Stay Connected:

ELSA-2025-22395

ELSA-2025-22395 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-12-05

Description


[6.12.0-124.16.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-124.16.1]
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}

[6.12.0-124.15.1]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}

[6.12.0-124.14.1]
- ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]


Related CVEs


CVE-2025-22068
CVE-2025-38724
CVE-2025-39883
CVE-2025-39898
CVE-2025-39918
CVE-2025-39971

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_aarch64_appstream
kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_aarch64_baseos_latest
kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_aarch64_codeready_builder
kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_aarch64_u1_baseos_patch
kernel-cross-headers-6.12.0-124.16.1.el10_1.aarch64.rpma8f90ad37869fdd63b58ef10a7c76b0f4d0002c35b6ac5fa4873e950e48ef621-ol10_aarch64_codeready_builder
kernel-headers-6.12.0-124.16.1.el10_1.aarch64.rpm55c31d660ff3c8403275fc0b6727fceba1285416d5b4be97bbfcd610b8948349-ol10_aarch64_appstream
kernel-tools-6.12.0-124.16.1.el10_1.aarch64.rpmd3e0fcbd7253fe96471a69bc4e30508989aeaa99265414e32a62d670534cb68a-ol10_aarch64_baseos_latest
kernel-tools-6.12.0-124.16.1.el10_1.aarch64.rpmd3e0fcbd7253fe96471a69bc4e30508989aeaa99265414e32a62d670534cb68a-ol10_aarch64_u1_baseos_patch
kernel-tools-libs-6.12.0-124.16.1.el10_1.aarch64.rpm5f6e1f453438b9ea4aaca83b11d4608d610dbe99d81940800a0fcac5f281d747-ol10_aarch64_baseos_latest
kernel-tools-libs-6.12.0-124.16.1.el10_1.aarch64.rpm5f6e1f453438b9ea4aaca83b11d4608d610dbe99d81940800a0fcac5f281d747-ol10_aarch64_u1_baseos_patch
kernel-tools-libs-devel-6.12.0-124.16.1.el10_1.aarch64.rpm0b924f8d4ba053aae5229dfb112ae961d48721358160f516d855653b6474a815-ol10_aarch64_codeready_builder
libperf-6.12.0-124.16.1.el10_1.aarch64.rpm5918e5a7b2059aee62b4842503850f798b0a2b03f1a619a3abc1cefc04ace910-ol10_aarch64_codeready_builder
perf-6.12.0-124.16.1.el10_1.aarch64.rpm41ca637be23a3fb355899bbb26a61813a51f2e509b1c60086fb79fd4c657665f-ol10_aarch64_appstream
python3-perf-6.12.0-124.16.1.el10_1.aarch64.rpm0fd190734904133fa7b1a018a01a1fcc223a5b44c4292aa597905cfdc6ec6d20-ol10_aarch64_appstream
rtla-6.12.0-124.16.1.el10_1.aarch64.rpm41ee16485b0fe5ce7168eb38cce838b50a38027e9c24a357e453bfe983ee4f9b-ol10_aarch64_appstream
rv-6.12.0-124.16.1.el10_1.aarch64.rpm4db2641d30359f02fb09756b88f3d58a7443edb600b0acf96a32ee2bc47acded-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_x86_64_appstream
kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_x86_64_baseos_latest
kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_x86_64_codeready_builder
kernel-6.12.0-124.16.1.el10_1.src.rpm12ef07e170ce021d0ceb0de6a5efcba18ebe842fa06d5c7b02b97b9a8a93d436-ol10_x86_64_u1_baseos_patch
kernel-6.12.0-124.16.1.el10_1.x86_64.rpmca3ad18235f660bc580f41964196f556c7cec3a39acfdc2d7fcc920b69902374-ol10_x86_64_baseos_latest
kernel-6.12.0-124.16.1.el10_1.x86_64.rpmca3ad18235f660bc580f41964196f556c7cec3a39acfdc2d7fcc920b69902374-ol10_x86_64_u1_baseos_patch
kernel-abi-stablelists-6.12.0-124.16.1.el10_1.noarch.rpm583433b9a42ed7647608407e6352c4ecab8cacf2444fbf68a844131a72dde1ad-ol10_x86_64_baseos_latest
kernel-abi-stablelists-6.12.0-124.16.1.el10_1.noarch.rpm583433b9a42ed7647608407e6352c4ecab8cacf2444fbf68a844131a72dde1ad-ol10_x86_64_u1_baseos_patch
kernel-core-6.12.0-124.16.1.el10_1.x86_64.rpm05c5f7bdd4f86dafe29127c90db3fb7467ecabf4eb832cf3f875b3040a701b9a-ol10_x86_64_baseos_latest
kernel-core-6.12.0-124.16.1.el10_1.x86_64.rpm05c5f7bdd4f86dafe29127c90db3fb7467ecabf4eb832cf3f875b3040a701b9a-ol10_x86_64_u1_baseos_patch
kernel-cross-headers-6.12.0-124.16.1.el10_1.x86_64.rpma3dfd3aa0e78b359d4463290190da20edd8219bba40bb574bfc125810738b434-ol10_x86_64_codeready_builder
kernel-debug-6.12.0-124.16.1.el10_1.x86_64.rpm0ac92cf783df170e7c90d06f733922b35f85c392cbf9b80c5d5e551595a13d65-ol10_x86_64_baseos_latest
kernel-debug-6.12.0-124.16.1.el10_1.x86_64.rpm0ac92cf783df170e7c90d06f733922b35f85c392cbf9b80c5d5e551595a13d65-ol10_x86_64_u1_baseos_patch
kernel-debug-core-6.12.0-124.16.1.el10_1.x86_64.rpmf0533f7fee2d0c710b57f9dfad459e7f2729e8a679315d8e1ba22d604e3f1d75-ol10_x86_64_baseos_latest
kernel-debug-core-6.12.0-124.16.1.el10_1.x86_64.rpmf0533f7fee2d0c710b57f9dfad459e7f2729e8a679315d8e1ba22d604e3f1d75-ol10_x86_64_u1_baseos_patch
kernel-debug-devel-6.12.0-124.16.1.el10_1.x86_64.rpm672c5b4048ca275ef2d3602ec144c515cdc839df3a6671b6a81417ef77d8ccc6-ol10_x86_64_appstream
kernel-debug-devel-matched-6.12.0-124.16.1.el10_1.x86_64.rpm6d8f40fc471018a8566ba4cc7078f1e5004ce8ef308beec081810d33fb25c26d-ol10_x86_64_appstream
kernel-debug-modules-6.12.0-124.16.1.el10_1.x86_64.rpm6f66d1aaf530e80a53b9cfcdf9f791274bd47f34edf977fba6a1ba922c7d9716-ol10_x86_64_baseos_latest
kernel-debug-modules-6.12.0-124.16.1.el10_1.x86_64.rpm6f66d1aaf530e80a53b9cfcdf9f791274bd47f34edf977fba6a1ba922c7d9716-ol10_x86_64_u1_baseos_patch
kernel-debug-modules-core-6.12.0-124.16.1.el10_1.x86_64.rpm066113361b7d15746c53df41fe2a389689b5cd23fa26deb015489f91776f0fe3-ol10_x86_64_baseos_latest
kernel-debug-modules-core-6.12.0-124.16.1.el10_1.x86_64.rpm066113361b7d15746c53df41fe2a389689b5cd23fa26deb015489f91776f0fe3-ol10_x86_64_u1_baseos_patch
kernel-debug-modules-extra-6.12.0-124.16.1.el10_1.x86_64.rpmc615541f56918797bc005a52c158b9fc7aa9279542c0efdb8d14291fdccc22a5-ol10_x86_64_baseos_latest
kernel-debug-modules-extra-6.12.0-124.16.1.el10_1.x86_64.rpmc615541f56918797bc005a52c158b9fc7aa9279542c0efdb8d14291fdccc22a5-ol10_x86_64_u1_baseos_patch
kernel-debug-uki-virt-6.12.0-124.16.1.el10_1.x86_64.rpm5a54e50257590c3a5ff4d1c324f1ff6f5560a4cc96c7c263b3f2527ae9eece7d-ol10_x86_64_baseos_latest
kernel-debug-uki-virt-6.12.0-124.16.1.el10_1.x86_64.rpm5a54e50257590c3a5ff4d1c324f1ff6f5560a4cc96c7c263b3f2527ae9eece7d-ol10_x86_64_u1_baseos_patch
kernel-devel-6.12.0-124.16.1.el10_1.x86_64.rpmf713fc05e0197776f40530f2510521adcf0991859fc20898e7af9297ac64f79a-ol10_x86_64_appstream
kernel-devel-matched-6.12.0-124.16.1.el10_1.x86_64.rpm6bb6922c64a5bb0dd68848314e8157bdb6dcd4a16f87312a0f5d8523f651eff9-ol10_x86_64_appstream
kernel-doc-6.12.0-124.16.1.el10_1.noarch.rpmfe62feee7e14422e929befec3fa8a2e037d2caf61214829cb806d0a443517462-ol10_x86_64_appstream
kernel-headers-6.12.0-124.16.1.el10_1.x86_64.rpm38e5a21b95009129551c79a405aedc49e48d43fddba6d224d97a0c23b0b52d2e-ol10_x86_64_appstream
kernel-modules-6.12.0-124.16.1.el10_1.x86_64.rpm5e89736c7e6b6d98f1de196817562112b8e69faef54ba80e811cb5ed98cca974-ol10_x86_64_baseos_latest
kernel-modules-6.12.0-124.16.1.el10_1.x86_64.rpm5e89736c7e6b6d98f1de196817562112b8e69faef54ba80e811cb5ed98cca974-ol10_x86_64_u1_baseos_patch
kernel-modules-core-6.12.0-124.16.1.el10_1.x86_64.rpm3bb9839395bcc4a20cf975f0faf46296543ead9d83525787372e04e4c25a03fc-ol10_x86_64_baseos_latest
kernel-modules-core-6.12.0-124.16.1.el10_1.x86_64.rpm3bb9839395bcc4a20cf975f0faf46296543ead9d83525787372e04e4c25a03fc-ol10_x86_64_u1_baseos_patch
kernel-modules-extra-6.12.0-124.16.1.el10_1.x86_64.rpmd3f4d7f8d8a852c5884ab05e09fa48785655f0485cfecceae4bcc0fb5e4a9117-ol10_x86_64_baseos_latest
kernel-modules-extra-6.12.0-124.16.1.el10_1.x86_64.rpmd3f4d7f8d8a852c5884ab05e09fa48785655f0485cfecceae4bcc0fb5e4a9117-ol10_x86_64_u1_baseos_patch
kernel-modules-extra-matched-6.12.0-124.16.1.el10_1.x86_64.rpm5c48cd8666201f209480322d7dbd75e3e112549b3a075cf58c87e2c22758e566-ol10_x86_64_baseos_latest
kernel-modules-extra-matched-6.12.0-124.16.1.el10_1.x86_64.rpm5c48cd8666201f209480322d7dbd75e3e112549b3a075cf58c87e2c22758e566-ol10_x86_64_u1_baseos_patch
kernel-tools-6.12.0-124.16.1.el10_1.x86_64.rpm5f9928b18f288abb7827a19330e49e43d1af8fb0a3a67394988de8caaf09fc23-ol10_x86_64_baseos_latest
kernel-tools-6.12.0-124.16.1.el10_1.x86_64.rpm5f9928b18f288abb7827a19330e49e43d1af8fb0a3a67394988de8caaf09fc23-ol10_x86_64_u1_baseos_patch
kernel-tools-libs-6.12.0-124.16.1.el10_1.x86_64.rpme30bb24a6478f350cbc1deb65efbbaecce752f24b20606f3600a70282b2e9e54-ol10_x86_64_baseos_latest
kernel-tools-libs-6.12.0-124.16.1.el10_1.x86_64.rpme30bb24a6478f350cbc1deb65efbbaecce752f24b20606f3600a70282b2e9e54-ol10_x86_64_u1_baseos_patch
kernel-tools-libs-devel-6.12.0-124.16.1.el10_1.x86_64.rpmcc8c91238a4099ede0a16ffc83f862f6a08a55eb138ba8c7502764a3ee24f486-ol10_x86_64_codeready_builder
kernel-uki-virt-6.12.0-124.16.1.el10_1.x86_64.rpm501a6996352b3d6b30964d6a406f24b8177a542a14432520bc4d60abc2b8575c-ol10_x86_64_baseos_latest
kernel-uki-virt-6.12.0-124.16.1.el10_1.x86_64.rpm501a6996352b3d6b30964d6a406f24b8177a542a14432520bc4d60abc2b8575c-ol10_x86_64_u1_baseos_patch
kernel-uki-virt-addons-6.12.0-124.16.1.el10_1.x86_64.rpm36f2313392c3cd43b5c198be083d92ddd775de743b4909be94139ae31a952fa9-ol10_x86_64_baseos_latest
kernel-uki-virt-addons-6.12.0-124.16.1.el10_1.x86_64.rpm36f2313392c3cd43b5c198be083d92ddd775de743b4909be94139ae31a952fa9-ol10_x86_64_u1_baseos_patch
libperf-6.12.0-124.16.1.el10_1.x86_64.rpmbbce7b28402396b3d9bd332c09332248cd9e7c4b151a4d890f4c94354017ecf8-ol10_x86_64_codeready_builder
perf-6.12.0-124.16.1.el10_1.x86_64.rpm24bbee3d717a48e8f31b5043f4398a1a154f100bc198ef3375f83cf933090255-ol10_x86_64_appstream
python3-perf-6.12.0-124.16.1.el10_1.x86_64.rpmf06e3973182ba7488aea247374c94c46e9c19ad7dfdbe78655e00892b1bc73f3-ol10_x86_64_appstream
rtla-6.12.0-124.16.1.el10_1.x86_64.rpm658894b7d3d1f5afa52570d739d25bd8058b0b6c48f3b8960b725701dd040fa4-ol10_x86_64_appstream
rv-6.12.0-124.16.1.el10_1.x86_64.rpm91ceceecc17742db409ffd122fa0721184f868187e887817d9ce08e4b6e9e446-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights