ELSA-2025-12662

ELSA-2025-12662 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-08-08

Description


[6.12.0-55.25.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.25.1]
- Bump internal version to 55.25.1
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
- sch_hfsc: make hfsc_qlen_notify() idempotent
- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem - CVE-2025-38022
- RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
- nvme-tcp: sanitize request list handling - CVE-2025-38264
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
- tcp: adjust rcvq_space after updating scaling ratio
- ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
- ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
- usb: hub: Fix flushing of delayed work used for post resume purposes
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs
- net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
- net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
- padata: avoid UAF for reorder_work - CVE-2025-21726
- padata: fix UAF in padata_reorder - CVE-2025-21727
- padata: add pd get/put refcnt helper
- padata: fix sysfs store callback check
- padata: Clean up in padata_do_multithreaded()
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove -CVE-2025-22020


Related CVEs


CVE-2025-38264
CVE-2025-38086
CVE-2025-22113
CVE-2025-22020
CVE-2025-38052
CVE-2025-21727
CVE-2025-37890
CVE-2025-38087
CVE-2025-22085
CVE-2025-21928
CVE-2025-21929

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_aarch64_appstream
kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_aarch64_baseos_latest
kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_aarch64_codeready_builder
kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_aarch64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm60b7a09d6d3e1bc9264d06a5128f00a88bbd604507fd6c0dbfda8a5e255d4050-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm7b926ef652b6177565f7353f38e99ab0c04518e6716afded77b6537b818d9672-ol10_aarch64_appstream
kernel-tools-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm55e299b761b56f48fb61e9320d9e734f029a2c8db1476fec5a50f8556c256a11-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm55e299b761b56f48fb61e9320d9e734f029a2c8db1476fec5a50f8556c256a11-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.aarch64.rpmab08fbe6385d7aacaf3127efe0ac02dcedbfcd3f2de54e755808a3f2d96112af-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.aarch64.rpmab08fbe6385d7aacaf3127efe0ac02dcedbfcd3f2de54e755808a3f2d96112af-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.25.1.0.1.el10_0.aarch64.rpme5c71f5da6cc636570018b9e45cc53af758a66eb7045610d6b54d2361ba91d44-ol10_aarch64_codeready_builder
libperf-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm502c58ac99474ca82a6c0a7a9603906938f096e99b34db7a3ff77a9d69c6b6c9-ol10_aarch64_codeready_builder
perf-6.12.0-55.25.1.0.1.el10_0.aarch64.rpmaf62cca2b8f433c716323e763d1b31578f164e981c635100293c7755a079d674-ol10_aarch64_appstream
python3-perf-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm4fe00aac6983f5ccbaacb03e32359eee3ea8cc8a917c8d6194489ed6b51b4448-ol10_aarch64_appstream
rtla-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm5a680ab8340796a3fc76d8d50411169c30adabafc6f6233553d323b7c7cef72a-ol10_aarch64_appstream
rv-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm5b822c7aaf3656bc80aa7ad186f4c5f89161a6ef01c89c69b5bf07bbc1fae5c5-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_x86_64_appstream
kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_x86_64_baseos_latest
kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_x86_64_codeready_builder
kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64-ol10_x86_64_u0_baseos_patch
kernel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm1128fc8036cb44976c587753c33d5dfdf55c2a0aafad8f201b646a23375c7c42-ol10_x86_64_baseos_latest
kernel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm1128fc8036cb44976c587753c33d5dfdf55c2a0aafad8f201b646a23375c7c42-ol10_x86_64_u0_baseos_patch
kernel-abi-stablelists-6.12.0-55.25.1.0.1.el10_0.noarch.rpm6248c2e9e05aa2cabe5c9fd3570bc64461fb0648536638d27ab920e5ebcd9f61-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-55.25.1.0.1.el10_0.noarch.rpm6248c2e9e05aa2cabe5c9fd3570bc64461fb0648536638d27ab920e5ebcd9f61-ol10_x86_64_u0_baseos_patch
kernel-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm6526bc635e2a815398077abd0918773c8e320c1b0c4841939e113d32d470f651-ol10_x86_64_baseos_latest
kernel-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm6526bc635e2a815398077abd0918773c8e320c1b0c4841939e113d32d470f651-ol10_x86_64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm74f61b40d28409c256ec1b0a8bbfc82cd9f3039a13918dbaf880d45dec58e313-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm75687b629e861036dc332af3af0e2fa869ece3d6c03b9131aee38614aa037bc3-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm75687b629e861036dc332af3af0e2fa869ece3d6c03b9131aee38614aa037bc3-ol10_x86_64_u0_baseos_patch
kernel-debug-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm627683e7f4f64dced1430f193f2a470b8962b15f922d3f1bbb9df7b27adcbad9-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm627683e7f4f64dced1430f193f2a470b8962b15f922d3f1bbb9df7b27adcbad9-ol10_x86_64_u0_baseos_patch
kernel-debug-devel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm98abed28583f636af99222523a8b04ca5e530d633fd1e73e136e3442a0ff781e-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm2db6ed6e7ce91c13f93d533be7081cdc78650a9d4475572b4d1f789efd820ceb-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm217deb56d79562f6db9434698f5930cbddc7be5287396add175ace7c3d26c88d-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm217deb56d79562f6db9434698f5930cbddc7be5287396add175ace7c3d26c88d-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmc6b933e016aef8a44ee95c7b3cebf68897414d98be83d2d9c512358d7444c82d-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmc6b933e016aef8a44ee95c7b3cebf68897414d98be83d2d9c512358d7444c82d-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm6d90bd3af9fe922415dd9cd5de76f9cf6ce9937ccefff235f39f9f1d660bdfdc-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm6d90bd3af9fe922415dd9cd5de76f9cf6ce9937ccefff235f39f9f1d660bdfdc-ol10_x86_64_u0_baseos_patch
kernel-debug-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm8df78a0cb915d2f560e14e14eaa94a704339df709c29906485ce69fb6b7c6714-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm8df78a0cb915d2f560e14e14eaa94a704339df709c29906485ce69fb6b7c6714-ol10_x86_64_u0_baseos_patch
kernel-devel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm2546fe1ac202381400054b355ce0d214ffd7ffa21f722cbd52c8dd9b42c71384-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmce1fe1ec39fa6c1e2bf4c00b4d5bdf1ed340bb7c88685c79e448c3114bd9d7ff-ol10_x86_64_appstream
kernel-doc-6.12.0-55.25.1.0.1.el10_0.noarch.rpmd4dd0aab2239203674f29f3c682e38b079f001379ecf525947805449632399a5-ol10_x86_64_appstream
kernel-headers-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm7ca04900942e816dbfabf5f630bec03152676f06cc10bcb97c49220afebb7677-ol10_x86_64_appstream
kernel-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm9875784a204420fb0efe1ac313b8dca938853a7ea01fbb6de1cf77105f37d4dc-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm9875784a204420fb0efe1ac313b8dca938853a7ea01fbb6de1cf77105f37d4dc-ol10_x86_64_u0_baseos_patch
kernel-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm17b8b830664bc1b71433f156e061e51b4d70e3629dfe38d50ee5c5db531599b6-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm17b8b830664bc1b71433f156e061e51b4d70e3629dfe38d50ee5c5db531599b6-ol10_x86_64_u0_baseos_patch
kernel-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm613555caa5554fae6a44869e058bb073703603620688ac2b725f41dcc3cc0016-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm613555caa5554fae6a44869e058bb073703603620688ac2b725f41dcc3cc0016-ol10_x86_64_u0_baseos_patch
kernel-tools-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmd08a2cadb4b671c68991bd521e883cfebe73be5493bb46267185b652b8d518d4-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmd08a2cadb4b671c68991bd521e883cfebe73be5493bb46267185b652b8d518d4-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm80ee03c012941ae49698db0916f7c3a9253299b738f3ed884153007e8ab0bb80-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm80ee03c012941ae49698db0916f7c3a9253299b738f3ed884153007e8ab0bb80-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm9ea183055f15a066eb6a1aeb7229939ddfcbcc1aa4c57e668a4277d847b6e99b-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmb7445b9a00c8295d2a8047ebc6ca7d01aa1978c16fb98257a4c0af6c30a5a228-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmb7445b9a00c8295d2a8047ebc6ca7d01aa1978c16fb98257a4c0af6c30a5a228-ol10_x86_64_u0_baseos_patch
kernel-uki-virt-addons-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmc06dd172de85bf181faef90f645313633899c72007f4703a67e9a30252d615d4-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmc06dd172de85bf181faef90f645313633899c72007f4703a67e9a30252d615d4-ol10_x86_64_u0_baseos_patch
libperf-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm7272dedd0b8f16a238b605553ab42d5bb5f41543f65a02991b73daf6c44eb912-ol10_x86_64_codeready_builder
perf-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm6e3222cc758e6199e120bc35bd3c276f721eb09edf0d85a76374a8d91da4409c-ol10_x86_64_appstream
python3-perf-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmf50629c3123aa00d867ac40ade5d9b975f7ee3acd8f1090ecae5cad25384c617-ol10_x86_64_appstream
rtla-6.12.0-55.25.1.0.1.el10_0.x86_64.rpmc596b5a44f164f8232dcce123e6bb5269ab2a0f8a5a159d70eeb081719236b87-ol10_x86_64_appstream
rv-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm746ecce8dba1cecf5830d57c5cb206f6667975ae963258152338b494779d7883-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete