ELSA-2025-12662

ELSA-2025-12662 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-08-08

Description

[6.12.0-55.25.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.25.1]
- Bump internal version to 55.25.1
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
- sch_hfsc: make hfsc_qlen_notify() idempotent
- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem - CVE-2025-38022
- RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
- nvme-tcp: sanitize request list handling - CVE-2025-38264
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
- tcp: adjust rcvq_space after updating scaling ratio
- ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
- ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
- usb: hub: Fix flushing of delayed work used for post resume purposes
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs
- net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
- net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
- padata: avoid UAF for reorder_work - CVE-2025-21726
- padata: fix UAF in padata_reorder - CVE-2025-21727
- padata: add pd get/put refcnt helper
- padata: fix sysfs store callback check
- padata: Clean up in padata_do_multithreaded()
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove -CVE-2025-22020

Related CVEs

CVE-2025-38264

CVE-2025-38086

CVE-2025-22113

CVE-2025-22020

CVE-2025-38052

CVE-2025-21727

CVE-2025-37890

CVE-2025-38087

CVE-2025-22085

CVE-2025-21928

CVE-2025-21929

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_aarch64_appstream
	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_aarch64_u0_baseos_patch
	kernel-cross-headers-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	60b7a09d6d3e1bc9264d06a5128f00a88bbd604507fd6c0dbfda8a5e255d4050	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	7b926ef652b6177565f7353f38e99ab0c04518e6716afded77b6537b818d9672	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	55e299b761b56f48fb61e9320d9e734f029a2c8db1476fec5a50f8556c256a11	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	55e299b761b56f48fb61e9320d9e734f029a2c8db1476fec5a50f8556c256a11	-	ol10_aarch64_u0_baseos_patch
	kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	ab08fbe6385d7aacaf3127efe0ac02dcedbfcd3f2de54e755808a3f2d96112af	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	ab08fbe6385d7aacaf3127efe0ac02dcedbfcd3f2de54e755808a3f2d96112af	-	ol10_aarch64_u0_baseos_patch
	kernel-tools-libs-devel-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	e5c71f5da6cc636570018b9e45cc53af758a66eb7045610d6b54d2361ba91d44	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	502c58ac99474ca82a6c0a7a9603906938f096e99b34db7a3ff77a9d69c6b6c9	-	ol10_aarch64_codeready_builder
	perf-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	af62cca2b8f433c716323e763d1b31578f164e981c635100293c7755a079d674	-	ol10_aarch64_appstream
	python3-perf-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	4fe00aac6983f5ccbaacb03e32359eee3ea8cc8a917c8d6194489ed6b51b4448	-	ol10_aarch64_appstream
	rtla-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	5a680ab8340796a3fc76d8d50411169c30adabafc6f6233553d323b7c7cef72a	-	ol10_aarch64_appstream
	rv-6.12.0-55.25.1.0.1.el10_0.aarch64.rpm	5b822c7aaf3656bc80aa7ad186f4c5f89161a6ef01c89c69b5bf07bbc1fae5c5	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_x86_64_appstream
	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-55.25.1.0.1.el10_0.src.rpm	079879e839766e75992ac05965cd40d1f84923df3d0db0c45cf2c7e7888e0b64	-	ol10_x86_64_u0_baseos_patch
	kernel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	1128fc8036cb44976c587753c33d5dfdf55c2a0aafad8f201b646a23375c7c42	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	1128fc8036cb44976c587753c33d5dfdf55c2a0aafad8f201b646a23375c7c42	-	ol10_x86_64_u0_baseos_patch
	kernel-abi-stablelists-6.12.0-55.25.1.0.1.el10_0.noarch.rpm	6248c2e9e05aa2cabe5c9fd3570bc64461fb0648536638d27ab920e5ebcd9f61	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-55.25.1.0.1.el10_0.noarch.rpm	6248c2e9e05aa2cabe5c9fd3570bc64461fb0648536638d27ab920e5ebcd9f61	-	ol10_x86_64_u0_baseos_patch
	kernel-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	6526bc635e2a815398077abd0918773c8e320c1b0c4841939e113d32d470f651	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	6526bc635e2a815398077abd0918773c8e320c1b0c4841939e113d32d470f651	-	ol10_x86_64_u0_baseos_patch
	kernel-cross-headers-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	74f61b40d28409c256ec1b0a8bbfc82cd9f3039a13918dbaf880d45dec58e313	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	75687b629e861036dc332af3af0e2fa869ece3d6c03b9131aee38614aa037bc3	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	75687b629e861036dc332af3af0e2fa869ece3d6c03b9131aee38614aa037bc3	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	627683e7f4f64dced1430f193f2a470b8962b15f922d3f1bbb9df7b27adcbad9	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	627683e7f4f64dced1430f193f2a470b8962b15f922d3f1bbb9df7b27adcbad9	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-devel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	98abed28583f636af99222523a8b04ca5e530d633fd1e73e136e3442a0ff781e	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	2db6ed6e7ce91c13f93d533be7081cdc78650a9d4475572b4d1f789efd820ceb	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	217deb56d79562f6db9434698f5930cbddc7be5287396add175ace7c3d26c88d	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	217deb56d79562f6db9434698f5930cbddc7be5287396add175ace7c3d26c88d	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	c6b933e016aef8a44ee95c7b3cebf68897414d98be83d2d9c512358d7444c82d	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	c6b933e016aef8a44ee95c7b3cebf68897414d98be83d2d9c512358d7444c82d	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	6d90bd3af9fe922415dd9cd5de76f9cf6ce9937ccefff235f39f9f1d660bdfdc	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	6d90bd3af9fe922415dd9cd5de76f9cf6ce9937ccefff235f39f9f1d660bdfdc	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	8df78a0cb915d2f560e14e14eaa94a704339df709c29906485ce69fb6b7c6714	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	8df78a0cb915d2f560e14e14eaa94a704339df709c29906485ce69fb6b7c6714	-	ol10_x86_64_u0_baseos_patch
	kernel-devel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	2546fe1ac202381400054b355ce0d214ffd7ffa21f722cbd52c8dd9b42c71384	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	ce1fe1ec39fa6c1e2bf4c00b4d5bdf1ed340bb7c88685c79e448c3114bd9d7ff	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-55.25.1.0.1.el10_0.noarch.rpm	d4dd0aab2239203674f29f3c682e38b079f001379ecf525947805449632399a5	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	7ca04900942e816dbfabf5f630bec03152676f06cc10bcb97c49220afebb7677	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	9875784a204420fb0efe1ac313b8dca938853a7ea01fbb6de1cf77105f37d4dc	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	9875784a204420fb0efe1ac313b8dca938853a7ea01fbb6de1cf77105f37d4dc	-	ol10_x86_64_u0_baseos_patch
	kernel-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	17b8b830664bc1b71433f156e061e51b4d70e3629dfe38d50ee5c5db531599b6	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	17b8b830664bc1b71433f156e061e51b4d70e3629dfe38d50ee5c5db531599b6	-	ol10_x86_64_u0_baseos_patch
	kernel-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	613555caa5554fae6a44869e058bb073703603620688ac2b725f41dcc3cc0016	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	613555caa5554fae6a44869e058bb073703603620688ac2b725f41dcc3cc0016	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	d08a2cadb4b671c68991bd521e883cfebe73be5493bb46267185b652b8d518d4	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	d08a2cadb4b671c68991bd521e883cfebe73be5493bb46267185b652b8d518d4	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	80ee03c012941ae49698db0916f7c3a9253299b738f3ed884153007e8ab0bb80	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	80ee03c012941ae49698db0916f7c3a9253299b738f3ed884153007e8ab0bb80	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-libs-devel-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	9ea183055f15a066eb6a1aeb7229939ddfcbcc1aa4c57e668a4277d847b6e99b	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	b7445b9a00c8295d2a8047ebc6ca7d01aa1978c16fb98257a4c0af6c30a5a228	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	b7445b9a00c8295d2a8047ebc6ca7d01aa1978c16fb98257a4c0af6c30a5a228	-	ol10_x86_64_u0_baseos_patch
	kernel-uki-virt-addons-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	c06dd172de85bf181faef90f645313633899c72007f4703a67e9a30252d615d4	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	c06dd172de85bf181faef90f645313633899c72007f4703a67e9a30252d615d4	-	ol10_x86_64_u0_baseos_patch
	libperf-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	7272dedd0b8f16a238b605553ab42d5bb5f41543f65a02991b73daf6c44eb912	-	ol10_x86_64_codeready_builder
	perf-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	6e3222cc758e6199e120bc35bd3c276f721eb09edf0d85a76374a8d91da4409c	-	ol10_x86_64_appstream
	python3-perf-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	f50629c3123aa00d867ac40ade5d9b975f7ee3acd8f1090ecae5cad25384c617	-	ol10_x86_64_appstream
	rtla-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	c596b5a44f164f8232dcce123e6bb5269ab2a0f8a5a159d70eeb081719236b87	-	ol10_x86_64_appstream
	rv-6.12.0-55.25.1.0.1.el10_0.x86_64.rpm	746ecce8dba1cecf5830d57c5cb206f6667975ae963258152338b494779d7883	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team