Stay Connected:

ELSA-2025-20318

ELSA-2025-20318 - Unbreakable Enterprise kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-05-12

Description


[6.12.0-1.23.3.1]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920680]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920680]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920680]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}


Related CVEs


CVE-2024-28956

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-uek-6.12.0-1.23.3.1.el9uek.src.rpm278aa8a4b776fcf295215bb2dc6af5299740c43cdc2fc6a0a9fa05fc0a0d5e82-ol9_aarch64_UEKR8
kernel-uek-6.12.0-1.23.3.1.el9uek.aarch64.rpm728c316153fed238e9ceb49d9b2b2f6410366f2284e0f5011cf43ce3fd634c01-ol9_aarch64_UEKR8
kernel-uek-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm7c5c8f7d489d37fba610aa3e6496d3bd0437645fe948241f78b256d88d7e525c-ol9_aarch64_UEKR8
kernel-uek-debug-6.12.0-1.23.3.1.el9uek.aarch64.rpmb2c7374d952ab3af56e520c349d7b853f02e73018997988df6983381d19b6ab5-ol9_aarch64_UEKR8
kernel-uek-debug-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm463666d6dbdb2be4a64a511396a67abdd54522378a7937a7ab6b65adfbf9e913-ol9_aarch64_UEKR8
kernel-uek-debug-devel-6.12.0-1.23.3.1.el9uek.aarch64.rpm98ab0acceb1aead0470236cc44908a0027fa69a27f381beb305c014ec2f0e35d-ol9_aarch64_UEKR8
kernel-uek-debug-modules-6.12.0-1.23.3.1.el9uek.aarch64.rpm6189b5c7e0e1fd47e1a793a4f3d316b5cbac7f457503ce1c6733b91709abcd60-ol9_aarch64_UEKR8
kernel-uek-debug-modules-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm32264fb33038d760383bd3c387f34798643735c00de88ceafc889ed92b049a75-ol9_aarch64_UEKR8
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.1.el9uek.aarch64.rpma7404b407d4fd038d6e5307a2a4556a89df95089e9f925d5a4c25f7f13296eaf-ol9_aarch64_UEKR8
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.1.el9uek.aarch64.rpm5765693549576ffec52049ad8ecc502a0df38d5be72efc8709495e1c6cdf4772-ol9_aarch64_UEKR8
kernel-uek-debug-modules-extra-6.12.0-1.23.3.1.el9uek.aarch64.rpmb5f6e3c0024e03827f4f8466d1167508997cff1da3b1f30daced18af43c71961-ol9_aarch64_UEKR8
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.aarch64.rpm71cdadcc75e5903e48eabb080f572831ec3ba96da1a457a662b14dcc93f9dd06-ol9_aarch64_UEKR8
kernel-uek-debug-modules-usb-6.12.0-1.23.3.1.el9uek.aarch64.rpm594134b527ac0fedbb9040671c26f32a98b3b64a456c13906bf8b4a477832070-ol9_aarch64_UEKR8
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.1.el9uek.aarch64.rpm6f922c1f2987c2e3e99177f9bbd90714c3c4f8788af3976fb58362c6d57a932f-ol9_aarch64_UEKR8
kernel-uek-devel-6.12.0-1.23.3.1.el9uek.aarch64.rpm1af272b7261a9286bfdabdd88a878f3fd77ffb27aa2f1bebae9a8a548047fb49-ol9_aarch64_UEKR8
kernel-uek-modules-6.12.0-1.23.3.1.el9uek.aarch64.rpma30b4911a5da3e3561a50a5a442acdf1a9e125ce2ef72b0215d3a8d026ac041f-ol9_aarch64_UEKR8
kernel-uek-modules-core-6.12.0-1.23.3.1.el9uek.aarch64.rpmed9569dce00e3a5838f887fa728d92895fcceead276a483e05e7745897ea0f86-ol9_aarch64_UEKR8
kernel-uek-modules-deprecated-6.12.0-1.23.3.1.el9uek.aarch64.rpmc6f686661a99dd2316d7a2bc82a2dbcaffcc8cf2685b6ac54e1de514b0f81600-ol9_aarch64_UEKR8
kernel-uek-modules-desktop-6.12.0-1.23.3.1.el9uek.aarch64.rpma86bd61f3428981a9bd6f99b1a142656ac7d9c710ee7c169027a7a933cd70ea8-ol9_aarch64_UEKR8
kernel-uek-modules-extra-6.12.0-1.23.3.1.el9uek.aarch64.rpma1643de28f5afbc65b615a653c4908a610ec677a9e54e68e2acaa07ab4683864-ol9_aarch64_UEKR8
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.aarch64.rpmb9cef8d9403dd28ac34250d98b74fddd3435fcd776531c0b06527af4081b2fe1-ol9_aarch64_UEKR8
kernel-uek-modules-usb-6.12.0-1.23.3.1.el9uek.aarch64.rpmb3e894648c2ae53b1b0b9b9633c7880b44316c57aac7b9dff3c492b31d30e018-ol9_aarch64_UEKR8
kernel-uek-modules-wireless-6.12.0-1.23.3.1.el9uek.aarch64.rpmfe8a391511f87c5519ee3bd138c0e076e530a06d5df331d2cda0d6e9d6eaa90b-ol9_aarch64_UEKR8
kernel-uek64k-6.12.0-1.23.3.1.el9uek.aarch64.rpm49c99e2d10291e5c6d7238337565399eee6b646bc94363dd4cc33714e1326e2f-ol9_aarch64_UEKR8
kernel-uek64k-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm428535292b7ae1909a29982264eb43473bb00522e89104f42cb8253b27f486b0-ol9_aarch64_UEKR8
kernel-uek64k-modules-6.12.0-1.23.3.1.el9uek.aarch64.rpmb254c8e9b1b01953f56ff1c026f86c2939b0e3553205be7082b6dae9b6397492-ol9_aarch64_UEKR8
kernel-uek64k-modules-core-6.12.0-1.23.3.1.el9uek.aarch64.rpmc68777dcc94ad72361c9a8b16cde37e65df44e1807085697abe6f439a2816056-ol9_aarch64_UEKR8
kernel-uek64k-modules-deprecated-6.12.0-1.23.3.1.el9uek.aarch64.rpma5cf557caeefc955e54b693e61d428344d570ce61db3c5ad8ad35b14066195f5-ol9_aarch64_UEKR8
kernel-uek64k-modules-desktop-6.12.0-1.23.3.1.el9uek.aarch64.rpm1c4c73725a8799d9e2f33042d2ca57e3a5f732ea88df20da752e10fad56d971a-ol9_aarch64_UEKR8
kernel-uek64k-modules-extra-6.12.0-1.23.3.1.el9uek.aarch64.rpm6bea7fc463c81a493b680ff0581471926d79f87ab5972b62995ef4f7c018f081-ol9_aarch64_UEKR8
kernel-uek64k-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.aarch64.rpm1b461a80a555e43460d6c03dba8c14f58a22c0c6d978d5c8c27e840b91694e0c-ol9_aarch64_UEKR8
kernel-uek64k-modules-usb-6.12.0-1.23.3.1.el9uek.aarch64.rpmc0e1553130bccd36075895a46e885ab171003c2a3ff37ecff5851a0b97ccccb0-ol9_aarch64_UEKR8
kernel-uek64k-modules-wireless-6.12.0-1.23.3.1.el9uek.aarch64.rpmb14896061a851377064b2e0f57dd40fc62c2183c28a2b5492f170be3985f4c0a-ol9_aarch64_UEKR8
Oracle Linux 9 (x86_64) kernel-uek-6.12.0-1.23.3.1.el9uek.src.rpm278aa8a4b776fcf295215bb2dc6af5299740c43cdc2fc6a0a9fa05fc0a0d5e82-ol9_x86_64_UEKR8
kernel-uek-6.12.0-1.23.3.1.el9uek.x86_64.rpm9adaf569891066e99bf998834e81754c6b22f1786b40463029f690891b525a03-ol9_x86_64_UEKR8
kernel-uek-core-6.12.0-1.23.3.1.el9uek.x86_64.rpm8085da8961832db1cbf57e93786e72e75308e3a141f293cddeff5ec01fe0c58b-ol9_x86_64_UEKR8
kernel-uek-debug-6.12.0-1.23.3.1.el9uek.x86_64.rpm1368f93dd2718ae9ab9f8838ab8af36922503b1fa39e715e23d110db379337cf-ol9_x86_64_UEKR8
kernel-uek-debug-core-6.12.0-1.23.3.1.el9uek.x86_64.rpmc116d684c5a84f2ca636523b4cfccf57093ab235cc5a7df5e48a35e6fce1d62b-ol9_x86_64_UEKR8
kernel-uek-debug-devel-6.12.0-1.23.3.1.el9uek.x86_64.rpmf4b335767fdba122bd7241b78462250fa4c6bdc47eb45bcea76194fce26e1236-ol9_x86_64_UEKR8
kernel-uek-debug-modules-6.12.0-1.23.3.1.el9uek.x86_64.rpm843c66c7b0af80818994e3f400593f5f2c17b419490eea6876c2144ea235488b-ol9_x86_64_UEKR8
kernel-uek-debug-modules-core-6.12.0-1.23.3.1.el9uek.x86_64.rpm34fade6ef4ce76cb40bd03dda4782b030715bef43eebf74917e7244f9e50286c-ol9_x86_64_UEKR8
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.1.el9uek.x86_64.rpm8776dd7c7c9fcec3d44a926b6104c845276dea2469aa59ba7097f9f6d58542b4-ol9_x86_64_UEKR8
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.1.el9uek.x86_64.rpm2476e84f54bb981e34f3c64a2a48c314c63cb002a12af82bd765fa0a38280e80-ol9_x86_64_UEKR8
kernel-uek-debug-modules-extra-6.12.0-1.23.3.1.el9uek.x86_64.rpmae2b856cda589cca95d36a2a541f9b24dd7d79215c48fe067b8c738f15b97430-ol9_x86_64_UEKR8
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.x86_64.rpm98c49fe4fc13e4612254d68c796713be5c2acc10afa818fbba23901d5c742e3a-ol9_x86_64_UEKR8
kernel-uek-debug-modules-usb-6.12.0-1.23.3.1.el9uek.x86_64.rpm4afd69c359f0259b1e3eb41354ca71bd9a2fca90280149fa20aea4285efaac19-ol9_x86_64_UEKR8
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.1.el9uek.x86_64.rpme9d5abef234f8b18c9b57099334a2556987b7857a5838560a11760f1ab45fd2d-ol9_x86_64_UEKR8
kernel-uek-devel-6.12.0-1.23.3.1.el9uek.x86_64.rpmc8cb89e6bc889be7ea1bfa8496c74ed42bc8d4de90a330e338efbf522baec27f-ol9_x86_64_UEKR8
kernel-uek-doc-6.12.0-1.23.3.1.el9uek.noarch.rpmcb45d27c9dc0b09690818d0ea90e3de2aecb9b6db5650afaca5c1a0f5adb4b70-ol9_x86_64_UEKR8
kernel-uek-modules-6.12.0-1.23.3.1.el9uek.x86_64.rpm4e338cc75dedb281d411ff2b8a1c5c4005a3b3eb77cc921a1dcae59993a9d89e-ol9_x86_64_UEKR8
kernel-uek-modules-core-6.12.0-1.23.3.1.el9uek.x86_64.rpmb55d5ad2461e520e8897cbd4b6e12bbf0268eb125767970e00738fcc07e21e52-ol9_x86_64_UEKR8
kernel-uek-modules-deprecated-6.12.0-1.23.3.1.el9uek.x86_64.rpm964c71688d22423937680926db71e1c2b0dcfe0971db9248a0d1160f4703d2ec-ol9_x86_64_UEKR8
kernel-uek-modules-desktop-6.12.0-1.23.3.1.el9uek.x86_64.rpmc455e6e4c528dc70bc18b84f713d7581068c4fc2118353495e7a1d76c4c38433-ol9_x86_64_UEKR8
kernel-uek-modules-extra-6.12.0-1.23.3.1.el9uek.x86_64.rpmee32f943cdf1d2580bd3bf0aa284516634f4a6b84b63390f14476a48a47dd3a7-ol9_x86_64_UEKR8
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.x86_64.rpm1261cb62c683130586536dc60dfe0e9cd1f16f2ed94bc72701efb494f77b2aaf-ol9_x86_64_UEKR8
kernel-uek-modules-usb-6.12.0-1.23.3.1.el9uek.x86_64.rpm349db84a7c517b08605a33a70d4752fcc895a846440cb306d1764a913f61d7f2-ol9_x86_64_UEKR8
kernel-uek-modules-wireless-6.12.0-1.23.3.1.el9uek.x86_64.rpme82ed40b9de8c6310766c82ca2bcfb9ad0473fa71b02460500e4e2e40fa6b9b1-ol9_x86_64_UEKR8



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights