Summary
[5.14.0-570.58.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-570.58.1]
- pstore/ram: Check start of empty przs during init (CKI Backport Bot) [RHEL-122067] {CVE-2023-53331}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114299] {CVE-2025-39718}
[5.14.0-570.57.1]
- NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-118731]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113610] {CVE-2025-39730}
[5.14.0-570.56.1]
- NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-111706]
- nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-111706]
- Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-111706]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-117879]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-117879]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-117879]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-117879]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-117879]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-117879]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-117879] {CVE-2025-39819}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114848] {CVE-2025-39751}
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-116232]
- xfs: make sure sb_fdblocks is non-negative (CKI Backport Bot) [RHEL-114540]
- block: fix adding folio to bio (Ming Lei) [RHEL-96789]
Fixed packages 29
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | kernel | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-abi-stablelists | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-core | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-cross-headers | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-core | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-devel | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-devel-matched | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-modules | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-modules-core | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-modules-extra | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-uki-virt | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-devel | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-devel-matched | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-doc | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-headers | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-modules | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-modules-core | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-modules-extra | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-tools | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-tools-libs | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-tools-libs-devel | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-uki-virt | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-uki-virt-addons | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | libperf | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | perf | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | python3-perf | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | rtla | 0:5.14.0-570.58.1.0.1.el9_6 |
| Oracle Linux · 9 | rv | 0:5.14.0-570.58.1.0.1.el9_6 |
Vulnerabilities 5
-
High 8.4
vsock/virtio: Validate length in packet header before skb_put()
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unf…
-
High 7.8
pstore/ram: Check start of empty przs during init
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that …
-
Unscored —
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can access the embedded filehandle.
-
Unscored —CVE-2025-39751 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
fs/smb: Fix inconsistent refcnt update
In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it …