ELSA-2025-13598

ELSA-2025-13598 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-08-15

Description

[6.12.0-55.27.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

* Thu Aug 14 2025 Alex Burmashev [6.12.0-55.27.1]
- Bump internal version to 55.27.1
- Fix includes for mm: fix copy_vma() error handling for hugetlb mappings
- Revert sch_htb: make htb_qlen_notify() idempotent
- Revert sch_drr: make drr_qlen_notify() idempotent
- Revert sch_qfq: make qfq_qlen_notify() idempotent
- Revert codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
- Revert sch_htb: make htb_deactivate() idempotent
- Revert net/sched: Always pass notifications when child class becomes empty
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159
- Documentation: Fix pci=config_acs= example
- PCI/ACS: Fix 'pci=config_acs=' parameter
- Revert 'smb: client: fix TCP timers deadlock after rmmod' - CVE-2025-22077
- Revert smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- wifi: ath12k: fix invalid access to memory - CVE-2025-38292
- x86/CPU/AMD: Terminate the erratum_1386_microcode array - CVE-2024-56721
- crypto: algif_hash - fix double free in hash_accept - CVE-2025-38079
- net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
- sch_htb: make htb_deactivate() idempotent - CVE-2025-38350
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-38350
- sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
- sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
- sch_htb: make htb_qlen_notify() idempotent - CVE-2025-38350
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race - CVE-2025-38085
- mm/hugetlb: unshare page tables during VMA split, not before - CVE-2025-38084
- tools/testing/vma: add missing function stub
- mm: fix copy_vma() error handling for hugetlb mappings
- PCI: Use downstream bridges for distributing resources
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering - CVE-2025-38137
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW

Related CVEs

CVE-2025-38292

CVE-2025-38079

CVE-2025-38085

CVE-2025-38137

CVE-2024-56721

CVE-2025-38159

CVE-2025-38084

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_aarch64_appstream
	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_aarch64_u0_baseos_patch
	kernel-cross-headers-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	1628001c3bcf9f621c7b566f55c1476ea916198421ea09715f06543203d70e18	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	c2308a7794b7b7fce6c149a0b32b737dc799d795730d40b1b45f3a7256f67377	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	a276f7410f2ddb88f6437ea46e0eeb87c580081bee7cc7871b354f215138171c	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	a276f7410f2ddb88f6437ea46e0eeb87c580081bee7cc7871b354f215138171c	-	ol10_aarch64_u0_baseos_patch
	kernel-tools-libs-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	ad33de7a66187f34ef542878b7b37ed842ca2de7a70f75147b0762a9a53c3c1f	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	ad33de7a66187f34ef542878b7b37ed842ca2de7a70f75147b0762a9a53c3c1f	-	ol10_aarch64_u0_baseos_patch
	kernel-tools-libs-devel-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	8bdc59ff1393f7cf2a1e5e2d3697c6a983efe3afd0f09f7354bca335508ad51d	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	6caf4930ff3d0aed57b5475a0c3e880e998d185dd9f683b49754417195127ad5	-	ol10_aarch64_codeready_builder
	perf-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	b8e5d6c1a36848ccaa2893d77942687a5e0d83fcd7e9214bbac8f7e3341a41ff	-	ol10_aarch64_appstream
	python3-perf-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	04b3ed015f1467b9db9a36e03d346a9392d7933454f437b815e88f083dabb0d4	-	ol10_aarch64_appstream
	rtla-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	124042a5b023e7855c891d610cf2355487532b98726729ed00a4fbebb8ce6b61	-	ol10_aarch64_appstream
	rv-6.12.0-55.27.1.0.1.el10_0.aarch64.rpm	18dd06954aa6590d57a262601eb994880128e18a68fd80f8e9ef6ae6bedbfcae	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_x86_64_appstream
	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-55.27.1.0.1.el10_0.src.rpm	41be7b92d6447f1f599a668b5592f49a59fe59a63c821ee008e7fa6c762fab67	-	ol10_x86_64_u0_baseos_patch
	kernel-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	4fe30ff8bbbe4af5290c36939218d2c2338f83fca406ea60bd6342083391c8a9	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	4fe30ff8bbbe4af5290c36939218d2c2338f83fca406ea60bd6342083391c8a9	-	ol10_x86_64_u0_baseos_patch
	kernel-abi-stablelists-6.12.0-55.27.1.0.1.el10_0.noarch.rpm	75b10c6f8490908ed998a56c772428299696f4883ea65a98c33fbe8803e430e8	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-55.27.1.0.1.el10_0.noarch.rpm	75b10c6f8490908ed998a56c772428299696f4883ea65a98c33fbe8803e430e8	-	ol10_x86_64_u0_baseos_patch
	kernel-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	b5ac201eceb0e25f17a5db8ff1db9149d986849b0e41f051e618a0589244de8f	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	b5ac201eceb0e25f17a5db8ff1db9149d986849b0e41f051e618a0589244de8f	-	ol10_x86_64_u0_baseos_patch
	kernel-cross-headers-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	b58c5a97aef216223c9a633ddce28c7c951a0630a85a52523ba6c7c215c1483d	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	feccb99ae75d0de16a93dc6b33529d929699d3c3d5e7b9b4a74ad23d099c2794	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	feccb99ae75d0de16a93dc6b33529d929699d3c3d5e7b9b4a74ad23d099c2794	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	231e02a11aceb11e142428af25038f93b2c634888b87be4536e43af58658b3de	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	231e02a11aceb11e142428af25038f93b2c634888b87be4536e43af58658b3de	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-devel-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	7bbf8bffd3e5c1910d16e09e600133acafb78aabaf947e666a38b1990c374aac	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	9de2b9030cb14d47006a875c41ec29eae7b43878dc261f9361233dbaff32d4fb	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	a3069a117217f0d1e981952182178d7902e90437a6249ad63f84d8fdeaeac367	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	a3069a117217f0d1e981952182178d7902e90437a6249ad63f84d8fdeaeac367	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-modules-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	0fa0c50845b8bc9d237a873d9790eb815d90f82f0fd25ee3e4009eba80ef2b90	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	0fa0c50845b8bc9d237a873d9790eb815d90f82f0fd25ee3e4009eba80ef2b90	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-modules-extra-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	7a095733a97934375e66b060f78ddcbeef1d30d1a0da9517cd21d7c60371a100	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	7a095733a97934375e66b060f78ddcbeef1d30d1a0da9517cd21d7c60371a100	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-uki-virt-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	a9db14b47081265d701e61826d14378ea171bc0c5415b46c25acabccb788bca8	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	a9db14b47081265d701e61826d14378ea171bc0c5415b46c25acabccb788bca8	-	ol10_x86_64_u0_baseos_patch
	kernel-devel-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	d267f867822fe84011f981a7cb7ce582653ca6e219c6bb88cf13dad823c19f90	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	0d147f55df3296c9326654f2f4f191e800381d1ddd29f31db5cac199e824d88b	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-55.27.1.0.1.el10_0.noarch.rpm	24733afe7c4e49a7a30ce17ae0507d78954e080576a84ac623c5f6757cfd4aeb	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	aae5d4edc317bb08564d7394cc22713a2da1fcacf5497806fc78253f6deb5c3a	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	eab5143efa3f0f32eaff3775e6db30c70232b8b763933f2ae1d796988a1993c4	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	eab5143efa3f0f32eaff3775e6db30c70232b8b763933f2ae1d796988a1993c4	-	ol10_x86_64_u0_baseos_patch
	kernel-modules-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	e4b9d717a1636f153817e8b7108246505e531bcaf80887343f3368bd4946227b	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	e4b9d717a1636f153817e8b7108246505e531bcaf80887343f3368bd4946227b	-	ol10_x86_64_u0_baseos_patch
	kernel-modules-extra-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	2c8a928fde094ab98d73ddb844502206d646d011d2a455d0f11488ea7a34590b	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	2c8a928fde094ab98d73ddb844502206d646d011d2a455d0f11488ea7a34590b	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	8b15c30dd8d8026867e2e3b9d05f1db157d19a5bb0a396a662d1ec55140f8719	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	8b15c30dd8d8026867e2e3b9d05f1db157d19a5bb0a396a662d1ec55140f8719	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-libs-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	dc760ba829aba6cfb06f43b62a6a887d39d28f4c268f30698b19f9a468180b05	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	dc760ba829aba6cfb06f43b62a6a887d39d28f4c268f30698b19f9a468180b05	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-libs-devel-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	8251d5b45cccf3e40e5c90d1fb929746217ff400408bf5efc97b704225664bc3	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	e7efa4c05e2bdad638334d9fc6fd6ad5c45a583c46cb562121574a3eb28d8a3a	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	e7efa4c05e2bdad638334d9fc6fd6ad5c45a583c46cb562121574a3eb28d8a3a	-	ol10_x86_64_u0_baseos_patch
	kernel-uki-virt-addons-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	d6f70924504cb741bbdfc13062c445e5dca4602988b8ec427d5a07a9f7aacd07	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	d6f70924504cb741bbdfc13062c445e5dca4602988b8ec427d5a07a9f7aacd07	-	ol10_x86_64_u0_baseos_patch
	libperf-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	b15c1085dd8d89363bd4265dd540df017d95419a854031de532442a44dd75628	-	ol10_x86_64_codeready_builder
	perf-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	e43211b6dcfabea4a48b9fe23747af127ef341704cab8d85a661256805c1359c	-	ol10_x86_64_appstream
	python3-perf-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	16ae0d362b43dbe7e37d18452c7aa2c96723fb4c42f5df06d6946ac9c7d4bac7	-	ol10_x86_64_appstream
	rtla-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	1410c272d2264be13c7c6e1cbbf323e2a6d886ab6996b9e6c4ed26516583cf1b	-	ol10_x86_64_appstream
	rv-6.12.0-55.27.1.0.1.el10_0.x86_64.rpm	8c7841b0315761819679642636007517377b6d161ad4940ffe0282b4f1019ada	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team