Summary
[6.12.0-105.51.5.1]
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38712788] {CVE-2025-40019}
- netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso) [Orabug: 38712786] {CVE-2025-38678}
Fixed packages 35
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | kernel-uek | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-core | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-core | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-devel | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-core | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-deprecated | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-desktop | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-extra | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-extra-netfilter | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-usb | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-wireless | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-devel | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-doc | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-core | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-deprecated | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-desktop | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-extra | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-extra-netfilter | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-usb | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-wireless | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek-tools | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-core | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-devel | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-core | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-deprecated | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-desktop | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-extra | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-extra-netfilter | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-usb | 0:6.12.0-105.51.5.1.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-wireless | 0:6.12.0-105.51.5.1.el10uek |
Vulnerabilities 2
-
High 7.8CVE-2025-38678 Public exploit
netfilter: nf_tables: reject duplicate device on updates
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the firs…
-
Unscored —CVE-2025-40019 Public exploit
crypto: essiv - Check ssize for decryption and in-place encryption
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.