Stay Connected:

ELSA-2025-14009

ELSA-2025-14009 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-08-21

Description


[6.12.0-55.28.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.28.1]
- Conflict with xdp-tools < 1.5.4
- Bump internal version to 55.28.1
- tls: always refresh the queue when reading sock - CVE-2025-38471
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps
- selftests: net: fix error message in bpf_offload
- selftests: net: add more info to error in bpf_offload
- net: fix udp gso skb_segment after pull from frag_list - CVE-2025-38124
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
- s390/pci: Serialize device addition and removal
- s390/pci: Allow re-add of a reserved but not yet removed device
- s390/pci: Prevent self deletion in disable_slot()
- s390/pci: Remove redundant bus removal and disable from zpci_release_device()
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
- s390/pci: Fix missing check for zpci_create_device() error return
- s390/pci: Fix potential double remove of hotplug slot
- s390/topology: Improve topology detection
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() - CVE-2025-38250
- selftests/bpf: Adjust data size to have ETH_HLEN - CVE-2025-21867
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() - CVE-2025-21867
- i2c/designware: Fix an initialization issue - CVE-2025-38380


Related CVEs


CVE-2025-38124
CVE-2025-21867
CVE-2025-38250
CVE-2025-38380
CVE-2025-38471

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_aarch64_appstream
kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_aarch64_baseos_latest
kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_aarch64_codeready_builder
kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_aarch64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.28.1.0.1.el10_0.aarch64.rpmf7468d3ad50322138ecdfa5559019d667faa1f2983d6f2aceaab87fe501326b1-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-55.28.1.0.1.el10_0.aarch64.rpm9a6d2cb11dddffaad6fd8c406921f82134faabeb7bab5d9556b33f0bfe0c52cd-ol10_aarch64_appstream
kernel-tools-6.12.0-55.28.1.0.1.el10_0.aarch64.rpme9a8b996e3b86fb05850a38314f0b7c31ffcc0938a9806f4011c242e7b0d0819-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-55.28.1.0.1.el10_0.aarch64.rpme9a8b996e3b86fb05850a38314f0b7c31ffcc0938a9806f4011c242e7b0d0819-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.28.1.0.1.el10_0.aarch64.rpmb9c170a29d1469b2b46a0a7bd45ef7eac70eb7c0241cdc61649f139aac8cf871-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-55.28.1.0.1.el10_0.aarch64.rpmb9c170a29d1469b2b46a0a7bd45ef7eac70eb7c0241cdc61649f139aac8cf871-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.28.1.0.1.el10_0.aarch64.rpm01f7a82e30b46912bf54e5a0cf4b3f8325c139c5f79b99e3bcb73dfad8e819b7-ol10_aarch64_codeready_builder
libperf-6.12.0-55.28.1.0.1.el10_0.aarch64.rpme2358b2a29f706bb7be4e413f70cafa17145e65826df2f49b485d75d325c0171-ol10_aarch64_codeready_builder
perf-6.12.0-55.28.1.0.1.el10_0.aarch64.rpmc676862e2db36353267f346b6520aea853fd49a3c6c6e8b0af5a2c2eba59fed5-ol10_aarch64_appstream
python3-perf-6.12.0-55.28.1.0.1.el10_0.aarch64.rpmd1136006004a3372fe311e25c81d5737e34048eba411658a4689abb455d0efb0-ol10_aarch64_appstream
rtla-6.12.0-55.28.1.0.1.el10_0.aarch64.rpm3074bbde44063cd6342d6a672a49715692e11bdb570b8442f75148e1b3552603-ol10_aarch64_appstream
rv-6.12.0-55.28.1.0.1.el10_0.aarch64.rpm03cd1ef90c3a6b3c490875f5f7d83b4655cc9ce03f4b941cb1596663402251ee-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_x86_64_appstream
kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_x86_64_baseos_latest
kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_x86_64_codeready_builder
kernel-6.12.0-55.28.1.0.1.el10_0.src.rpm0284e9d2e15bfea16aed1d45162984a5af6c20bf1dbabbef272b6c90748fdedf-ol10_x86_64_u0_baseos_patch
kernel-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmdd8ef21e0506259bfb3a02aa378ac69b53705554989f9a23a8b06014c726baa1-ol10_x86_64_baseos_latest
kernel-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmdd8ef21e0506259bfb3a02aa378ac69b53705554989f9a23a8b06014c726baa1-ol10_x86_64_u0_baseos_patch
kernel-abi-stablelists-6.12.0-55.28.1.0.1.el10_0.noarch.rpm123d730f1104c65a3b5a0803aa415fc2588d80e944ecbb3c30d9d2cf8883661e-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-55.28.1.0.1.el10_0.noarch.rpm123d730f1104c65a3b5a0803aa415fc2588d80e944ecbb3c30d9d2cf8883661e-ol10_x86_64_u0_baseos_patch
kernel-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm85630a9a2d8d06e12297e4a816ce6436973f25dec4058611cd0173bd40025738-ol10_x86_64_baseos_latest
kernel-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm85630a9a2d8d06e12297e4a816ce6436973f25dec4058611cd0173bd40025738-ol10_x86_64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm7662d3d3e314e79fb24d6934c4c4f9ad2bbca2bf2070d840231c37378c541ed6-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmed16c629a918165793c670568f48126b25a83453ee899762d91974409b9120ce-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmed16c629a918165793c670568f48126b25a83453ee899762d91974409b9120ce-ol10_x86_64_u0_baseos_patch
kernel-debug-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmedca0c5c7e369454d8c7aa0e357cafe4a33bc7d2b9b257c5b3c5d621d7025dfd-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmedca0c5c7e369454d8c7aa0e357cafe4a33bc7d2b9b257c5b3c5d621d7025dfd-ol10_x86_64_u0_baseos_patch
kernel-debug-devel-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4a3c88d1808fbf6347662dd52f3529dbf70e924cd208a8762c1b73528666c9d6-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmb984956689fece6eb72ae9adecc0a603bcea0d828c70c78f92d6aaed1f68ce59-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm27531f489104683c87422bade1d31ccfa0987bd8a1500e6bd177df107e274cc6-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm27531f489104683c87422bade1d31ccfa0987bd8a1500e6bd177df107e274cc6-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4163cc95449aa813cbaeb4b2198193dfdc4b47a0a6b5b96d90869ca85bd6319d-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4163cc95449aa813cbaeb4b2198193dfdc4b47a0a6b5b96d90869ca85bd6319d-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-extra-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4e26a054ba1780866d6095d014efff502a944f85d57731cf23e15e1ad3cedb41-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4e26a054ba1780866d6095d014efff502a944f85d57731cf23e15e1ad3cedb41-ol10_x86_64_u0_baseos_patch
kernel-debug-uki-virt-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4983f0ec5f7c937e836c7e0aff0cb167d8b40b30cf8bdcd89498842ffc6541b2-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4983f0ec5f7c937e836c7e0aff0cb167d8b40b30cf8bdcd89498842ffc6541b2-ol10_x86_64_u0_baseos_patch
kernel-devel-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm6f7526b8adb8d6db4af88eba4f63a59cc2bf947011b9c627bf20eda4e6d0b8fb-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm262c9cf99bb84d5c2334cc66d32fd9df8776cb31542bda2f4c5b9c0fe62bba81-ol10_x86_64_appstream
kernel-doc-6.12.0-55.28.1.0.1.el10_0.noarch.rpm03e64262931ead301708c74193a765cc2fe0214ecd941b8ee5f0acdf6bc95373-ol10_x86_64_appstream
kernel-headers-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm4d2cbb01cf41e50ccec27b14d49f81a85cb4057a636523cd06751182cbefa78b-ol10_x86_64_appstream
kernel-modules-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm3a7a2547a4f5018e7ac1a5f5a1b6155269e4afc7920761b832f0af01aedee044-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm3a7a2547a4f5018e7ac1a5f5a1b6155269e4afc7920761b832f0af01aedee044-ol10_x86_64_u0_baseos_patch
kernel-modules-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm6d527f5cf83585bb46318798d6cadf95b019a86bcdec0f47e29028fe763b3ac7-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm6d527f5cf83585bb46318798d6cadf95b019a86bcdec0f47e29028fe763b3ac7-ol10_x86_64_u0_baseos_patch
kernel-modules-extra-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmf53cf4c12aecc7936e47b67c87eb20caf0ba1caf8a6500ad5ff50ad94459aaab-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmf53cf4c12aecc7936e47b67c87eb20caf0ba1caf8a6500ad5ff50ad94459aaab-ol10_x86_64_u0_baseos_patch
kernel-tools-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmb276e90e44dcad4ea30abd03c0241af33289c658348c822c19f7ed07ee4bb744-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmb276e90e44dcad4ea30abd03c0241af33289c658348c822c19f7ed07ee4bb744-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.28.1.0.1.el10_0.x86_64.rpme17baf73bc35b96f9c7cebe73c4fb31c6b11ead5be56b6504eebb878c8697c82-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-55.28.1.0.1.el10_0.x86_64.rpme17baf73bc35b96f9c7cebe73c4fb31c6b11ead5be56b6504eebb878c8697c82-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm0365f8db5cfbc2445737ea19f1ba1b1e4594fba51c151e608e96f4d88057f3ce-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm9a917e5fc61e08b2cb3b56d3c4cec6493efe191ec1bd7919284d17d68b60708a-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm9a917e5fc61e08b2cb3b56d3c4cec6493efe191ec1bd7919284d17d68b60708a-ol10_x86_64_u0_baseos_patch
kernel-uki-virt-addons-6.12.0-55.28.1.0.1.el10_0.x86_64.rpme72133f0fcf1e47d05630ace9dc8c01ccda3a4e58a1e2520fe3baa4625413950-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-55.28.1.0.1.el10_0.x86_64.rpme72133f0fcf1e47d05630ace9dc8c01ccda3a4e58a1e2520fe3baa4625413950-ol10_x86_64_u0_baseos_patch
libperf-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmf5fdd312d2de10cc35c3f6f52e645eeeb9dbfe106ef5a9959f64a9dc85e60abc-ol10_x86_64_codeready_builder
perf-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm843db893414c9fd1f767099123ff4f9ca16245d6640de24618da77ba63bde4fc-ol10_x86_64_appstream
python3-perf-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmc51fd1d02d3cca9e004777af7fc5ea1c0e232f674bb24b4050e425e4214e69a0-ol10_x86_64_appstream
rtla-6.12.0-55.28.1.0.1.el10_0.x86_64.rpm3ea77ebd010d657718ce596accc525b138f76a093a029b479a44ef49f172cf71-ol10_x86_64_appstream
rv-6.12.0-55.28.1.0.1.el10_0.x86_64.rpmbf7f7e4dd4f7250c06d01f7c9103010018a47f91d0b4bfcd320c7f7f9785ab86-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights