Skip to content
OpenAdvisories
High ELSA-2025-28067 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Dec 22, 2025 · Updated Dec 22, 2025

Ecosystem: Oracle Linux

Summary

[5.15.0-315.196.5.2]
- tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38786195] {CVE-2025-40280}
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38786194] {CVE-2025-40271}
- vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38786193] {CVE-2025-40248}

Fixed packages 19

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek64k 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-core 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-devel 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-modules 0:5.15.0-315.196.5.2.el9uek
Oracle Linux · 8 kernel-uek64k-modules-extra 0:5.15.0-315.196.5.2.el9uek

Vulnerabilities 3

  • High 7.8
    CVE-2025-40248

    vsock: Ignore signal/timeout on connect() if already established

    In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established socket leads to several issues: 1. connec…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40271 Public exploit

    fs/proc: fix uaf in proc_readdir_de()

    In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is erased from subdir rbtree through rb_erase(), but not set the node to EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE() set the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-40280

    tipc: Fix use-after-free in tipc_mon_reinit_self().

    In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_mon_reinit_self(). syzbot reported use-after-free of tipc_net(net)->monitors[] in tipc_mon_reinit_self(). [0] The array is protected by RTNL, but tipc_mon_rei…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu