Summary
[5.14.0-570.60.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
[5.14.0-570.60.1]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-117437]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-117437]
- crypto: xts - Handle EBUSY correctly (CKI Backport Bot) [RHEL-119235] {CVE-2023-53494}
[5.14.0-570.59.1]
- nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-105111]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-120964]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-120964]
- NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-118857]
- SUNRPC: Cleanup/fix initial rq_pages allocation (Benjamin Coddington) [RHEL-108160]
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (CKI Backport Bot) [RHEL-116666] {CVE-2022-50367}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116384] {CVE-2025-39702}
Fixed packages 29
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | kernel | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-abi-stablelists | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-core | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-cross-headers | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-core | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-devel | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-devel-matched | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-modules | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-modules-core | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-modules-extra | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-debug-uki-virt | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-devel | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-devel-matched | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-doc | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-headers | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-modules | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-modules-core | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-modules-extra | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-tools | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-tools-libs | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-tools-libs-devel | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-uki-virt | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | kernel-uki-virt-addons | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | libperf | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | perf | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | python3-perf | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | rtla | 0:5.14.0-570.60.1.0.1.el9_6 |
| Oracle Linux · 9 | rv | 0:5.14.0-570.60.1.0.1.el9_6 |
Vulnerabilities 3
-
Critical 9.8
ipv6: sr: Fix MAC comparison to be constant-time
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
-
High 7.8
fs: fix UAF/GPF bug in nilfs_mdt_destroy
In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfs_mdt_destroy In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_m…
-
High 7.8
crypto: xts - Handle EBUSY correctly
In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, …