Skip to content
OpenAdvisories
Medium ELSA-2025-8142 1 CVE

Moderate: kernel security update (Oracle Linux 9)

Published May 27, 2025 · Updated May 27, 2025

Summary

[5.14.0-570.18.1.0.1_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-570.18.1_6]
- gitlab-ci: use r.6 builder image (Michael Hofmann)
- cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87921] {CVE-2025-21964}
- Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (David Marlin) [RHEL-85647]
- drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode (Jocelyn Falempe) [RHEL-85393]
- drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Use joined pipes in dsc helpers for slices, bpp (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Simplify intel_joiner_num_pipes and its usage (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Check whether platform supports joiner (Jocelyn Falempe) [RHEL-85393]
- Revert 'drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation' (Jocelyn Falempe) [RHEL-85393]
- Revert 'drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode' (Jocelyn Falempe) [RHEL-85393]

Fixed packages 29

ReleasePackageFixed in
Oracle Linux · 9 kernel 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-abi-stablelists 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-core 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-cross-headers 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-core 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-devel 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-devel-matched 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-modules 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-modules-core 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-modules-extra 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-debug-uki-virt 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-devel 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-devel-matched 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-doc 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-headers 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-modules 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-modules-core 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-modules-extra 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-tools 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-tools-libs 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-tools-libs-devel 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-uki-virt 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 kernel-uki-virt-addons 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 libperf 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 perf 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 python3-perf 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 rtla 0:5.14.0-570.18.1.0.1.el9_6
Oracle Linux · 9 rv 0:5.14.0-570.18.1.0.1.el9_6

Vulnerabilities 1

  • Medium 5.5

    cifs: Fix integer overflow while processing acregmax mount option

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value …