Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2025-20721 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Oct 24, 2025 · Updated Oct 24, 2025

Ecosystem: Oracle Linux

Summary

[5.15.0-313.189.5.2]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38575798] {CVE-2025-38724}
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38575792]
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu) [Orabug: 38575792] {CVE-2025-39964}

Fixed packages 19

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek64k 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-core 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-devel 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-modules 0:5.15.0-313.189.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-modules-extra 0:5.15.0-313.189.5.2.el9uek

Vulnerabilities 2

  • High 7.8
    CVE-2025-39964 Exploited Public exploit

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • Critical 9.8
    CVE-2025-38724

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

    In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux