Skip to content
OpenAdvisories
High ELSA-2025-20323 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published May 12, 2025 · Updated May 12, 2025

Summary

[5.15.0-308.179.6.2]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920681]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920681]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920681]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternatives: Remove faulty optimization (Josh Poimboeuf) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternative: Optimize returns patching (Borislav Petkov (AMD)) [Orabug: 37863726] {CVE-2024-28956}

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek64k 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek64k-core 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek64k-modules 0:5.15.0-308.179.6.2.el9uek
Oracle Linux · 8 kernel-uek64k-modules-extra 0:5.15.0-308.179.6.2.el9uek

Vulnerabilities 1