Stay Connected:

ELSA-2025-15447

ELSA-2025-15447 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-09-11

Description


[6.12.0-55.31.1.0.1.el10_0.OL10]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

* [6.12.0-55.31.1.el10_0]
- Adjust sched/fair: Adhere to place_entity() constraints
- Bump internal version to 55.31.1
- sched/fair: Adhere to place_entity() constraints
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag
- sched/fair: optimize the PLACE_LAG when se->vlag is zero
- net/sched: ets: use old 'nbands' while purging unused classes - CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
- net_sched: ets: fix a race in ets_qdisc_change() - CVE-2025-38107
- sch_htb: make htb_deactivate() idempotent - CVE-2025-37953
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-37798
- sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
- sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
- sch_htb: make htb_qlen_notify() idempotent - CVE-2025-37932
- drm/vkms: Fix use after free and double free on init error - CVE-2025-22097
- Revert cxl/acpi: Fix load failures due to single window creation failure
- udmabuf: fix a buf size overflow issue during udmabuf creation - CVE-2025-37803
- drm/framebuffer: Acquire internal references on GEM handles - CVE-2025-38449
- drm/gem: Acquire references on GEM handles for framebuffers - CVE-2025-38449
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
- nvme-ioctl: fix leaked requests on mapping error


Related CVEs


CVE-2025-37803
CVE-2025-22097
CVE-2025-38350
CVE-2025-38449

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_aarch64_appstream
kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_aarch64_baseos_latest
kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_aarch64_codeready_builder
kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_aarch64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm243361b55fca5d128eb7af9dd723ead95b6776bdcfbac49819a031494d2feec9-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm4ccc423246d48c6d802483c6f77d5217bfefd37395638d716425a6ef54a90dba-ol10_aarch64_appstream
kernel-tools-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm9a2335801ed232432dd9c775b393e490b6951aa80214d337c4688951b319ae27-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm9a2335801ed232432dd9c775b393e490b6951aa80214d337c4688951b319ae27-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm53073829c28d69557231e3224d731e988c33547493fa8f5d2999cb5fe5e223c9-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm53073829c28d69557231e3224d731e988c33547493fa8f5d2999cb5fe5e223c9-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm30ac100a014be020e43bdd8abf30d8b10318ebbb7c4c9f9603cabc0e6877148e-ol10_aarch64_codeready_builder
libperf-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm01ad0f7b93dc78690ee26f86ad8f2746c95cc3cd5a68fb7f2f7fd5212a399b7b-ol10_aarch64_codeready_builder
perf-6.12.0-55.31.1.0.1.el10_0.aarch64.rpmf82cd6f146728a2fe75efea97eb74a14418f289d8de90b06f442bfcdaca5a8db-ol10_aarch64_appstream
python3-perf-6.12.0-55.31.1.0.1.el10_0.aarch64.rpm6147cdf5ccc5b776498a6f19d65fdaf19e4776fe28867054134b9d9e8af1e713-ol10_aarch64_appstream
rtla-6.12.0-55.31.1.0.1.el10_0.aarch64.rpmf5a4545903c7df566072630212109c376e29b3a64c31351ea47fef7c75fb9866-ol10_aarch64_appstream
rv-6.12.0-55.31.1.0.1.el10_0.aarch64.rpmd61d1f592b97c39ee79d8afd7f64c980663056c9b8b0968a59872d9a6edd292a-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_x86_64_appstream
kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_x86_64_baseos_latest
kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_x86_64_codeready_builder
kernel-6.12.0-55.31.1.0.1.el10_0.src.rpm9cb4eb09c6da6d923d8c814fd15459cf2f0fd60575e7fad8fdcdb9380feb8a55-ol10_x86_64_u0_baseos_patch
kernel-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm1e80653c6b75e995a1fabe1706ffd5eef789f70c755ed56a8dcae93ab2a25955-ol10_x86_64_baseos_latest
kernel-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm1e80653c6b75e995a1fabe1706ffd5eef789f70c755ed56a8dcae93ab2a25955-ol10_x86_64_u0_baseos_patch
kernel-abi-stablelists-6.12.0-55.31.1.0.1.el10_0.noarch.rpma306b300376bcc6432bd468f11ff00430a630ca8f1aa831bd1b60c7f7fb93a01-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-55.31.1.0.1.el10_0.noarch.rpma306b300376bcc6432bd468f11ff00430a630ca8f1aa831bd1b60c7f7fb93a01-ol10_x86_64_u0_baseos_patch
kernel-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmacc2d106633726780edf832fc5b541f20ef8f06f1b3e8b141e3bf8f4a54c8102-ol10_x86_64_baseos_latest
kernel-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmacc2d106633726780edf832fc5b541f20ef8f06f1b3e8b141e3bf8f4a54c8102-ol10_x86_64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm78f9a4f7a366ea0ce5c1694e2d843657455d27714ddcc20f8c79d893f13c4b8a-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm9ae575c7a469674781fd7b11a059f96b62818754e110761abab976a22717c1f4-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm9ae575c7a469674781fd7b11a059f96b62818754e110761abab976a22717c1f4-ol10_x86_64_u0_baseos_patch
kernel-debug-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmc2f0029d8fd56d273e40e60cd555c6aa33b07092e8aeaba6a99bd002ceebfc20-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmc2f0029d8fd56d273e40e60cd555c6aa33b07092e8aeaba6a99bd002ceebfc20-ol10_x86_64_u0_baseos_patch
kernel-debug-devel-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm51b9e8295eac6470f668dd083e8f6199fd99fa6e8bab0272b2bb8b055f1146ac-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm68b2339efba70aa235d9de6d14513e713f0dfaba94e847e404bd35f294ee2abf-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm70a6f751e95a170835db7da5a8f03aaa8304ac160221f78a52aeb1549ffb6039-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm70a6f751e95a170835db7da5a8f03aaa8304ac160221f78a52aeb1549ffb6039-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmb1e29ad3e851edb922b72a3eafec08ece02ae0c37adc2e2e1e67edb845614459-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmb1e29ad3e851edb922b72a3eafec08ece02ae0c37adc2e2e1e67edb845614459-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-extra-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmc7dc9920297f2cc31bcf1b7cd460d042be3700fdfdf24d2e85af18877345c5c7-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmc7dc9920297f2cc31bcf1b7cd460d042be3700fdfdf24d2e85af18877345c5c7-ol10_x86_64_u0_baseos_patch
kernel-debug-uki-virt-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm383469a91e3d79a8b262ffebaf8ac20c0a23e1393aa487935711bce6f3a397d0-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm383469a91e3d79a8b262ffebaf8ac20c0a23e1393aa487935711bce6f3a397d0-ol10_x86_64_u0_baseos_patch
kernel-devel-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmf347f9c9677554e416a3a6be508dd3da7e45a7cf7dce33db570abe5a9dd3ae96-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-55.31.1.0.1.el10_0.x86_64.rpma92f13d62bef6f6d0a83f118706fb45a0d2d648f5031d8f12bb1a16ef148e529-ol10_x86_64_appstream
kernel-doc-6.12.0-55.31.1.0.1.el10_0.noarch.rpmc57e1ad15cf0b3528a6e6a99d6422aa000c990d51bf48b51b98af704e9ed56ed-ol10_x86_64_appstream
kernel-headers-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm236afd17b038c7b44b52638b286475cba5a83e773e850e9e52e020dd8937764a-ol10_x86_64_appstream
kernel-modules-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm8f0981a4a6561bb76575d98405b3b8a8b384d51ebd7e9e95c8ce2b77fbdbaba4-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm8f0981a4a6561bb76575d98405b3b8a8b384d51ebd7e9e95c8ce2b77fbdbaba4-ol10_x86_64_u0_baseos_patch
kernel-modules-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm5360b2193d2a13dcec9d9cd02755485a816d1784ee7419b14cf1722183e40fb5-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm5360b2193d2a13dcec9d9cd02755485a816d1784ee7419b14cf1722183e40fb5-ol10_x86_64_u0_baseos_patch
kernel-modules-extra-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm7ac3047d2cabb7b59adea6d179203eb5c6a89d6502cb434675145969200c7b78-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm7ac3047d2cabb7b59adea6d179203eb5c6a89d6502cb434675145969200c7b78-ol10_x86_64_u0_baseos_patch
kernel-tools-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmbf67ced67520760bf523ca7636c04158759933af466811d9844010fbf5cf3701-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmbf67ced67520760bf523ca7636c04158759933af466811d9844010fbf5cf3701-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmc4a9c4c70da955b0c90b56e63fdee2d4d9f2783a8641a19f55259a18ef7902df-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmc4a9c4c70da955b0c90b56e63fdee2d4d9f2783a8641a19f55259a18ef7902df-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm588a4352930b23ff3cd947f124eed12708c782c070d818cb7514b29ffcd76fd0-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmfef51c0ff4cebbb14eee8ca4bf0c1ebb3478b8d90606dc5927b868834087224c-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-55.31.1.0.1.el10_0.x86_64.rpmfef51c0ff4cebbb14eee8ca4bf0c1ebb3478b8d90606dc5927b868834087224c-ol10_x86_64_u0_baseos_patch
kernel-uki-virt-addons-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm0b0f8d25ff9285d547f8c990f8587bb47a7703f4e9bc9c5d733e185833645237-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm0b0f8d25ff9285d547f8c990f8587bb47a7703f4e9bc9c5d733e185833645237-ol10_x86_64_u0_baseos_patch
libperf-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm68c0987bf542bcba864936632cc916d9e99e8293edd8ec0a991b026949b15c24-ol10_x86_64_codeready_builder
perf-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm9334cc2351b4482a1636f9619fe9d8415ec45f0046f1bbd7cc0b677d0d084ced-ol10_x86_64_appstream
python3-perf-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm66bbbb4cc1327a55fbd0f54d9c451a6d3ea06390aedeb0c3ca221ff049957af3-ol10_x86_64_appstream
rtla-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm4a1204d9a771e619dd578985cae1fdb325765b1314b2d8a677912480907da325-ol10_x86_64_appstream
rv-6.12.0-55.31.1.0.1.el10_0.x86_64.rpm29711fd2948d20c963412ab6511d1527c61abae157373484377b10ec8c069d55-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights