ELSA-2025-20560

ELSA-2025-20560 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-09-09

Description

[5.4.17-2136.347.6.1]
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343661]
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343661]
- x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343661]
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38343661]
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38343661]
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38343661]
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38343661]

Related CVEs

CVE-2025-40300

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2136.347.6.1.el7uek.src.rpm	e9e65219a8cc69380838a8bad5a19861ce05e15299622a2d80f896eb72dfdfb9	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	bd55614ca889ecb0df56d17046d018b3411c97a7c424305aaa6f0613404441ff	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	1296a7ee7ff5a3717a6b97711a4c1a068438ae13a26a5c0bbf1218891991a9ce	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-debug-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	b16297d958122e0ddaf136060952b7589bde639e3c826f90f16aa9bcb6b70cf8	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	37080795afe20a562196bb68ca9aa37c035a3dba69b8e8fc999521c608bba08b	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-devel-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	6be6f0ad1e78c1b5522ec7dcf1d8ce3205bb5a601571fa8baf37eb0ce1c85c76	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-devel-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	aca4012ce5c476b9fa503881481b096f482588ebcca2eda7c7d18c8b89a73e6e	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-doc-5.4.17-2136.347.6.1.el7uek.noarch.rpm	3f6d9e06577c09ef1fc5ae21c0c58b568dd1cede75ac3c034ebd374e6ae0272a	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-tools-5.4.17-2136.347.6.1.el7uek.x86_64.rpm	a730b4472e9ecda01f04033828a5a7870d97f95c3e8f177b2488a571fc6d173a	-	ol7_x86_64_UEKR6_ELS
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2136.347.6.1.el8uek.src.rpm	fb1601f651863f30a9893b25d46c0d0375a3546f9cdb2e86758108741374ff6d	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.347.6.1.el8uek.src.rpm	fb1601f651863f30a9893b25d46c0d0375a3546f9cdb2e86758108741374ff6d	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	cfb2ce7144a56d51182d0820c096c467d4c08aa8e84b93b859a371a4280f32b9	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	cfb2ce7144a56d51182d0820c096c467d4c08aa8e84b93b859a371a4280f32b9	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	41c5cd142773abe9a60be7cf72b8e2439bc1563600d6c0d2bdc22caf3b558705	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	41c5cd142773abe9a60be7cf72b8e2439bc1563600d6c0d2bdc22caf3b558705	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-devel-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	27d79e029ec910c546ebf827b577af38e6b013813b19581020c9a00524f882ba	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	27d79e029ec910c546ebf827b577af38e6b013813b19581020c9a00524f882ba	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-devel-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	ab78560783a631a19db474fecdf7856b84948bb350ccf532cddbfa30a8823730	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2136.347.6.1.el8uek.aarch64.rpm	ab78560783a631a19db474fecdf7856b84948bb350ccf532cddbfa30a8823730	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-doc-5.4.17-2136.347.6.1.el8uek.noarch.rpm	df552596fe7fdc030c41ab7fa0ab96702da0a67a5733c70511d9a683df0f6401	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2136.347.6.1.el8uek.noarch.rpm	df552596fe7fdc030c41ab7fa0ab96702da0a67a5733c70511d9a683df0f6401	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2136.347.6.1.el8uek.src.rpm	fb1601f651863f30a9893b25d46c0d0375a3546f9cdb2e86758108741374ff6d	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2136.347.6.1.el8uek.x86_64.rpm	367b65992c5910be6235bf7948d330d4fbb1d447a7bc2ac5c3fa5cf53acce2f5	-	ol8_x86_64_UEKR6
	kernel-uek-container-5.4.17-2136.347.6.1.el8uek.x86_64.rpm	5d0668056bebb96109921b51e5cb229ad412c838c6edc80db00387be2267fd62	-	ol8_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2136.347.6.1.el8uek.x86_64.rpm	3e99dc8df6863bfb12fbb815376aee40dad5e04044a180455186aecbb2f58286	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2136.347.6.1.el8uek.x86_64.rpm	dfb0c218f76af1c866f9fa287912d185224b6c02ace8c4f10eecabdd409e5a23	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.347.6.1.el8uek.x86_64.rpm	4ebeb496c3f274640e786f343993de09fcbe8f22cbdd3efa6f4e0eb5d8d2c122	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2136.347.6.1.el8uek.x86_64.rpm	46bc9f04f3d2bd5abe7b993485d5de1c01274fa960bea6ab6a8941527136e2dd	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2136.347.6.1.el8uek.noarch.rpm	df552596fe7fdc030c41ab7fa0ab96702da0a67a5733c70511d9a683df0f6401	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team