ELSA-2025-28025

Опубликовано: 02 дек. 2025

Источник: oracle-oval

Платформа: Oracle Linux 10

Платформа: Oracle Linux 9

Описание

ELSA-2025-28025: Unbreakable Enterprise kernel security update (IMPORTANT)

[6.12.0-105.51.5.1]

crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38712788] {CVE-2025-40019}
netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso) [Orabug: 38712786] {CVE-2025-38678}

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-uek

6.12.0-105.51.5.1.el10uek

kernel-uek-core

6.12.0-105.51.5.1.el10uek

kernel-uek-debug

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-core

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-devel

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-core

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-desktop

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-extra

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-usb

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-wireless

6.12.0-105.51.5.1.el10uek

kernel-uek-devel

6.12.0-105.51.5.1.el10uek

kernel-uek-modules

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-core

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-deprecated

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-desktop

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-extra

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-usb

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-wireless

6.12.0-105.51.5.1.el10uek

kernel-uek-tools

6.12.0-105.51.5.1.el10uek

kernel-uek64k

6.12.0-105.51.5.1.el10uek

kernel-uek64k-core

6.12.0-105.51.5.1.el10uek

kernel-uek64k-devel

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-core

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-deprecated

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-desktop

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-extra

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-extra-netfilter

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-usb

6.12.0-105.51.5.1.el10uek

kernel-uek64k-modules-wireless

6.12.0-105.51.5.1.el10uek

Oracle Linux x86_64

kernel-uek

6.12.0-105.51.5.1.el10uek

kernel-uek-core

6.12.0-105.51.5.1.el10uek

kernel-uek-debug

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-core

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-devel

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-core

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-deprecated

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-desktop

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-extra

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-usb

6.12.0-105.51.5.1.el10uek

kernel-uek-debug-modules-wireless

6.12.0-105.51.5.1.el10uek

kernel-uek-devel

6.12.0-105.51.5.1.el10uek

kernel-uek-doc

6.12.0-105.51.5.1.el10uek

kernel-uek-modules

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-core

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-deprecated

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-desktop

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-extra

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-extra-netfilter

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-usb

6.12.0-105.51.5.1.el10uek

kernel-uek-modules-wireless

6.12.0-105.51.5.1.el10uek

kernel-uek-tools

6.12.0-105.51.5.1.el10uek

Oracle Linux 9

Oracle Linux aarch64

kernel-uek

6.12.0-105.51.5.1.el9uek

kernel-uek-core

6.12.0-105.51.5.1.el9uek

kernel-uek-debug

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-core

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-devel

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-core

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-desktop

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-extra

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-usb

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-wireless

6.12.0-105.51.5.1.el9uek

kernel-uek-devel

6.12.0-105.51.5.1.el9uek

kernel-uek-modules

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-core

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-deprecated

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-desktop

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-extra

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-usb

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-wireless

6.12.0-105.51.5.1.el9uek

kernel-uek-tools

6.12.0-105.51.5.1.el9uek

kernel-uek64k

6.12.0-105.51.5.1.el9uek

kernel-uek64k-core

6.12.0-105.51.5.1.el9uek

kernel-uek64k-devel

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-core

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-deprecated

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-desktop

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-extra

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-extra-netfilter

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-usb

6.12.0-105.51.5.1.el9uek

kernel-uek64k-modules-wireless

6.12.0-105.51.5.1.el9uek

Oracle Linux x86_64

kernel-uek

6.12.0-105.51.5.1.el9uek

kernel-uek-core

6.12.0-105.51.5.1.el9uek

kernel-uek-debug

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-core

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-devel

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-core

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-deprecated

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-desktop

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-extra

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-extra-netfilter

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-usb

6.12.0-105.51.5.1.el9uek

kernel-uek-debug-modules-wireless

6.12.0-105.51.5.1.el9uek

kernel-uek-devel

6.12.0-105.51.5.1.el9uek

kernel-uek-doc

6.12.0-105.51.5.1.el9uek

kernel-uek-modules

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-core

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-deprecated

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-desktop

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-extra

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-extra-netfilter

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-usb

6.12.0-105.51.5.1.el9uek

kernel-uek-modules-wireless

6.12.0-105.51.5.1.el9uek

kernel-uek-tools

6.12.0-105.51.5.1.el9uek

Связанные CVE

CVE-2025-38678

CVE-2025-40019

Ссылки на источники

Связанные уязвимости

CVE-2025-40019

ubuntu

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

CVE-2025-40019

nvd

3 месяца назад

CVE-2025-40019

CVSS3: 5.5

msrc

около 2 месяцев назад

crypto: essiv - Check ssize for decryption and in-place encryption

CVE-2025-40019

debian

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: c ...

CVE-2025-38678

CVSS3: 5.5

ubuntu

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving unregistered the hook of the duplicated device. Check if a duplicated device exists in the transaction batch, bail out with EEXIST in such case. WARNING is hit when unregistering the hook: [49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150 [49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full) [...] [49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150