Skip to content
OpenAdvisories
High ELSA-2025-20649 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Oct 6, 2025 · Updated Oct 6, 2025

Ecosystem: Oracle Linux

Summary

[6.12.0-103.40.4.4]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38500610] {CVE-2025-38724}
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38500621] {CVE-2025-39698}
- kernfs: Fix UAF in polling when open file is released (Chen Ridong) [Orabug: 38500629] {CVE-2025-39881}
- fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38500632] {CVE-2025-39866}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-103.40.4.4.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-103.40.4.4.el10uek

Vulnerabilities 4

  • Critical 9.8
    CVE-2025-38724

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

    In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-39698

    io_uring/futex: ensure io_futex_wait() cleans up properly on failure

    In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data field, but the request isn't marked with RE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-39866 Public exploit

    fs: writeback: fix use-after-free in __mark_inode_dirty()

    In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching. CPU: 1 PID: 5…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-39881

    kernfs: Fix UAF in polling when open file is released

    In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerability was identified in the PSI (Pressure Stall Information) monitoring mechanism: BUG: KASAN: slab-use-af…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux