{"cves":["CVE-2025-38560","CVE-2025-38500","CVE-2025-38566","CVE-2025-38618","CVE-2025-39682","CVE-2025-38571"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[6.12.0-103.40.4.3]\n- x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky)  [Orabug: 38453836]  {CVE-2025-38560}\n- xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger)  [Orabug: 38453837]  {CVE-2025-38500}\n- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38453835]  {CVE-2025-38566}\n- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38453834]  {CVE-2025-38571}\n- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic)  [Orabug: 38453833]  {CVE-2025-38618}\n- tls: fix handling of zero-length records on the rx_list (Jakub Kicinski)  [Orabug: 38453832]  {CVE-2025-39682}","id":"ELSA-2025-20608","ovalId":"oval:com.oracle.elsa:def:202520608","source":"oracle_linux","title":"ELSA-2025-20608: Unbreakable Enterprise kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2025-20608.html"}