Oracle alert ELSA-2025-20608 (kernel)

From:
             
 
Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com>
To:
             
 
el-errata@oss.oracle.com
Subject:
             
 
[El-errata] ELSA-2025-20608 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
Date:
             
 
Wed, 24 Sep 2025 07:11:55 -0700
Message-ID:
             
 
<mailman.46.1758723123.31.el-errata@oss.oracle.com>
Oracle Linux Security Advisory ELSA-2025-20608

http://linux.oracle.com/errata/ELSA-2025-20608.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-103.40.4.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-103.40.4.3.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-103.40.4.3.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0...

Related CVEs:

CVE-2025-38500
CVE-2025-38560
CVE-2025-38566
CVE-2025-38571
CVE-2025-38618
CVE-2025-39682




Description of changes:

[6.12.0-103.40.4.3.el9uek]
- x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky)  [Orabug: 38453836]
{CVE-2025-38560}
- xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger)
[Orabug: 38453837]  {CVE-2025-38500}
- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38453835]
{CVE-2025-38566}
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38453834]
{CVE-2025-38571}
- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic)  [Orabug: 38453833]
{CVE-2025-38618}
- tls: fix handling of zero-length records on the rx_list (Jakub Kicinski)  [Orabug: 38453832]
{CVE-2025-39682}


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata