Skip to content
OpenAdvisories
High ELSA-2025-28066 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

Published Dec 22, 2025 · Updated Dec 22, 2025

Ecosystem: Oracle Linux

Summary

[6.12.0-106.55.4.2]
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang) {CVE-2025-40271}
- xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) {CVE-2025-40215}

Fixed packages 35

ReleasePackageFixed in
Oracle Linux · 9 kernel-uek 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-core 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-core 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-devel 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-core 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-deprecated 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-desktop 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-extra-netfilter 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-usb 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-debug-modules-wireless 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-devel 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-doc 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-core 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-deprecated 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-desktop 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-extra-netfilter 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-usb 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-modules-wireless 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek-tools 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-core 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-devel 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-core 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-deprecated 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-desktop 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-extra-netfilter 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-usb 0:6.12.0-106.55.4.2.el10uek
Oracle Linux · 9 kernel-uek64k-modules-wireless 0:6.12.0-106.55.4.2.el10uek

Vulnerabilities 2

  • High 7.8
    CVE-2025-40215

    xfrm: delete x->tunnel as we delete x

    In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get deleted (from the various lists and hashtables) as the last user state that needed that fallback is destroyed (…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40271 Public exploit

    fs/proc: fix uaf in proc_readdir_de()

    In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is erased from subdir rbtree through rb_erase(), but not set the node to EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE() set the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu