Summary
[3.10.0-1160.119.1.0.12]
- scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) [Orabug: 38414589]
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) [Orabug: 38414589]
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bpftool | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-1160.119.1.0.12.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-1160.119.1.0.12.el7 |
Vulnerabilities 2
-
High 7.8
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() …
KEV Sep 4, 2025 -
Unscored —
scsi: lpfc: Use memcpy() for BIOS version
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is…