ELSA-2025-23279

ELSA-2025-23279 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-12-17

Description

[6.12.0-124.21.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.21.1]
- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi->skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}

Related CVEs

CVE-2025-38499

CVE-2025-39984

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_aarch64_appstream
	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_aarch64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.21.1.el10_1.aarch64.rpm	7766ec644d1b86de79b5e5cb4ccf4f6741ac15a7456897513bbc3ac8fef3349b	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-124.21.1.el10_1.aarch64.rpm	2097483f5e7a18269cfba0f0da05cab6a269b401a1d52b2c90f502aaa83baffe	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-124.21.1.el10_1.aarch64.rpm	188b2de30d2cd653079b10c70120bc22696dd57d27904e2e1e8ffd01c8ac4864	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-124.21.1.el10_1.aarch64.rpm	188b2de30d2cd653079b10c70120bc22696dd57d27904e2e1e8ffd01c8ac4864	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.21.1.el10_1.aarch64.rpm	f41444f9326587fa9c25e705d6e7b39efaae43431d8dc9e73a5b488c299ae4e7	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-124.21.1.el10_1.aarch64.rpm	f41444f9326587fa9c25e705d6e7b39efaae43431d8dc9e73a5b488c299ae4e7	-	ol10_aarch64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.21.1.el10_1.aarch64.rpm	71842fb702160e514faa25025c3704f9155a779ce1a19899337e4f84b35e4e84	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-124.21.1.el10_1.aarch64.rpm	7bc9d7ba3afb725cab9a98d3cda96c9be7474cd9b8da7988118112e29884e798	-	ol10_aarch64_codeready_builder
	perf-6.12.0-124.21.1.el10_1.aarch64.rpm	3e6d361bd6b51b4c1a38862b79cb5b17a9a0823dfdff3916896e061a6d2e83c2	-	ol10_aarch64_appstream
	python3-perf-6.12.0-124.21.1.el10_1.aarch64.rpm	a3504ec6002f53683b75c4602d05ae20ecad7a12e744c73c2fd076372e388e73	-	ol10_aarch64_appstream
	rtla-6.12.0-124.21.1.el10_1.aarch64.rpm	ad6f481e1dd9804570864f0a2c14a9c4d777165eddcf2de922da4672788dc41b	-	ol10_aarch64_appstream
	rv-6.12.0-124.21.1.el10_1.aarch64.rpm	debf141d8ecf014d4d8a64e77ec09e827ba7e2215e5d0ce06f52f11a95fc89ac	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_x86_64_appstream
	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-124.21.1.el10_1.src.rpm	1a1d814eacaf24c56d4f92f396ff348428c3b08ba859aa67b1cf610cf6052566	-	ol10_x86_64_u1_baseos_patch
	kernel-6.12.0-124.21.1.el10_1.x86_64.rpm	c06c0955a9789f76c25a42673e79051ff0cdb2f2ade98dd817664955c0f490c7	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-124.21.1.el10_1.x86_64.rpm	c06c0955a9789f76c25a42673e79051ff0cdb2f2ade98dd817664955c0f490c7	-	ol10_x86_64_u1_baseos_patch
	kernel-abi-stablelists-6.12.0-124.21.1.el10_1.noarch.rpm	4fe88c67159198e79b8bff3efd955596efbd92000896b14ffb831f588c13b993	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-124.21.1.el10_1.noarch.rpm	4fe88c67159198e79b8bff3efd955596efbd92000896b14ffb831f588c13b993	-	ol10_x86_64_u1_baseos_patch
	kernel-core-6.12.0-124.21.1.el10_1.x86_64.rpm	f6b71e304d850de49da1ea24241660bb6da6e8f0b0f54d08a105624c2a05016b	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-124.21.1.el10_1.x86_64.rpm	f6b71e304d850de49da1ea24241660bb6da6e8f0b0f54d08a105624c2a05016b	-	ol10_x86_64_u1_baseos_patch
	kernel-cross-headers-6.12.0-124.21.1.el10_1.x86_64.rpm	3030971a878216a93cd7bb4365cdc8a3cb2acbe1ed326cb3466d256c07ee9615	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-124.21.1.el10_1.x86_64.rpm	06f177c895acfcd2e760120437a5d006e5854e25bcabac2620a3d834ccddbb74	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-124.21.1.el10_1.x86_64.rpm	06f177c895acfcd2e760120437a5d006e5854e25bcabac2620a3d834ccddbb74	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-core-6.12.0-124.21.1.el10_1.x86_64.rpm	66ceab2051a13a63c31cba7c8181e3f8c876ebbfed56fc870e6cb788e70a23e7	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-124.21.1.el10_1.x86_64.rpm	66ceab2051a13a63c31cba7c8181e3f8c876ebbfed56fc870e6cb788e70a23e7	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-devel-6.12.0-124.21.1.el10_1.x86_64.rpm	2ed55212c9bc97e93d034414c1ea0381064bbaff60229eb7946a7fb8599573c0	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-124.21.1.el10_1.x86_64.rpm	0e7823fcb9c62f748de24db5c5b7a19532cdfa62bb305cb438ec41e7b6df8bb9	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-124.21.1.el10_1.x86_64.rpm	95fd83448ba95c869adf1c827b5c68ebb3914b1d739a4bcc534459e708c651b2	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-124.21.1.el10_1.x86_64.rpm	95fd83448ba95c869adf1c827b5c68ebb3914b1d739a4bcc534459e708c651b2	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-core-6.12.0-124.21.1.el10_1.x86_64.rpm	70b3c01422aab96019e40bd20e27b07982f005f1d2585c1442f09389e85f2e90	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-124.21.1.el10_1.x86_64.rpm	70b3c01422aab96019e40bd20e27b07982f005f1d2585c1442f09389e85f2e90	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-modules-extra-6.12.0-124.21.1.el10_1.x86_64.rpm	a36aaf6cc36b7223808b5851e2a60f668106a6f7c99bfc746b452f8e2e70a651	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-124.21.1.el10_1.x86_64.rpm	a36aaf6cc36b7223808b5851e2a60f668106a6f7c99bfc746b452f8e2e70a651	-	ol10_x86_64_u1_baseos_patch
	kernel-debug-uki-virt-6.12.0-124.21.1.el10_1.x86_64.rpm	344a9654ac25add535a974788a31842d440197fa2482c28244338a2660c5663d	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-124.21.1.el10_1.x86_64.rpm	344a9654ac25add535a974788a31842d440197fa2482c28244338a2660c5663d	-	ol10_x86_64_u1_baseos_patch
	kernel-devel-6.12.0-124.21.1.el10_1.x86_64.rpm	2c0066c3e26c72b0cbb478a0ab6740a370d638bb7337185e557f101df7001be5	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-124.21.1.el10_1.x86_64.rpm	073d1554cd7e5d6d32c341107bd4b85352a87817c59f5574a55bc84df201bbbd	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-124.21.1.el10_1.noarch.rpm	fb5574d220ffe3cf48f6395c1714e4a46a63a5048e3ab5c4d6178f8f3e70ed10	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-124.21.1.el10_1.x86_64.rpm	15d69de8b75f7b1de510e187543383e637e3c1d8ba714b7c01493de912c44115	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-124.21.1.el10_1.x86_64.rpm	3336932fa98076881a2b2aaec3c411b8b60ba5c960554d38894f0451e8ab1b7c	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-124.21.1.el10_1.x86_64.rpm	3336932fa98076881a2b2aaec3c411b8b60ba5c960554d38894f0451e8ab1b7c	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-core-6.12.0-124.21.1.el10_1.x86_64.rpm	71d9c8aef20dd86651f0b295478aeab8946e719d8f5e259d5da2beb12f5c87a4	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-124.21.1.el10_1.x86_64.rpm	71d9c8aef20dd86651f0b295478aeab8946e719d8f5e259d5da2beb12f5c87a4	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-6.12.0-124.21.1.el10_1.x86_64.rpm	e8b1cd074e9fee41d6ca271496f46b96d969321278fc2c87a5292d51542f536f	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-124.21.1.el10_1.x86_64.rpm	e8b1cd074e9fee41d6ca271496f46b96d969321278fc2c87a5292d51542f536f	-	ol10_x86_64_u1_baseos_patch
	kernel-modules-extra-matched-6.12.0-124.21.1.el10_1.x86_64.rpm	24f8a2a93096d12fee9271ea5fe22e24ed0a2467e3f0d61b38a872a4379a3a62	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-matched-6.12.0-124.21.1.el10_1.x86_64.rpm	24f8a2a93096d12fee9271ea5fe22e24ed0a2467e3f0d61b38a872a4379a3a62	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-6.12.0-124.21.1.el10_1.x86_64.rpm	a2b47e63f21c79d3b63b039f97faf53a80d690b8405e31f6181d817b6aed1dbc	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-124.21.1.el10_1.x86_64.rpm	a2b47e63f21c79d3b63b039f97faf53a80d690b8405e31f6181d817b6aed1dbc	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-6.12.0-124.21.1.el10_1.x86_64.rpm	53a72aae0c7f19942580d70d69d6bd651fd15682084ef99d665dda98d9cbd474	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-124.21.1.el10_1.x86_64.rpm	53a72aae0c7f19942580d70d69d6bd651fd15682084ef99d665dda98d9cbd474	-	ol10_x86_64_u1_baseos_patch
	kernel-tools-libs-devel-6.12.0-124.21.1.el10_1.x86_64.rpm	69ca50833fe36b3133b1b37ab2e00e64db10df320908770ccf4c2553a4bebb52	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-124.21.1.el10_1.x86_64.rpm	ba3efc671fc38d179c85f157e127bfe987697d9155f30d27a213d081fd9d7c18	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-124.21.1.el10_1.x86_64.rpm	ba3efc671fc38d179c85f157e127bfe987697d9155f30d27a213d081fd9d7c18	-	ol10_x86_64_u1_baseos_patch
	kernel-uki-virt-addons-6.12.0-124.21.1.el10_1.x86_64.rpm	ca486eb761f4a0899c052947521c48ce9f00263479dc86fc1b1f20824e08a92c	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-124.21.1.el10_1.x86_64.rpm	ca486eb761f4a0899c052947521c48ce9f00263479dc86fc1b1f20824e08a92c	-	ol10_x86_64_u1_baseos_patch
	libperf-6.12.0-124.21.1.el10_1.x86_64.rpm	357f0b49278a6682ecec4f485ae8938ce8c544890102b9d684ff9a5a107b5dde	-	ol10_x86_64_codeready_builder
	perf-6.12.0-124.21.1.el10_1.x86_64.rpm	00d7435eabefecabd9c7335916658c7b8fee9d227717ee243e8db9e7ea307f29	-	ol10_x86_64_appstream
	python3-perf-6.12.0-124.21.1.el10_1.x86_64.rpm	53f74a998e8f672acd610d1c19b01639094cb84b958a9d77118b3cc2c9ecabda	-	ol10_x86_64_appstream
	rtla-6.12.0-124.21.1.el10_1.x86_64.rpm	cfb4198994aa4fb231423b9064ee0c2b09dc0fbaf1dd36139f5ede5da00bd808	-	ol10_x86_64_appstream
	rv-6.12.0-124.21.1.el10_1.x86_64.rpm	f6dd325791a872728ddd44b12ac7305a46f2e738fcf72fefece7eed57b1310e9	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team