Skip to content
OpenAdvisories
High ELSA-2025-20371 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 10)

Published Jun 26, 2025 · Updated Jun 26, 2025

Summary

[6.12.0-100.28.2.el10uek]
- sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval)
- certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967533]
- Revert 'block: sysfs option to change ioticks granularity' (Gulam Mohamed) [Orabug: 37921776]
- RDS: use pin_user_pages_fast() (Stephen Brennan) [Orabug: 37968545]

[6.12.0-100.28.1.el10uek]
- KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Michael Roth) [Orabug: 37894105]
- KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Michael Roth) [Orabug: 37894105]
- Revert 'KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching' (Liam Merwick) [Orabug: 37894105]
- uek-rpm: Enable SECURITY_DMESG_RESTRICT in UEK8 (Harshit Mogalapalli) [Orabug: 37867042]

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 10 kernel-uek 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-core 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-core 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-devel 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-core 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-deprecated 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-desktop 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-extra 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-usb 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-debug-modules-wireless 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-devel 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-doc 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-core 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-deprecated 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-desktop 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-extra 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-extra-netfilter 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-usb 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-modules-wireless 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek-tools 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-core 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-devel 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-core 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-deprecated 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-desktop 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-extra 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-extra-netfilter 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-usb 0:6.12.0-100.28.2.el10uek
Oracle Linux · 10 kernel-uek64k-modules-wireless 0:6.12.0-100.28.2.el10uek

Vulnerabilities 1

  • Unscored —

    sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash

    In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash There is a code path in dequeue_entities() that can set the slice of a sched_entity to U64_MAX, which sometimes results in …