OL 9 must be a vendor supported release.

STIG ID: OL09-00-000010  |  SRG: SRG-OS-000439-GPOS-00195 |  Severity: high (CAT I)  |  CCI: CCI-002605 |  Vulnerability Id: V-271438

Vulnerability Discussion

An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

End Of Life dates for Oracle Linux 9 releases are as follows:
Current end of Premier Support for Oracle Linux 9 is June 2032.
Current end of Extended Support for Oracle Linux 9 is June 2035.

Each minor version reaches end of life when the new version is released.

Check

Verify OL 9 is vendor supported with the following command:

$ cat /etc/oracle-release
Oracle Linux Server release 9.6

If the installed version of OL 9 is not supported, this is a finding.

Fix

Upgrade OL 9 to a supported version.