ELSA-2025-18318

ELSA-2025-18318 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-10-20

Description


[6.12.0-55.40.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.40.1]
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}


Related CVEs


CVE-2025-38571
CVE-2025-39841
CVE-2025-39817
CVE-2025-38572
CVE-2025-38351
CVE-2025-38614

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_aarch64_appstream
kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_aarch64_baseos_latest
kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_aarch64_codeready_builder
kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_aarch64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm1c7345080a4e76424db947078e6ecc897b4d0d0744268f727244ce4247ad0b49-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-55.40.1.0.1.el10_0.aarch64.rpme9a7c3e349b2216a892a797070b711aeded0a558c57a46bb7c12c15b50fa161c-ol10_aarch64_appstream
kernel-tools-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm0eca27e38662719471b1188ee55a1eba1612d5a23fe842a5fa98c9e567f0d6ad-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm0eca27e38662719471b1188ee55a1eba1612d5a23fe842a5fa98c9e567f0d6ad-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm184a557cdccbd5f2f1842025963a928b5a3bae9e2fe80eb5e5d33ef7c49b2cac-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm184a557cdccbd5f2f1842025963a928b5a3bae9e2fe80eb5e5d33ef7c49b2cac-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.40.1.0.1.el10_0.aarch64.rpmff6fb01c1b9ef2ec941add091afbb102989c8a06c0934440d80db33fb857647f-ol10_aarch64_codeready_builder
libperf-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm306ca8a75acdf2c9d9b95caa72d53ee2a4aa3804ac2a949569e71aad54a9a901-ol10_aarch64_codeready_builder
perf-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm7e9fb7e99d45d8b9363d15209bf9154687e9cef1e85ebfaec27db5eba5faab5f-ol10_aarch64_appstream
python3-perf-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm300f435ecfd0b6161f4c9fee171715828968702944521d08076caca07a0dd2d5-ol10_aarch64_appstream
rtla-6.12.0-55.40.1.0.1.el10_0.aarch64.rpm301f0f7afec88c36fffea8cd1c16d2b031ead341063d83154b78ab2ec230cb3f-ol10_aarch64_appstream
rv-6.12.0-55.40.1.0.1.el10_0.aarch64.rpmf972062dfa5587bc9b71c2ca13f017b1583ef9ecab3aade1b7fbf612571448de-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_x86_64_appstream
kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_x86_64_baseos_latest
kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_x86_64_codeready_builder
kernel-6.12.0-55.40.1.0.1.el10_0.src.rpm5ce635daf60beab3232a0badc21e1da842a3a379a3322e54bba4e656b9092da9-ol10_x86_64_u0_baseos_patch
kernel-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmdbd01aecda3abda31bacdb42e23b3f0f2e22fd1a05c02acad5c6289e369cecea-ol10_x86_64_baseos_latest
kernel-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmdbd01aecda3abda31bacdb42e23b3f0f2e22fd1a05c02acad5c6289e369cecea-ol10_x86_64_u0_baseos_patch
kernel-abi-stablelists-6.12.0-55.40.1.0.1.el10_0.noarch.rpmd73e2b615d1e1a0ca630ac674100839e389974a521f00e7f55044b565c466509-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-55.40.1.0.1.el10_0.noarch.rpmd73e2b615d1e1a0ca630ac674100839e389974a521f00e7f55044b565c466509-ol10_x86_64_u0_baseos_patch
kernel-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmfabd3df91ea4203a84883bdd9809d7839afd4305f31865504a6aa561b888a147-ol10_x86_64_baseos_latest
kernel-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmfabd3df91ea4203a84883bdd9809d7839afd4305f31865504a6aa561b888a147-ol10_x86_64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm893fb0b4b05eb0ce217e358963632f382c68d7951628f9f620d3f7a51a88b2b7-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm1e49dd22264c8256053f2487bab41841c5032d476280067b98497cb71fc68e09-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm1e49dd22264c8256053f2487bab41841c5032d476280067b98497cb71fc68e09-ol10_x86_64_u0_baseos_patch
kernel-debug-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmd11436b690db59b0ce323b23a7f5e782aaad5599b28d4e1982da66bf8cbebf9d-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmd11436b690db59b0ce323b23a7f5e782aaad5599b28d4e1982da66bf8cbebf9d-ol10_x86_64_u0_baseos_patch
kernel-debug-devel-6.12.0-55.40.1.0.1.el10_0.x86_64.rpma431b61e62da11abddf65ffb6b36ed5c42e6eaa9a9555c67759d8920c5143034-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm6c88704e65f1c9ddc36d072d07a54c709d9c6f82b96d142a3a0cdbc3ee191569-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmedaa68e70368abddfe9a32e5bcf62fbc4fbddd24ef89888e38c09c3320362202-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmedaa68e70368abddfe9a32e5bcf62fbc4fbddd24ef89888e38c09c3320362202-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpma8e24136477c014d32cddf6d0d3802ef30eb019290fad1b264612a324c1d5d98-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpma8e24136477c014d32cddf6d0d3802ef30eb019290fad1b264612a324c1d5d98-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-extra-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmfa6bf01eaf8011ca8dec2602356caa24c1fda50301b0bcaf88848dba97006dc6-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmfa6bf01eaf8011ca8dec2602356caa24c1fda50301b0bcaf88848dba97006dc6-ol10_x86_64_u0_baseos_patch
kernel-debug-uki-virt-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm5cc577db704881245439270367b44a2499b7242d6805feedecadfa9df1cd3ef8-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm5cc577db704881245439270367b44a2499b7242d6805feedecadfa9df1cd3ef8-ol10_x86_64_u0_baseos_patch
kernel-devel-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm5a47ccceecebdb1dfbfdf0b05c97f66b48cd78175c161745e8ef1422aeeef200-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm7ec51f78c9aa7289d99afbab4e07d64a1e7593c340aae1872800e64f00fec579-ol10_x86_64_appstream
kernel-doc-6.12.0-55.40.1.0.1.el10_0.noarch.rpm279d4e434b11a1a06cc6f84a58ff3826d8ff6837980d783fbb94376dfc8f167a-ol10_x86_64_appstream
kernel-headers-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm218dc3e140957d2f8dd6c283efe966a54a8070848da6cfc40ebb5ba396d8b931-ol10_x86_64_appstream
kernel-modules-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm5224ac20979c23789a795f23e6acd6e1c98114b2a9396888842ea60d2514df38-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm5224ac20979c23789a795f23e6acd6e1c98114b2a9396888842ea60d2514df38-ol10_x86_64_u0_baseos_patch
kernel-modules-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmfcc3a1d92d62825fe383494c8578caa3a31a9d1427952eafd3af51f8d3348eae-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmfcc3a1d92d62825fe383494c8578caa3a31a9d1427952eafd3af51f8d3348eae-ol10_x86_64_u0_baseos_patch
kernel-modules-extra-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm62b5dd5b8caa11663d7e31df424db01b8ab10958dc0889e789076eb0791637c6-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm62b5dd5b8caa11663d7e31df424db01b8ab10958dc0889e789076eb0791637c6-ol10_x86_64_u0_baseos_patch
kernel-tools-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmf296fbfad373db6c74cb56012ec17fcfcf9755a5b3c493b7dd2f9e53072e6635-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmf296fbfad373db6c74cb56012ec17fcfcf9755a5b3c493b7dd2f9e53072e6635-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm1bf477bb121b6b2071aac948ac4c7b3720630cf6190d0b8dbf1b9c9318436702-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm1bf477bb121b6b2071aac948ac4c7b3720630cf6190d0b8dbf1b9c9318436702-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm62a484617e1e107895be9d2b652fac44b0c048f75d0c71442b7702d241df4abf-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm92c38cee764ae581b1ad08a1ff63aa7749ff08483a39ff295e3883e738b7d5ce-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm92c38cee764ae581b1ad08a1ff63aa7749ff08483a39ff295e3883e738b7d5ce-ol10_x86_64_u0_baseos_patch
kernel-uki-virt-addons-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmab32c1fd679c6b521d6aeb6d24a113d42a08545a0ce3ad7a0d1a0690dc1e8829-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmab32c1fd679c6b521d6aeb6d24a113d42a08545a0ce3ad7a0d1a0690dc1e8829-ol10_x86_64_u0_baseos_patch
libperf-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm9c4d5908f5bca82181c0fccad9071d95f5dfd2cc932b665b0095d8d7b03bd6ec-ol10_x86_64_codeready_builder
perf-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm831c081e982fe86cc6f1fdaed3e97fc9f5cf7056a6c566e037f9b469df4780d5-ol10_x86_64_appstream
python3-perf-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm576879d8b2250f394441e7ca19940e56afedfef6ba467b60fee0cc72c68a3dcc-ol10_x86_64_appstream
rtla-6.12.0-55.40.1.0.1.el10_0.x86_64.rpmadc1bc69279ec15128ef4d7c1303f5ed99fb40d81e0441e2fcb795e4789d9938-ol10_x86_64_appstream
rv-6.12.0-55.40.1.0.1.el10_0.x86_64.rpm952dada2485fca9fcca8592c7ffa6bec2ccb905d1f2f0536d4ec5e2b25e8113e-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete