libs-devel-5.14.0-570.24.1.0.1.el9_6.x86_64.rpme7f0d5bf26a4d4433696bcc770c57bbb6582088620cf212980dea994daa16135-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm7bb23d027e38d742642e5664248c3b8ba0c397437262fdbbb53db8490af1789c-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm7bb23d027e38d742642e5664248c3b8ba0c397437262fdbbb53db8490af1789c-ol9_x86_64_u6_baseos_patch
kernel-uki-virt-addons-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5122c5a71fe60f0819ffabc054db7daabdf2c65b055ed4a130074247e424da5c-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm5122c5a71fe60f0819ffabc054db7daabdf2c65b055ed4a130074247e424da5c-ol9_x86_64_u6_baseos_patch
libperf-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm0b63ffa19c46a4fe1775197e7d7ac8a8c37f296b2f2fc02ed0a9129630b9e92c-ol9_x86_64_codeready_builder
perf-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm414d7fd9c344de493f8af82f9dfefaa7bf38b178d6cb44369a40c6a8af6b8312-ol9_x86_64_appstream
python3-perf-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmc5962a661f98a65d1fef0814e10978a9dc88febcf301296a3808acc73f0f85e8-ol9_x86_64_baseos_latest
python3-perf-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmc5962a661f98a65d1fef0814e10978a9dc88febcf301296a3808acc73f0f85e8-ol9_x86_64_u6_baseos_patch
rtla-5.14.0-570.24.1.0.1.el9_6.x86_64.rpm1ff511cc3c4c010995623bf70405760cabad58be6ab07d3d9a4852dd7070126c-ol9_x86_64_appstream
rv-5.14.0-570.24.1.0.1.el9_6.x86_64.rpmac2d6e00ecc826e1cccd77a24270eaa96243f3ca8fc84c826a82a1a82dd66c74-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights