ELSA-2025-15782

ELSA-2025-15782 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-09-18

Description

[6.12.0-55.33.1.0.1.el10_0.OL10]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.33.1.el10_0]
- Fix kABI for net_namespace.h
- Bump internal version to 55.33.1
- xfrm: interface: fix use-after-free after changing collect_md xfrm interface - CVE-2025-38500
- idpf: convert control queue mutex to a spinlock - CVE-2025-38392
- eth: bnxt: fix missing ring index trim on error path - CVE-2025-37873
- tcp: Correct signedness in skb remaining space calculation - CVE-2025-38463
- ipv6: mcast: Delay put pmc->idev in mld_del_delrec() - CVE-2025-38550
- redhat: selftests/bpf: Add cpuv4 variant
- i40e: report VF tx_dropped with tx_errors instead of tx_discards - CVE-2025-38200
- use uniform permission checks for all mount propagation changes - CVE-2025-38498
- do_change_type(): refuse to operate on unmounted/not ours mounts - CVE-2025-38498
- ublk: make sure ubq->canceling is set when queue is frozen - CVE-2025-22068
- net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
- scsi: lpfc: Use memcpy() for BIOS version - CVE-2025-38332
- net: introduce per netns packet chains

Related CVEs

CVE-2025-38500

CVE-2025-22068

CVE-2025-38463

CVE-2025-38498

CVE-2025-38332

CVE-2025-38392

CVE-2025-38550

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_aarch64_appstream
	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_aarch64_baseos_latest
	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_aarch64_codeready_builder
	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_aarch64_u0_baseos_patch
	kernel-cross-headers-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	aa3ba832d1d5100197b8aa0e17cfc983720247f5f783711cd340f546ea1447e9	-	ol10_aarch64_codeready_builder
	kernel-headers-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	3b4d6e72f5f3df2fca1ff9015ce74c5dc64961a21cd19a0f2a5700e5ea202622	-	ol10_aarch64_appstream
	kernel-tools-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	73ee2f7f2967b7be1b3514fa0646cfa3783140717a35413647c06f3c02798f62	-	ol10_aarch64_baseos_latest
	kernel-tools-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	73ee2f7f2967b7be1b3514fa0646cfa3783140717a35413647c06f3c02798f62	-	ol10_aarch64_u0_baseos_patch
	kernel-tools-libs-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	8c883d6903a0268c84ec7c8e5f6c51c9476553434a8ca5c1a9679e7e3b79be83	-	ol10_aarch64_baseos_latest
	kernel-tools-libs-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	8c883d6903a0268c84ec7c8e5f6c51c9476553434a8ca5c1a9679e7e3b79be83	-	ol10_aarch64_u0_baseos_patch
	kernel-tools-libs-devel-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	ef8e56ec08307ec0855d8796edd03b9c3a62ce47b4d4117c9c0f9cfc548b8aef	-	ol10_aarch64_codeready_builder
	libperf-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	7c9760ab5c601f725b3ad16766ad553ff41967f6676e9ba86b73b6abef5d05d5	-	ol10_aarch64_codeready_builder
	perf-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	d6058f801ce9e48e96d161872c1f7a60c72fb6574b1b48915a9b16b03d3c6617	-	ol10_aarch64_appstream
	python3-perf-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	9b7d3b9685f975f58310634c4b404e983b3de402840ea916ef4e94b0419dc77c	-	ol10_aarch64_appstream
	rtla-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	62c0ee173dab232961f2204cd2bdbffd92f68166abd4631a2732943143097118	-	ol10_aarch64_appstream
	rv-6.12.0-55.33.1.0.1.el10_0.aarch64.rpm	32b07e98f5f82771eccc2e13eb4fe19f62dd4ea364dfab6a7f0b3f983899cdc2	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_x86_64_appstream
	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_x86_64_codeready_builder
	kernel-6.12.0-55.33.1.0.1.el10_0.src.rpm	23c88507e200871e33840447e05dc13ef2ba18da31a028de558180affc7768a7	-	ol10_x86_64_u0_baseos_patch
	kernel-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	0f737ad91e6ed2e378239df51ae6a0a9d262f5e0b690f122df09a21c1518dd2b	-	ol10_x86_64_baseos_latest
	kernel-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	0f737ad91e6ed2e378239df51ae6a0a9d262f5e0b690f122df09a21c1518dd2b	-	ol10_x86_64_u0_baseos_patch
	kernel-abi-stablelists-6.12.0-55.33.1.0.1.el10_0.noarch.rpm	54e014d14ea41d8a910e0e5125d68c6bc64ed2c55dea70673a87fe0024cc10be	-	ol10_x86_64_baseos_latest
	kernel-abi-stablelists-6.12.0-55.33.1.0.1.el10_0.noarch.rpm	54e014d14ea41d8a910e0e5125d68c6bc64ed2c55dea70673a87fe0024cc10be	-	ol10_x86_64_u0_baseos_patch
	kernel-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	356c16e3935a8e127d027594e244b246856f5e4f89ba177969624ef3b5a94b60	-	ol10_x86_64_baseos_latest
	kernel-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	356c16e3935a8e127d027594e244b246856f5e4f89ba177969624ef3b5a94b60	-	ol10_x86_64_u0_baseos_patch
	kernel-cross-headers-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	0dccf2b837f65569bed6fc43cb74c46f995226e6bb5fe51639f497d776db1279	-	ol10_x86_64_codeready_builder
	kernel-debug-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	e4dcef2c859df76a951c0c189a9f01be55a897a9ec03249e28eeca8cdc99bf32	-	ol10_x86_64_baseos_latest
	kernel-debug-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	e4dcef2c859df76a951c0c189a9f01be55a897a9ec03249e28eeca8cdc99bf32	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	04e210a6790e35f28feeb0d39937002b343035543f4488ea1edd2683fa477ecd	-	ol10_x86_64_baseos_latest
	kernel-debug-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	04e210a6790e35f28feeb0d39937002b343035543f4488ea1edd2683fa477ecd	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-devel-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	df803d34ac8031a170c2a086ac9fe7bd5f3f42a90434f280f332ba9c89a77741	-	ol10_x86_64_appstream
	kernel-debug-devel-matched-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	97dd7587d730ef928ca259df3f287225e5c7e5a451118ec3ff50ee40d4174471	-	ol10_x86_64_appstream
	kernel-debug-modules-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	804b307b36e969a2bd1eb03946f526b1ca07c8b41117761756406f8f31beb85d	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	804b307b36e969a2bd1eb03946f526b1ca07c8b41117761756406f8f31beb85d	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-modules-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	b42465ea014ee0c486ebf5b97f4f1896f4a6377bd9d196f6722d6a4ad279e161	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	b42465ea014ee0c486ebf5b97f4f1896f4a6377bd9d196f6722d6a4ad279e161	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-modules-extra-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	d4ddbb899c25156cde8cc09fa37a384c8f4a1f8d28898f86b17ea2305c6fa824	-	ol10_x86_64_baseos_latest
	kernel-debug-modules-extra-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	d4ddbb899c25156cde8cc09fa37a384c8f4a1f8d28898f86b17ea2305c6fa824	-	ol10_x86_64_u0_baseos_patch
	kernel-debug-uki-virt-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	3ed5e11fe1d7cf7c8f58297857772c37a94d5549a400ac77b1bacb0409bc374c	-	ol10_x86_64_baseos_latest
	kernel-debug-uki-virt-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	3ed5e11fe1d7cf7c8f58297857772c37a94d5549a400ac77b1bacb0409bc374c	-	ol10_x86_64_u0_baseos_patch
	kernel-devel-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	237718c6ac71327e208c92c0c47b3048a91fbe5a86ed8fa67d35c4b0b0af10fd	-	ol10_x86_64_appstream
	kernel-devel-matched-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	aa9fe87fe86a277df75298dd3b824e982a7571f5bf393f3d26b2ed151c94b3a1	-	ol10_x86_64_appstream
	kernel-doc-6.12.0-55.33.1.0.1.el10_0.noarch.rpm	fa0098ffcc914ac8e13fc9fdc2e250df47b224cc2699809f12056996838e5f76	-	ol10_x86_64_appstream
	kernel-headers-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	6d226690c8e8051c83d85d69a4efdabe5b8ff22922ba4e497cd51b4b3220242d	-	ol10_x86_64_appstream
	kernel-modules-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	e4c01b8d1a35b12e0f45e87628d48f43fc989079bc8d2b20ba54f682d0a6d511	-	ol10_x86_64_baseos_latest
	kernel-modules-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	e4c01b8d1a35b12e0f45e87628d48f43fc989079bc8d2b20ba54f682d0a6d511	-	ol10_x86_64_u0_baseos_patch
	kernel-modules-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	63793c25811fa83fa6a1583349b6120ea357ec10e2622b5d4ad137914ef25e0d	-	ol10_x86_64_baseos_latest
	kernel-modules-core-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	63793c25811fa83fa6a1583349b6120ea357ec10e2622b5d4ad137914ef25e0d	-	ol10_x86_64_u0_baseos_patch
	kernel-modules-extra-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	b9b3a0a0408a31c3746eb91bfe3ab7f8e981de3940f1853cd6c943f81fdf36a8	-	ol10_x86_64_baseos_latest
	kernel-modules-extra-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	b9b3a0a0408a31c3746eb91bfe3ab7f8e981de3940f1853cd6c943f81fdf36a8	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	b697b9aa31b3935bfe82e2e04bf9b47c48e649b5abc558c018bdeb1fda7d78c3	-	ol10_x86_64_baseos_latest
	kernel-tools-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	b697b9aa31b3935bfe82e2e04bf9b47c48e649b5abc558c018bdeb1fda7d78c3	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-libs-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	9638683ba77e72162db1907bfebad3c93a77264c6495edd4504d22e5a7b661e4	-	ol10_x86_64_baseos_latest
	kernel-tools-libs-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	9638683ba77e72162db1907bfebad3c93a77264c6495edd4504d22e5a7b661e4	-	ol10_x86_64_u0_baseos_patch
	kernel-tools-libs-devel-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	170d82f38c5dd99124def1315f219aea0f29797a0b85431d795dc0aa0b729348	-	ol10_x86_64_codeready_builder
	kernel-uki-virt-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	ec4693fb7704e46cd5146beaac1062db2e655445477a0fcff382365d72b26655	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	ec4693fb7704e46cd5146beaac1062db2e655445477a0fcff382365d72b26655	-	ol10_x86_64_u0_baseos_patch
	kernel-uki-virt-addons-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	95b84a3e90dfde309d64e0e9a5e3cc5506bb5d48d3c3f9d9f550a1a4e1bd199f	-	ol10_x86_64_baseos_latest
	kernel-uki-virt-addons-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	95b84a3e90dfde309d64e0e9a5e3cc5506bb5d48d3c3f9d9f550a1a4e1bd199f	-	ol10_x86_64_u0_baseos_patch
	libperf-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	7ae7ddfd4258457a965024b0f82f460fc0335649a6ecf09b8e9eae1d2d8ee237	-	ol10_x86_64_codeready_builder
	perf-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	ab3e056702224d465cb043679f1d0b00e0e883d7d5923e3489ea575c131a9c3f	-	ol10_x86_64_appstream
	python3-perf-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	3c07199483098271bee93e513143ea27819ffdb6444430121f3cff1a09edea19	-	ol10_x86_64_appstream
	rtla-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	9c47c123447a69d806b4732d27d678e7616d9075b7e6297b7ee23d60257e1d10	-	ol10_x86_64_appstream
	rv-6.12.0-55.33.1.0.1.el10_0.x86_64.rpm	9d2240e131d673b0dcfa0c37ecad7f27796147654aded53f62f106cc560df7f0	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team