Stay Connected:

ELSA-2025-20323

ELSA-2025-20323 - Unbreakable Enterprise kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-05-12

Description


[5.15.0-308.179.6.2]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920681]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920681]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920681]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternatives: Remove faulty optimization (Josh Poimboeuf) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternative: Optimize returns patching (Borislav Petkov (AMD)) [Orabug: 37863726] {CVE-2024-28956}


Related CVEs


CVE-2024-28956

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-uek-5.15.0-308.179.6.2.el8uek.src.rpm0a5af6edf0cb044fbe23dcc68af910a013503ae2d02fb2996c7ed8dd217444f0-ol8_aarch64_UEKR7
bpftool-5.15.0-308.179.6.2.el8uek.aarch64.rpmdb6894f2f1b257648f9b38760c3c717ac0934ca7f4730896df4952fe63cd1305-ol8_aarch64_UEKR7
kernel-uek-5.15.0-308.179.6.2.el8uek.aarch64.rpm1e877b91c340a1d39bfdfd250b54bc1362c9e0e15680e154f0fe0bf1e82b6b33-ol8_aarch64_UEKR7
kernel-uek-container-5.15.0-308.179.6.2.el8uek.aarch64.rpmd10f5e9b46f0995d9c42fbab1ec33fe547c7f0af5fde9c2782bac933a5b99663-ol8_aarch64_UEKR7
kernel-uek-container-debug-5.15.0-308.179.6.2.el8uek.aarch64.rpmf8ea3ef0f6b69d5980ee65a43b493716227c2d748aa5aed5e03e80fa0c9669fe-ol8_aarch64_UEKR7
kernel-uek-core-5.15.0-308.179.6.2.el8uek.aarch64.rpmf4b0c1d76e6168e3fa7d9ada7b29aa31423b4184743588cd55b35458b79ea3ec-ol8_aarch64_UEKR7
kernel-uek-debug-5.15.0-308.179.6.2.el8uek.aarch64.rpm34ac29dad02baca4e1b315819e802736b88e602f8c4e07092c2f00f6e459186f-ol8_aarch64_UEKR7
kernel-uek-debug-core-5.15.0-308.179.6.2.el8uek.aarch64.rpm678ff324af5d77f6bc81b49508c04260792a3d81b4983c6fa2b7668dc0f035c0-ol8_aarch64_UEKR7
kernel-uek-debug-devel-5.15.0-308.179.6.2.el8uek.aarch64.rpmf6cd3ab9b40869377f06579c9f331e962fe5b42beb31e4979b013a7b9d30775d-ol8_aarch64_UEKR7
kernel-uek-debug-modules-5.15.0-308.179.6.2.el8uek.aarch64.rpmf75cd80374ffe149dad8e5f16a7d4706d1dff1e2bafdfab2eebba5f9a74a3358-ol8_aarch64_UEKR7
kernel-uek-debug-modules-extra-5.15.0-308.179.6.2.el8uek.aarch64.rpm2b12df389ca630916fa0a5fe4f71733aeced1ad460e99bfc78498c9d8c7653db-ol8_aarch64_UEKR7
kernel-uek-devel-5.15.0-308.179.6.2.el8uek.aarch64.rpmb2641e19e47316753f85c5f1eaa89065368eb4d15ef578e8eb403ddcb09becd1-ol8_aarch64_UEKR7
kernel-uek-doc-5.15.0-308.179.6.2.el8uek.noarch.rpm9a4af8d1c16e322bd3feecff2a1fa90bba938d3836a08c55e99290ad365e398d-ol8_aarch64_UEKR7
kernel-uek-modules-5.15.0-308.179.6.2.el8uek.aarch64.rpmf9e69a9a6ce54389476d746920873b470939fac8476281e9cb13c2f36f936787-ol8_aarch64_UEKR7
kernel-uek-modules-extra-5.15.0-308.179.6.2.el8uek.aarch64.rpm9529436dc739bce9ceb9d7dbdb91c8daa5fc7d6bf4ff63dd70b18ac6988f598f-ol8_aarch64_UEKR7
Oracle Linux 8 (x86_64) kernel-uek-5.15.0-308.179.6.2.el8uek.src.rpm0a5af6edf0cb044fbe23dcc68af910a013503ae2d02fb2996c7ed8dd217444f0-ol8_x86_64_UEKR7
bpftool-5.15.0-308.179.6.2.el8uek.x86_64.rpm88b36565cc67b802022ab1300d2e176454d8b40624ebbe12487598eee56e67fd-ol8_x86_64_UEKR7
kernel-uek-5.15.0-308.179.6.2.el8uek.x86_64.rpm102f71e16616a35041dda481824e22d5db2979700bf979b22ba46106213c9050-ol8_x86_64_UEKR7
kernel-uek-container-5.15.0-308.179.6.2.el8uek.x86_64.rpme58afc9b888d21f1e84857fcf087270c974b2c0a35a8e3337a2d1ce8bc0c3e14-ol8_x86_64_UEKR7
kernel-uek-container-debug-5.15.0-308.179.6.2.el8uek.x86_64.rpm3b444a5b237e1bc4ec9045491b7ada7b12c5c4ccf85a78de009944b7f78b8b71-ol8_x86_64_UEKR7
kernel-uek-core-5.15.0-308.179.6.2.el8uek.x86_64.rpmca4b9016f5ee0f2368b064c75d3b2c51b19378bc8ea7871833893fe3f9079df3-ol8_x86_64_UEKR7
kernel-uek-debug-5.15.0-308.179.6.2.el8uek.x86_64.rpm22efb502330d94386731b0d4bc8ca84e4ca495ad02f5ca597af47f270d0db010-ol8_x86_64_UEKR7
kernel-uek-debug-core-5.15.0-308.179.6.2.el8uek.x86_64.rpm1e63b874fb46c833b028c9feb1c317b5e4897a77a34587884ab640ddd6e7a557-ol8_x86_64_UEKR7
kernel-uek-debug-devel-5.15.0-308.179.6.2.el8uek.x86_64.rpma02f6a7d7659e0c8a4f2f0c2f09bb14721c30c5e80eacb592df83adf4197a2b4-ol8_x86_64_UEKR7
kernel-uek-debug-modules-5.15.0-308.179.6.2.el8uek.x86_64.rpmdc926c8aabbe2b792037cf1dbd3bd12efe88a4d6c68d354f30e4349f742cf719-ol8_x86_64_UEKR7
kernel-uek-debug-modules-extra-5.15.0-308.179.6.2.el8uek.x86_64.rpma9addac99d1546d769502be23576d7cef3aef64eaaab1541b4455535fb451ff6-ol8_x86_64_UEKR7
kernel-uek-devel-5.15.0-308.179.6.2.el8uek.x86_64.rpm7515b7e0a5a3cfeb46654bef39590d775818a384f32afdf28944745f94f2683c-ol8_x86_64_UEKR7
kernel-uek-doc-5.15.0-308.179.6.2.el8uek.noarch.rpm9a4af8d1c16e322bd3feecff2a1fa90bba938d3836a08c55e99290ad365e398d-ol8_x86_64_UEKR7
kernel-uek-modules-5.15.0-308.179.6.2.el8uek.x86_64.rpmf7d9c906fe616eaebd70faea466bd0741e1e9942f7843126c1d419d1135cd027-ol8_x86_64_UEKR7
kernel-uek-modules-extra-5.15.0-308.179.6.2.el8uek.x86_64.rpmf549cef592b7bda780049e5c75fdb28c22da096cc2631b53e8a1325c9c494fe2-ol8_x86_64_UEKR7
Oracle Linux 9 (aarch64) kernel-uek-5.15.0-308.179.6.2.el9uek.src.rpm2b17d98b3dceffb0a52382c291d291fefe1c1c8210d4280891a6f5bb2f7d4939-ol9_aarch64_baseos_latest
kernel-uek-5.15.0-308.179.6.2.el9uek.src.rpm2b17d98b3dceffb0a52382c291d291fefe1c1c8210d4280891a6f5bb2f7d4939-ol9_aarch64_u5_baseos_patch
bpftool-5.15.0-308.179.6.2.el9uek.aarch64.rpm478841cbc5afde7871dbcb9ffb95527cd668d2ae99c704b411aaf15a7d947356-ol9_aarch64_baseos_latest
bpftool-5.15.0-308.179.6.2.el9uek.aarch64.rpm478841cbc5afde7871dbcb9ffb95527cd668d2ae99c704b411aaf15a7d947356-ol9_aarch64_u5_baseos_patch
kernel-uek-5.15.0-308.179.6.2.el9uek.aarch64.rpm317e0d2bc13c3f77e2239a16f78decd1ea72ffbddf4f1d47d498e2c62231bfcd-ol9_aarch64_baseos_latest
kernel-uek-5.15.0-308.179.6.2.el9uek.aarch64.rpm317e0d2bc13c3f77e2239a16f78decd1ea72ffbddf4f1d47d498e2c62231bfcd-ol9_aarch64_u5_baseos_patch
kernel-uek-container-5.15.0-308.179.6.2.el9uek.aarch64.rpm8515809f7b6615a9aed4233ef522fbd55bae3ccb2fc36d9015e5be33dd8eacc9-ol9_aarch64_baseos_latest
kernel-uek-container-5.15.0-308.179.6.2.el9uek.aarch64.rpm8515809f7b6615a9aed4233ef522fbd55bae3ccb2fc36d9015e5be33dd8eacc9-ol9_aarch64_u5_baseos_patch
kernel-uek-container-debug-5.15.0-308.179.6.2.el9uek.aarch64.rpm55473b7a6acf4eb207170d2354d6189ec87a617b094744380b3ec43e2f314ece-ol9_aarch64_baseos_latest
kernel-uek-container-debug-5.15.0-308.179.6.2.el9uek.aarch64.rpm55473b7a6acf4eb207170d2354d6189ec87a617b094744380b3ec43e2f314ece-ol9_aarch64_u5_baseos_patch
kernel-uek-core-5.15.0-308.179.6.2.el9uek.aarch64.rpm9613d2d9980805a4c28fc3d6ac0b79a21cab105cb471129d97782267305bc62e-ol9_aarch64_baseos_latest
kernel-uek-core-5.15.0-308.179.6.2.el9uek.aarch64.rpm9613d2d9980805a4c28fc3d6ac0b79a21cab105cb471129d97782267305bc62e-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-5.15.0-308.179.6.2.el9uek.aarch64.rpme5968b032459e4b59c0e1134e5da041fe783846bbd3a51b3c2ffeffa597156bd-ol9_aarch64_baseos_latest
kernel-uek-debug-5.15.0-308.179.6.2.el9uek.aarch64.rpme5968b032459e4b59c0e1134e5da041fe783846bbd3a51b3c2ffeffa597156bd-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-core-5.15.0-308.179.6.2.el9uek.aarch64.rpm6f4afd2b7aaa168c4f5c617ad961b9f6252e0efad88ce13ad57d2e9e53fe9499-ol9_aarch64_baseos_latest
kernel-uek-debug-core-5.15.0-308.179.6.2.el9uek.aarch64.rpm6f4afd2b7aaa168c4f5c617ad961b9f6252e0efad88ce13ad57d2e9e53fe9499-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-devel-5.15.0-308.179.6.2.el9uek.aarch64.rpm772a2fee1eb284ae29748020b3b5e1b3d4bc383eb83b046de41af90925473d79-ol9_aarch64_baseos_latest
kernel-uek-debug-devel-5.15.0-308.179.6.2.el9uek.aarch64.rpm772a2fee1eb284ae29748020b3b5e1b3d4bc383eb83b046de41af90925473d79-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-modules-5.15.0-308.179.6.2.el9uek.aarch64.rpm596f00258c35930d98100e9cbf4ec88c1fa071735d2f3df86a49f4d5f9e9c416-ol9_aarch64_baseos_latest
kernel-uek-debug-modules-5.15.0-308.179.6.2.el9uek.aarch64.rpm596f00258c35930d98100e9cbf4ec88c1fa071735d2f3df86a49f4d5f9e9c416-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-modules-extra-5.15.0-308.179.6.2.el9uek.aarch64.rpm3d52b9c3c32fc0b2e8970598a4a603d8498b3de5115cc6c07e428bc9b9792ecc-ol9_aarch64_baseos_latest
kernel-uek-debug-modules-extra-5.15.0-308.179.6.2.el9uek.aarch64.rpm3d52b9c3c32fc0b2e8970598a4a603d8498b3de5115cc6c07e428bc9b9792ecc-ol9_aarch64_u5_baseos_patch
kernel-uek-devel-5.15.0-308.179.6.2.el9uek.aarch64.rpm523e532e73d4c303c28a84a7062a5ad7d81c1e5f062371acbc168d092a78c083-ol9_aarch64_baseos_latest
kernel-uek-devel-5.15.0-308.179.6.2.el9uek.aarch64.rpm523e532e73d4c303c28a84a7062a5ad7d81c1e5f062371acbc168d092a78c083-ol9_aarch64_u5_baseos_patch
kernel-uek-doc-5.15.0-308.179.6.2.el9uek.noarch.rpmbf3559c0e3bdba013371996d78484db4dff36bb37ed123f6bc353219396c33a9-ol9_aarch64_baseos_latest
kernel-uek-doc-5.15.0-308.179.6.2.el9uek.noarch.rpmbf3559c0e3bdba013371996d78484db4dff36bb37ed123f6bc353219396c33a9-ol9_aarch64_u5_baseos_patch
kernel-uek-modules-5.15.0-308.179.6.2.el9uek.aarch64.rpm4bfc85e6f93bfd70018b872922145c10e78b1e757572e35b79e7edbea2c377d7-ol9_aarch64_baseos_latest
kernel-uek-modules-5.15.0-308.179.6.2.el9uek.aarch64.rpm4bfc85e6f93bfd70018b872922145c10e78b1e757572e35b79e7edbea2c377d7-ol9_aarch64_u5_baseos_patch
kernel-uek-modules-extra-5.15.0-308.179.6.2.el9uek.aarch64.rpmdf0a3aa0502faa5e9c219f5411542508074c61697784f5d93c32bcf3beff9c8a-ol9_aarch64_baseos_latest
kernel-uek-modules-extra-5.15.0-308.179.6.2.el9uek.aarch64.rpmdf0a3aa0502faa5e9c219f5411542508074c61697784f5d93c32bcf3beff9c8a-ol9_aarch64_u5_baseos_patch
kernel-uek64k-5.15.0-308.179.6.2.el9uek.aarch64.rpm284c66ddf416a5e0ecb9c4448c4a3b77b80c786dabb744180cd983bb3cd839b6-ol9_aarch64_baseos_latest
kernel-uek64k-5.15.0-308.179.6.2.el9uek.aarch64.rpm284c66ddf416a5e0ecb9c4448c4a3b77b80c786dabb744180cd983bb3cd839b6-ol9_aarch64_u5_baseos_patch
kernel-uek64k-core-5.15.0-308.179.6.2.el9uek.aarch64.rpm87c8a66505adefaa88db133f909dd2a3ed57d4f416ad988428e5585a7a6a6bda-ol9_aarch64_baseos_latest
kernel-uek64k-core-5.15.0-308.179.6.2.el9uek.aarch64.rpm87c8a66505adefaa88db133f909dd2a3ed57d4f416ad988428e5585a7a6a6bda-ol9_aarch64_u5_baseos_patch
kernel-uek64k-modules-5.15.0-308.179.6.2.el9uek.aarch64.rpm11d4089e6fc6ca9aca7fd8c643274e5e132f3f5a005048cc8faba57ed8fb6aa3-ol9_aarch64_baseos_latest
kernel-uek64k-modules-5.15.0-308.179.6.2.el9uek.aarch64.rpm11d4089e6fc6ca9aca7fd8c643274e5e132f3f5a005048cc8faba57ed8fb6aa3-ol9_aarch64_u5_baseos_patch
kernel-uek64k-modules-extra-5.15.0-308.179.6.2.el9uek.aarch64.rpmaa0c532266a59af0d8b8f23c820a52af3d8782ca2e90c48a3a57383a64bf00ea-ol9_aarch64_baseos_latest
kernel-uek64k-modules-extra-5.15.0-308.179.6.2.el9uek.aarch64.rpmaa0c532266a59af0d8b8f23c820a52af3d8782ca2e90c48a3a57383a64bf00ea-ol9_aarch64_u5_baseos_patch
Oracle Linux 9 (x86_64) kernel-uek-5.15.0-308.179.6.2.el9uek.src.rpm2b17d98b3dceffb0a52382c291d291fefe1c1c8210d4280891a6f5bb2f7d4939-ol9_x86_64_UEKR7
bpftool-5.15.0-308.179.6.2.el9uek.x86_64.rpm0906bd9b2d07e30c7e5519e68f33d7ee835b0d89e54540a0f7d1970d0e613e1d-ol9_x86_64_UEKR7
kernel-uek-5.15.0-308.179.6.2.el9uek.x86_64.rpmcc23df6582e432129694fd3c7b0d8f00f95a1f61ff4d2b17c7532714a53a6ebd-ol9_x86_64_UEKR7
kernel-uek-container-5.15.0-308.179.6.2.el9uek.x86_64.rpm17dcc7bb76d4b7266040692918c8f05a5d1307b38b841019493b41538a67bae6-ol9_x86_64_UEKR7
kernel-uek-container-debug-5.15.0-308.179.6.2.el9uek.x86_64.rpm3eb49bc9ca2237a8a0c462846f01512ac00b430821edd52c8cfd421f260df841-ol9_x86_64_UEKR7
kernel-uek-core-5.15.0-308.179.6.2.el9uek.x86_64.rpm3b99b4f724d556e1dee339401e2c80ef94dbfcb049bb7e5438f17c11096877ca-ol9_x86_64_UEKR7
kernel-uek-debug-5.15.0-308.179.6.2.el9uek.x86_64.rpm049562141a9cd93ac01e2999b236f4ac6f43e6d55c4a32e8e9612122eaf9822b-ol9_x86_64_UEKR7
kernel-uek-debug-core-5.15.0-308.179.6.2.el9uek.x86_64.rpm12070afdab086359f8d02e45190bb2aa060f8079e1cde6b873a0edc0a907770c-ol9_x86_64_UEKR7
kernel-uek-debug-devel-5.15.0-308.179.6.2.el9uek.x86_64.rpmc80496dfe9e3e529920838e0355623c4daea531be4a512cbdf8edcd5bfd113fe-ol9_x86_64_UEKR7
kernel-uek-debug-modules-5.15.0-308.179.6.2.el9uek.x86_64.rpm121ff7c0c29e2d7becfba17b957fd1d8894adac6c1066f73076449cf7c1f9dc7-ol9_x86_64_UEKR7
kernel-uek-debug-modules-extra-5.15.0-308.179.6.2.el9uek.x86_64.rpm5d831893a9dc85a13efbac22c5b378fa8dced03799875e15a68eddd031f4a741-ol9_x86_64_UEKR7
kernel-uek-devel-5.15.0-308.179.6.2.el9uek.x86_64.rpmd937340b9a6a4815e4df316df5d390cc2c05f6b70eaf9160ebf343442379c19d-ol9_x86_64_UEKR7
kernel-uek-doc-5.15.0-308.179.6.2.el9uek.noarch.rpmbf3559c0e3bdba013371996d78484db4dff36bb37ed123f6bc353219396c33a9-ol9_x86_64_UEKR7
kernel-uek-modules-5.15.0-308.179.6.2.el9uek.x86_64.rpmf3ada6cfb99dc5f5afd0d996cfb2b9c48798bcd94d8ad7082c36f9d8d247e6fe-ol9_x86_64_UEKR7
kernel-uek-modules-extra-5.15.0-308.179.6.2.el9uek.x86_64.rpmb96c418c2da73aad5492ba13c35fbea3bf31da496f969d5239499d8028cbb51b-ol9_x86_64_UEKR7



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights