ELSA-2025-19106

ELSA-2025-19106 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-10-28

Description


[6.12.0-55.41.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

[6.12.0-55.41.1]
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}


Related CVEs


CVE-2025-39849
CVE-2025-39751
CVE-2025-39727
CVE-2025-39697
CVE-2025-39730
CVE-2025-39718

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_aarch64_appstream
kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_aarch64_baseos_latest
kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_aarch64_codeready_builder
kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_aarch64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm07a152fde82a998deceadd138b3d128c6f3bcd7062d0ff44210b9333b302129b-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm6ba138aa5b9c49b58e814c7840c014a9b5d483a2cfddaa8ea7e079759ba518bd-ol10_aarch64_appstream
kernel-tools-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm6505d09be80dd63e550640741522497217163ab72792c4f83f1f249cecd0f343-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm6505d09be80dd63e550640741522497217163ab72792c4f83f1f249cecd0f343-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm7d61fd182a0018a1c32bc67c4a095b539f72eec7c58a2fddc94fc1cd33c2cb6b-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm7d61fd182a0018a1c32bc67c4a095b539f72eec7c58a2fddc94fc1cd33c2cb6b-ol10_aarch64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm9a3bc8a698874ce177f7c4bccb6e2149a23d855248e2f66a6a932dfda81a1f40-ol10_aarch64_codeready_builder
libperf-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm4f1d8e73405900373674f70de68eca9f7cde9ce44106ba4f0dccff499e5349e6-ol10_aarch64_codeready_builder
perf-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm7413b7a7aa5f63d97c86bc71ffb3875603b4b4b82851c05ffd0e10832c98c0ce-ol10_aarch64_appstream
python3-perf-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm9bef0f5f33434670b43b36562ebee347e6684c2887b09931194c316070ed61b0-ol10_aarch64_appstream
rtla-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm433de1a70e9a987a38e4cbf82e66a47a131547183782553d30eedf58152c5413-ol10_aarch64_appstream
rv-6.12.0-55.41.1.0.1.el10_0.aarch64.rpm55bae615ecb558cfb06140257086a0de6f5df1ef808f4f9c87a5a75734950138-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_x86_64_appstream
kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_x86_64_baseos_latest
kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_x86_64_codeready_builder
kernel-6.12.0-55.41.1.0.1.el10_0.src.rpmcc77135d55bd0e1bd5eeaf0b273eeeb109280a1be72c67aadf29510ddc9eccf3-ol10_x86_64_u0_baseos_patch
kernel-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm8d72b6d22da9ba98eb0d8fa248e2d00150e08efd2b8a8dae711a6633fddd7e9a-ol10_x86_64_baseos_latest
kernel-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm8d72b6d22da9ba98eb0d8fa248e2d00150e08efd2b8a8dae711a6633fddd7e9a-ol10_x86_64_u0_baseos_patch
kernel-abi-stablelists-6.12.0-55.41.1.0.1.el10_0.noarch.rpmbc59f3194f8a4e3ae4d69defb715f9386eb1d1e555a4fb1846642de36bb10f70-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-55.41.1.0.1.el10_0.noarch.rpmbc59f3194f8a4e3ae4d69defb715f9386eb1d1e555a4fb1846642de36bb10f70-ol10_x86_64_u0_baseos_patch
kernel-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm2112fbaa3e9ce8b1ef4a6ef78ff14eab0fb64b17396af4ca11235be8905482fc-ol10_x86_64_baseos_latest
kernel-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm2112fbaa3e9ce8b1ef4a6ef78ff14eab0fb64b17396af4ca11235be8905482fc-ol10_x86_64_u0_baseos_patch
kernel-cross-headers-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmb65ef04f77b4e009e0806ee33c4d364e608a9bcee9a047fe3d5bd49da6fc9d38-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmb57bd450ee6a44395e55f3b231cbc1936a3b0059ea3fdbf13c7b7cf1a17ea5c9-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmb57bd450ee6a44395e55f3b231cbc1936a3b0059ea3fdbf13c7b7cf1a17ea5c9-ol10_x86_64_u0_baseos_patch
kernel-debug-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmdf3f898828a5388f525696d34b0c3319fb703fb73f74faa063dedecde7aa3677-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmdf3f898828a5388f525696d34b0c3319fb703fb73f74faa063dedecde7aa3677-ol10_x86_64_u0_baseos_patch
kernel-debug-devel-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm97fa04c8f571964375adb5f7322ff64d18e7f7b902968abb436ac73c78d9b2c2-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm9f0ca12055e03552cff7f8442dfd981cfa9d486b870ca921ed4bd0a1999c12c7-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmac13db1ca6682446a1d434f56646a56d526184f9b2a19e1874ce1483042b5d86-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmac13db1ca6682446a1d434f56646a56d526184f9b2a19e1874ce1483042b5d86-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmea2722a2addccb34128894a8595d4b23129517591982615818dd4a49fa1501aa-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmea2722a2addccb34128894a8595d4b23129517591982615818dd4a49fa1501aa-ol10_x86_64_u0_baseos_patch
kernel-debug-modules-extra-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm353cc413a5f08884efe019a1b1394f808ed1d3c10f7a23d0f17011638b44d379-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm353cc413a5f08884efe019a1b1394f808ed1d3c10f7a23d0f17011638b44d379-ol10_x86_64_u0_baseos_patch
kernel-debug-uki-virt-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmec326c732590f34e0ed7e624cce22eca555c9267b418e662fae0a084f641d093-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmec326c732590f34e0ed7e624cce22eca555c9267b418e662fae0a084f641d093-ol10_x86_64_u0_baseos_patch
kernel-devel-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmc876be10c5fb86e97e41d013b2eab476c9eb66afe353469a76495f818acfe46a-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmd7ce189b118432061a11b2bdf20a92521b159cd9a507dc6d4e749b68adf6099c-ol10_x86_64_appstream
kernel-doc-6.12.0-55.41.1.0.1.el10_0.noarch.rpmad5e3a116a6ab85dd2abeacd8109f490164e6b6f8d2aac577c0f8fae6c9a0d35-ol10_x86_64_appstream
kernel-headers-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm560c6531f82ded0c2dd8b67a8746be7a48d06d51a9a20fa2fa16db7a3f5e0b92-ol10_x86_64_appstream
kernel-modules-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmd2a7e5e0260fa5a4f255bfd2c343434ebd78b4d0385694ec2364930636a3d54c-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmd2a7e5e0260fa5a4f255bfd2c343434ebd78b4d0385694ec2364930636a3d54c-ol10_x86_64_u0_baseos_patch
kernel-modules-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm3d85878aa26ad6b196b6baad9d2f58eed5dfd49ceabc08ccfccba1001f2181aa-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm3d85878aa26ad6b196b6baad9d2f58eed5dfd49ceabc08ccfccba1001f2181aa-ol10_x86_64_u0_baseos_patch
kernel-modules-extra-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmf1f100e77aa352a1f82c2ff70a57fefce3b4a9c86c3f1ce4d879c9f8fa5f8fce-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmf1f100e77aa352a1f82c2ff70a57fefce3b4a9c86c3f1ce4d879c9f8fa5f8fce-ol10_x86_64_u0_baseos_patch
kernel-tools-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmc21e6cad310d67d29af33599a0bac4d51d1c35633fd6d164450264d6af6b2100-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmc21e6cad310d67d29af33599a0bac4d51d1c35633fd6d164450264d6af6b2100-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm25ee713fd03fa143957c8b4b0ee1402018c38ceeb783cece8e89469d3f03764c-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm25ee713fd03fa143957c8b4b0ee1402018c38ceeb783cece8e89469d3f03764c-ol10_x86_64_u0_baseos_patch
kernel-tools-libs-devel-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm6cf8140227c87337b6f60333da2da4613e9c30004c5d33e2aba6c371860a9c3f-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm3fe561050a5e7fde48f6c2a9c585ac497f9cf4ffc8105864b2f1adc1018addae-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm3fe561050a5e7fde48f6c2a9c585ac497f9cf4ffc8105864b2f1adc1018addae-ol10_x86_64_u0_baseos_patch
kernel-uki-virt-addons-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm55ed5965e8087d5ae58dac957d5abe7784bca07683966a89b19488ecfa949d93-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm55ed5965e8087d5ae58dac957d5abe7784bca07683966a89b19488ecfa949d93-ol10_x86_64_u0_baseos_patch
libperf-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm67ef129f4496155fa7b9882aa2ee400932b8ec84aebb12a7c40880cd7925b4d0-ol10_x86_64_codeready_builder
perf-6.12.0-55.41.1.0.1.el10_0.x86_64.rpmf8c90dff42c425a7c1581905db7b4b799d4bf989068c8f7af161cdb34f9e6d87-ol10_x86_64_appstream
python3-perf-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm0f24e50caa5ef09eca46ee62ffb33a4dcae8a48a041f6a9290244d323a175f8b-ol10_x86_64_appstream
rtla-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm422eafa132e62109569e6cdedc3e87e2564a9de8ac0aacfe1506601ab810c721-ol10_x86_64_appstream
rv-6.12.0-55.41.1.0.1.el10_0.x86_64.rpm497886df330f07846ea1b53726e486638bb88df5d88207d8e40ab14e2b051600-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete