Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-20608

Опубликовано: 22 сент. 2025
Источник: oracle-oval
Платформа: Oracle Linux 10
Платформа: Oracle Linux 9

Описание

ELSA-2025-20608: Unbreakable Enterprise kernel security update (IMPORTANT)

[6.12.0-103.40.4.3]

  • x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38453836] {CVE-2025-38560}
  • xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [Orabug: 38453837] {CVE-2025-38500}
  • sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [Orabug: 38453835] {CVE-2025-38566}
  • sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [Orabug: 38453834] {CVE-2025-38571}
  • vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38453833] {CVE-2025-38618}
  • tls: fix handling of zero-length records on the rx_list (Jakub Kicinski) [Orabug: 38453832] {CVE-2025-39682}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-uek

6.12.0-103.40.4.3.el10uek

kernel-uek-core

6.12.0-103.40.4.3.el10uek

kernel-uek-debug

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-core

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-devel

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-core

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-desktop

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-extra

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-usb

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-wireless

6.12.0-103.40.4.3.el10uek

kernel-uek-devel

6.12.0-103.40.4.3.el10uek

kernel-uek-modules

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-core

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-deprecated

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-desktop

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-extra

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-usb

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-wireless

6.12.0-103.40.4.3.el10uek

kernel-uek-tools

6.12.0-103.40.4.3.el10uek

kernel-uek64k

6.12.0-103.40.4.3.el10uek

kernel-uek64k-core

6.12.0-103.40.4.3.el10uek

kernel-uek64k-devel

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-core

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-deprecated

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-desktop

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-extra

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-extra-netfilter

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-usb

6.12.0-103.40.4.3.el10uek

kernel-uek64k-modules-wireless

6.12.0-103.40.4.3.el10uek

Oracle Linux x86_64

kernel-uek

6.12.0-103.40.4.3.el10uek

kernel-uek-core

6.12.0-103.40.4.3.el10uek

kernel-uek-debug

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-core

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-devel

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-core

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-desktop

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-extra

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-usb

6.12.0-103.40.4.3.el10uek

kernel-uek-debug-modules-wireless

6.12.0-103.40.4.3.el10uek

kernel-uek-devel

6.12.0-103.40.4.3.el10uek

kernel-uek-doc

6.12.0-103.40.4.3.el10uek

kernel-uek-modules

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-core

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-deprecated

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-desktop

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-extra

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-usb

6.12.0-103.40.4.3.el10uek

kernel-uek-modules-wireless

6.12.0-103.40.4.3.el10uek

kernel-uek-tools

6.12.0-103.40.4.3.el10uek

Oracle Linux 9

Oracle Linux aarch64

kernel-uek

6.12.0-103.40.4.3.el9uek

kernel-uek-core

6.12.0-103.40.4.3.el9uek

kernel-uek-debug

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-core

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-devel

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-core

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-desktop

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-extra

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-usb

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-wireless

6.12.0-103.40.4.3.el9uek

kernel-uek-devel

6.12.0-103.40.4.3.el9uek

kernel-uek-modules

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-core

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-deprecated

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-desktop

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-extra

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-usb

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-wireless

6.12.0-103.40.4.3.el9uek

kernel-uek-tools

6.12.0-103.40.4.3.el9uek

kernel-uek64k

6.12.0-103.40.4.3.el9uek

kernel-uek64k-core

6.12.0-103.40.4.3.el9uek

kernel-uek64k-devel

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-core

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-deprecated

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-desktop

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-extra

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-extra-netfilter

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-usb

6.12.0-103.40.4.3.el9uek

kernel-uek64k-modules-wireless

6.12.0-103.40.4.3.el9uek

Oracle Linux x86_64

kernel-uek

6.12.0-103.40.4.3.el9uek

kernel-uek-core

6.12.0-103.40.4.3.el9uek

kernel-uek-debug

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-core

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-devel

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-core

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-desktop

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-extra

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-usb

6.12.0-103.40.4.3.el9uek

kernel-uek-debug-modules-wireless

6.12.0-103.40.4.3.el9uek

kernel-uek-devel

6.12.0-103.40.4.3.el9uek

kernel-uek-doc

6.12.0-103.40.4.3.el9uek

kernel-uek-modules

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-core

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-deprecated

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-desktop

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-extra

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-usb

6.12.0-103.40.4.3.el9uek

kernel-uek-modules-wireless

6.12.0-103.40.4.3.el9uek

kernel-uek-tools

6.12.0-103.40.4.3.el9uek

Связанные CVE

CVE-2025-38560
CVE-2025-38500
CVE-2025-38566
CVE-2025-38618
CVE-2025-39682
CVE-2025-38571

Ссылки на источники

Связанные уязвимости

ubuntu логотип

CVE-2025-38560

ubuntu
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to private. The specific mitigation is to touch the first and last byte of each 4K page that is being validated. There is no need to perform the mitigation when performing a page state change to shared and rescinding validation. CPUID bit Fn8000001F_EBX[31] defines the COHERENCY_SFW_NO CPUID bit that, when set, indicates that the software mitigation for this vulnerability is not needed. Implement the mitigation and invoke it when validating memory (making it private) and the COHERENCY_SFW_NO bit is not set, indicating the SNP guest is vulnerable.

redhat логотип

CVE-2025-38560

CVSS3: 5.5
redhat
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to private. The specific mitigation is to touch the first and last byte of each 4K page that is being validated. There is no need to perform the mitigation when performing a page state change to shared and rescinding validation. CPUID bit Fn8000001F_EBX[31] defines the COHERENCY_SFW_NO CPUID bit that, when set, indicates that the software mitigation for this vulnerability is not needed. Implement the mitigation and invoke it when validating memory (making it private) and the COHERENCY_SFW_NO bit is not set, indicating the SNP guest is vulnerable.

nvd логотип

CVE-2025-38560

nvd
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to private. The specific mitigation is to touch the first and last byte of each 4K page that is being validated. There is no need to perform the mitigation when performing a page state change to shared and rescinding validation. CPUID bit Fn8000001F_EBX[31] defines the COHERENCY_SFW_NO CPUID bit that, when set, indicates that the software mitigation for this vulnerability is not needed. Implement the mitigation and invoke it when validating memory (making it private) and the COHERENCY_SFW_NO bit is not set, indicating the SNP guest is vulnerable.

debian логотип

CVE-2025-38560

debian
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: x ...

suse-cvrf логотип

SUSE-SU-2025:03272-1

suse-cvrf
14 дней назад

Security update for the Linux Kernel