Skip to content
OpenAdvisories
Medium 1 exploited CVE ELSA-2025-16904 6 CVEs

Moderate: kernel security update (Oracle Linux 10)

Published Oct 1, 2025 · Updated Oct 1, 2025

Ecosystem: Oracle Linux

Summary

[6.12.0-55.37.1.0.1]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

Fixed packages 29

ReleasePackageFixed in
Oracle Linux · 10 kernel 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-abi-stablelists 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-core 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-cross-headers 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-core 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-devel 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-devel-matched 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-modules 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-modules-core 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-modules-extra 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-uki-virt 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-devel 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-devel-matched 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-doc 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-headers 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-modules 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-modules-core 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-modules-extra 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-tools 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-tools-libs 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-tools-libs-devel 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-uki-virt 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 kernel-uki-virt-addons 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 libperf 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 perf 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 python3-perf 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 rtla 0:6.12.0-55.37.1.0.1.el10_0
Oracle Linux · 10 rv 0:6.12.0-55.37.1.0.1.el10_0

Vulnerabilities 6

  • Critical 9.8
    CVE-2025-39682 Exploited Public exploit

    tls: fix handling of zero-length records on the rx_list

    In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • Critical 9.8
    CVE-2025-38527

    smb: client: fix use-after-free in cifs_oplock_break

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structure when unmounting: cifs_oplock_break()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38396

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

    In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to create anonymous inodes with proper security context. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-39698

    io_uring/futex: ensure io_futex_wait() cleans up properly on failure

    In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data field, but the request isn't marked with RE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-38523

    cifs: Fix the smbd_response slab to allow usercopy

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbd_response slab to allow usercopy The handling of received data in the smbdirect client code involves using copy_to_iter() to copy data from the smbd_reponse struct's packet …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2025-39694

    s390/sclp: Fix SCCB present check

    In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed afte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu