Summary
[5.15.0-313.189.5.3]
- i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38603025] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder) [Orabug: 38603025]
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-313.189.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-313.189.5.3.el9uek |
Vulnerabilities 1
-
High 8.8
i40e: add validation for ring_len param
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To add…