Oracle alert ELSA-2025-16880 (kernel)
From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
To: | el-errata@oss.oracle.com | |
Subject: | [El-errata] ELSA-2025-16880 Moderate: Oracle Linux 9 kernel security update | |
Date: | Tue, 30 Sep 2025 10:34:33 -0700 | |
Message-ID: | <mailman.148.1759254051.31.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2025-16880 http://linux.oracle.com/errata/ELSA-2025-16880.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-abi-stablelists-5.14.0-570.49.1.0.1.el9_6.noarch.rpm kernel-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-cross-headers-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-devel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-devel-matched-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-modules-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-modules-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-modules-extra-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-debug-uki-virt-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-devel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-devel-matched-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-doc-5.14.0-570.49.1.0.1.el9_6.noarch.rpm kernel-headers-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-modules-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-modules-core-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-modules-extra-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-tools-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-tools-libs-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-tools-libs-devel-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-uki-virt-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm kernel-uki-virt-addons-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm libperf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm perf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm python3-perf-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm rtla-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm rv-5.14.0-570.49.1.0.1.el9_6.x86_64.rpm aarch64: kernel-cross-headers-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm kernel-headers-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm kernel-tools-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm kernel-tools-libs-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm kernel-tools-libs-devel-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm libperf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm perf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm python3-perf-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm rtla-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm rv-5.14.0-570.49.1.0.1.el9_6.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-570... Related CVEs: CVE-2025-38472 CVE-2025-38527 CVE-2025-38718 CVE-2025-39682 CVE-2025-39698 Description of changes: [5.14.0-570.49.1.0.1.el9_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] - Add Oracle Linux IMA certificates - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764] [5.14.0-570.49.1.el9_6] - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114335] {CVE-2025-39698} - selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682} - tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682} [5.14.0-570.48.1.el9_6] - perf trace: Add missing perf_tool__init() (Michael Petlan) [RHEL-105393] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-114962] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-114962] [5.14.0-570.47.1.el9_6] - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113916] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113333] {CVE-2025-38718} - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-113039] - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-112558] - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-112873] - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-112873] - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-112558] - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-112558] - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-112558] - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-112558] - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-112558] - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-112558] - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-112558] - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-112558] - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-112558] - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-112683] - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-112683] - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-112683] - ice: Fix E825 initialization (Petr Oros) [RHEL-112683] - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82136] - smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111196] {CVE-2025-38527} - i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109571] - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-109525] - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106432] {CVE-2025-38472} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-91800] _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata