Skip to content
OpenAdvisories
High ELSA-2025-20645 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 29, 2025 · Updated Sep 29, 2025

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.347.6.3]
- uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli) [Orabug: 38462132]

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.347.6.3.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.347.6.3.el7uek

Vulnerabilities 4

  • High 8.8
    CVE-2025-38495

    HID: core: ensure the allocated report buffer can contain the reserved report ID

    In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, curren…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38494

    HID: core: do not bypass hid_hw_raw_request

    In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver func…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38499

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

    In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hidden by a mount we wouldn't be able to …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38618

    vsock: Do not allow binding to VMADDR_PORT_ANY

    In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The so…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux