Skip to content
OpenAdvisories
High ELSA-2025-20318 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published May 12, 2025 · Updated May 12, 2025

Summary

[6.12.0-1.23.3.1]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920680]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920680]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920680]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}

Fixed packages 33

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-1.23.3.1.el9uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-1.23.3.1.el9uek

Vulnerabilities 1