Skip to content
OpenAdvisories
High ELSA-2025-25731 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Nov 2, 2025 · Updated Nov 2, 2025

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.348.3.1]
- i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38604168] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder) [Orabug: 38604168] {CVE-2025-39973}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.348.3.1.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.348.3.1.el7uek

Vulnerabilities 1

  • High 8.8
    CVE-2025-39973

    i40e: add validation for ring_len param

    In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To add…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux