Skip to content
OpenAdvisories
High ELSA-2025-21006 1 CVE

Important: kea security update (Oracle Linux 10)

Published Dec 3, 2025 · Updated Dec 3, 2025

Ecosystem: Oracle Linux

Summary

[3.0.1-2]
- Fixes CVE-2025-11232

[3.0.1-1]
- New version 3.0.1
- Fixes CVE-2025-40779

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 10 kea 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-doc 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-hooks 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-keama 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-libs 0:3.0.1-2.el10_1

Vulnerabilities 1

  • High 7.5
    CVE-2025-40779

    Kea crash upon interaction between specific client options and subnet selection

    If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadc…

    ISC Kea