Skip to content
OpenAdvisories
Medium ELSA-2025-20650 1 CVE

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Oct 6, 2025 · Updated Oct 6, 2025

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.347.6.4]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.347.6.4.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.347.6.4.el7uek

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-38724

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

    In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux