Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-8374

Опубликовано: 03 июл. 2025
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2025-8374: kernel security update (MODERATE)

[6.12.0-55.19.1.0.1_0.OL10]

  • nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
  • Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
  • Disable UKI signing [Orabug: 36571828]
  • Update Oracle Linux certificates (Kevin Lyons)
  • Disable signing for aarch64 (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
  • Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  • Add Oracle Linux IMA certificates
  • Update module name for cryptographic module [Orabug: 37400433]

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

kernel-headers

6.12.0-55.19.1.0.1.el10_0

perf

6.12.0-55.19.1.0.1.el10_0

python3-perf

6.12.0-55.19.1.0.1.el10_0

rtla

6.12.0-55.19.1.0.1.el10_0

rv

6.12.0-55.19.1.0.1.el10_0

kernel-tools

6.12.0-55.19.1.0.1.el10_0

kernel-tools-libs

6.12.0-55.19.1.0.1.el10_0

kernel-cross-headers

6.12.0-55.19.1.0.1.el10_0

kernel-tools-libs-devel

6.12.0-55.19.1.0.1.el10_0

libperf

6.12.0-55.19.1.0.1.el10_0

Oracle Linux x86_64

kernel

6.12.0-55.19.1.0.1.el10_0

kernel-core

6.12.0-55.19.1.0.1.el10_0

kernel-debug-modules

6.12.0-55.19.1.0.1.el10_0

kernel-modules

6.12.0-55.19.1.0.1.el10_0

kernel-modules-extra

6.12.0-55.19.1.0.1.el10_0

kernel-tools

6.12.0-55.19.1.0.1.el10_0

kernel-tools-libs

6.12.0-55.19.1.0.1.el10_0

kernel-uki-virt-addons

6.12.0-55.19.1.0.1.el10_0

kernel-debug-devel

6.12.0-55.19.1.0.1.el10_0

kernel-debug-devel-matched

6.12.0-55.19.1.0.1.el10_0

kernel-devel

6.12.0-55.19.1.0.1.el10_0

kernel-devel-matched

6.12.0-55.19.1.0.1.el10_0

kernel-doc

6.12.0-55.19.1.0.1.el10_0

kernel-headers

6.12.0-55.19.1.0.1.el10_0

perf

6.12.0-55.19.1.0.1.el10_0

python3-perf

6.12.0-55.19.1.0.1.el10_0

rtla

6.12.0-55.19.1.0.1.el10_0

rv

6.12.0-55.19.1.0.1.el10_0

kernel-abi-stablelists

6.12.0-55.19.1.0.1.el10_0

kernel-debug

6.12.0-55.19.1.0.1.el10_0

kernel-debug-core

6.12.0-55.19.1.0.1.el10_0

kernel-debug-modules-core

6.12.0-55.19.1.0.1.el10_0

kernel-debug-modules-extra

6.12.0-55.19.1.0.1.el10_0

kernel-debug-uki-virt

6.12.0-55.19.1.0.1.el10_0

kernel-modules-core

6.12.0-55.19.1.0.1.el10_0

kernel-uki-virt

6.12.0-55.19.1.0.1.el10_0

kernel-cross-headers

6.12.0-55.19.1.0.1.el10_0

kernel-tools-libs-devel

6.12.0-55.19.1.0.1.el10_0

libperf

6.12.0-55.19.1.0.1.el10_0

Связанные уязвимости

CVSS3: 7.8
ubuntu
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list child_cfs_rq_on_list attempts to convert a 'prev' pointer to a cfs_rq. This 'prev' pointer can originate from struct rq's leaf_cfs_rq_list, making the conversion invalid and potentially leading to memory corruption. Depending on the relative positions of leaf_cfs_rq_list and the task group (tg) pointer within the struct, this can cause a memory fault or access garbage data. The issue arises in list_add_leaf_cfs_rq, where both cfs_rq->leaf_cfs_rq_list and rq->leaf_cfs_rq_list are added to the same leaf list. Also, rq->tmp_alone_branch can be set to rq->leaf_cfs_rq_list. This adds a check `if (prev == &rq->leaf_cfs_rq_list)` after the main conditional in child_cfs_rq_on_list. This ensures that the container_of operation will convert a correct cfs_rq struct. This check is sufficient because only cfs_rqs on the same CPU are added to the list, so ve...

CVSS3: 7
redhat
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list child_cfs_rq_on_list attempts to convert a 'prev' pointer to a cfs_rq. This 'prev' pointer can originate from struct rq's leaf_cfs_rq_list, making the conversion invalid and potentially leading to memory corruption. Depending on the relative positions of leaf_cfs_rq_list and the task group (tg) pointer within the struct, this can cause a memory fault or access garbage data. The issue arises in list_add_leaf_cfs_rq, where both cfs_rq->leaf_cfs_rq_list and rq->leaf_cfs_rq_list are added to the same leaf list. Also, rq->tmp_alone_branch can be set to rq->leaf_cfs_rq_list. This adds a check `if (prev == &rq->leaf_cfs_rq_list)` after the main conditional in child_cfs_rq_on_list. This ensures that the container_of operation will convert a correct cfs_rq struct. This check is sufficient because only cfs_rqs on the same CPU are added to the list, so verifyi...

CVSS3: 7.8
nvd
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list child_cfs_rq_on_list attempts to convert a 'prev' pointer to a cfs_rq. This 'prev' pointer can originate from struct rq's leaf_cfs_rq_list, making the conversion invalid and potentially leading to memory corruption. Depending on the relative positions of leaf_cfs_rq_list and the task group (tg) pointer within the struct, this can cause a memory fault or access garbage data. The issue arises in list_add_leaf_cfs_rq, where both cfs_rq->leaf_cfs_rq_list and rq->leaf_cfs_rq_list are added to the same leaf list. Also, rq->tmp_alone_branch can be set to rq->leaf_cfs_rq_list. This adds a check `if (prev == &rq->leaf_cfs_rq_list)` after the main conditional in child_cfs_rq_on_list. This ensures that the container_of operation will convert a correct cfs_rq struct. This check is sufficient because only cfs_rqs on the same CPU are added to the list, so verif

CVSS3: 7.8
msrc
3 месяца назад

Описание отсутствует

CVSS3: 7.8
debian
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: s ...