ELSA-2025-19106

Опубликовано: 28 окт. 2025

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2025-19106: kernel security update (MODERATE)

[6.12.0-55.41.1.0.1]

nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
Disable UKI signing [Orabug: 36571828]
Update Oracle Linux certificates (Kevin Lyons)
Disable signing for aarch64 (Ilya Okomin)
Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
Update x509.genkey [Orabug: 24817676]
Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
Add Oracle Linux IMA certificates
Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.41.1]

ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-headers

6.12.0-55.41.1.0.1.el10_0

perf

6.12.0-55.41.1.0.1.el10_0

python3-perf

6.12.0-55.41.1.0.1.el10_0

rtla

6.12.0-55.41.1.0.1.el10_0

kernel-tools

6.12.0-55.41.1.0.1.el10_0

kernel-tools-libs

6.12.0-55.41.1.0.1.el10_0

kernel-cross-headers

6.12.0-55.41.1.0.1.el10_0

kernel-tools-libs-devel

6.12.0-55.41.1.0.1.el10_0

libperf

6.12.0-55.41.1.0.1.el10_0

Oracle Linux x86_64

kernel

6.12.0-55.41.1.0.1.el10_0

kernel-abi-stablelists

6.12.0-55.41.1.0.1.el10_0

kernel-core

6.12.0-55.41.1.0.1.el10_0

kernel-debug

6.12.0-55.41.1.0.1.el10_0

kernel-debug-core

6.12.0-55.41.1.0.1.el10_0

kernel-debug-modules

6.12.0-55.41.1.0.1.el10_0

kernel-debug-modules-core

6.12.0-55.41.1.0.1.el10_0

kernel-debug-modules-extra

6.12.0-55.41.1.0.1.el10_0

kernel-debug-uki-virt

6.12.0-55.41.1.0.1.el10_0

kernel-modules

6.12.0-55.41.1.0.1.el10_0

kernel-modules-core

6.12.0-55.41.1.0.1.el10_0

kernel-modules-extra

6.12.0-55.41.1.0.1.el10_0

kernel-tools

6.12.0-55.41.1.0.1.el10_0

kernel-tools-libs

6.12.0-55.41.1.0.1.el10_0

kernel-uki-virt

6.12.0-55.41.1.0.1.el10_0

kernel-uki-virt-addons

6.12.0-55.41.1.0.1.el10_0

kernel-debug-devel

6.12.0-55.41.1.0.1.el10_0

kernel-debug-devel-matched

6.12.0-55.41.1.0.1.el10_0

kernel-devel

6.12.0-55.41.1.0.1.el10_0

kernel-devel-matched

6.12.0-55.41.1.0.1.el10_0

kernel-doc

6.12.0-55.41.1.0.1.el10_0

kernel-headers

6.12.0-55.41.1.0.1.el10_0

perf

6.12.0-55.41.1.0.1.el10_0

python3-perf

6.12.0-55.41.1.0.1.el10_0

rtla

6.12.0-55.41.1.0.1.el10_0

kernel-cross-headers

6.12.0-55.41.1.0.1.el10_0

kernel-tools-libs-devel

6.12.0-55.41.1.0.1.el10_0

libperf

6.12.0-55.41.1.0.1.el10_0

Связанные CVE

Ссылки на источники

Связанные уязвимости

CVE-2025-39849

ubuntu

около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.

CVE-2025-39849

CVSS3: 5.5

redhat

около 2 месяцев назад

CVE-2025-39849

nvd

около 2 месяцев назад

CVE-2025-39849

msrc

около 2 месяцев назад

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

CVE-2025-39849

debian

около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: w ...