{"cves":["CVE-2025-22103","CVE-2025-22106","CVE-2025-22113","CVE-2025-22124","CVE-2025-23133","CVE-2025-38272","CVE-2025-38306","CVE-2025-38322","CVE-2025-38453","CVE-2025-38502","CVE-2025-38556","CVE-2025-38676","CVE-2025-38730","CVE-2025-38732","CVE-2025-38735","CVE-2025-38737","CVE-2025-39673","CVE-2025-39675","CVE-2025-39676","CVE-2025-39679","CVE-2025-39681","CVE-2025-39683","CVE-2025-39689","CVE-2025-39691","CVE-2025-39693","CVE-2025-39695","CVE-2025-39697","CVE-2025-39698","CVE-2025-39700","CVE-2025-39705","CVE-2025-39706","CVE-2025-39707","CVE-2025-39713","CVE-2025-39714","CVE-2025-39718","CVE-2025-39721","CVE-2025-39723","CVE-2025-39724","CVE-2025-39759","CVE-2025-39765","CVE-2025-39766","CVE-2025-39770","CVE-2025-39772","CVE-2025-39773","CVE-2025-39779","CVE-2025-39780","CVE-2025-39782","CVE-2025-39790","CVE-2025-39791","CVE-2025-39800","CVE-2025-39805","CVE-2025-39806","CVE-2025-39808","CVE-2025-39810","CVE-2025-39812","CVE-2025-39813","CVE-2025-39817","CVE-2025-39819","CVE-2025-39824","CVE-2025-39825","CVE-2025-39828","CVE-2025-39829","CVE-2025-39832","CVE-2025-39835","CVE-2025-39838","CVE-2025-39841","CVE-2025-39842","CVE-2025-39843","CVE-2025-39844","CVE-2025-39845","CVE-2025-39847","CVE-2025-39849","CVE-2025-39850","CVE-2025-39851","CVE-2025-39852","CVE-2025-39853","CVE-2025-39854","CVE-2025-39860","CVE-2025-39861","CVE-2025-39863","CVE-2025-39864","CVE-2025-39865","CVE-2025-39866","CVE-2025-39867","CVE-2025-39870","CVE-2025-39871","CVE-2025-39877","CVE-2025-39880","CVE-2025-39881","CVE-2025-39883","CVE-2025-39884","CVE-2025-39885","CVE-2025-39886","CVE-2025-39891","CVE-2025-39894","CVE-2025-39895","CVE-2025-39898","CVE-2025-39899","CVE-2025-39900","CVE-2025-39901","CVE-2025-39902","CVE-2025-39903","CVE-2025-39911","CVE-2025-39913","CVE-2025-39914","CVE-2025-39917","CVE-2025-39918","CVE-2025-39922","CVE-2025-39923","CVE-2025-39926","CVE-2025-39927","CVE-2025-39929","CVE-2025-39931","CVE-2025-39932","CVE-2025-39940","CVE-2025-39945","CVE-2025-39946","CVE-2025-39947","CVE-2025-39948","CVE-2025-39949","CVE-2025-39953"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[6.12.0-105.51.5]\n- RDMA/mlx5: Fix vport loopback forcing for MPV device (Patrisious Haddad)  [Orabug: 38226124] \n- arm64: Utilize for_each_cpu_wrap for reference lookup (Beata Michalska)  [Orabug: 38454705] \n- arm64: Update AMU-based freq scale factor on entering idle (Beata Michalska)  [Orabug: 38454705] \n- arm64: Provide an AMU-based version of arch_freq_get_on_cpu (Beata Michalska)  [Orabug: 38454705] \n- cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry (Beata Michalska)  [Orabug: 38454705] \n- cpufreq: Allow arch_freq_get_on_cpu to return an error (Beata Michalska)  [Orabug: 38454705] \n- arch_topology: init capacity_freq_ref to 0 (Ionela Voinescu)  [Orabug: 38454705] \n- ACPI/HMAT: Move HMAT messages to pr_debug() (Dan Williams)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: monitor all ports by default (Besar Wicaksono)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Besar Wicaksono)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Besar Wicaksono)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: remove unsupported SCF events (Besar Wicaksono)  [Orabug: 38454705] \n- cppc_cpufreq: Remove HiSilicon CPPC workaround (Jie Zhan)  [Orabug: 38454705] \n- Revert 'sched/fair: Bump sd-max_newidle_lb_cost when newidle balance fails' (Joseph Salisbury)  [Orabug: 38498945] \n- uek-rpm/config-aarch64: Enable configs for Grace platform support (Vijay Kumar)  [Orabug: 38526374] \n- LTS version: v6.12.51 (Jack Vogel)  \n- ASoC: qcom: audioreach: fix potential null pointer dereference (Srinivas Kandagatla)  \n- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Matvey Kovalev)  \n- mm: swap: check for stable address space before operating on the VMA (Charan Teja Kalla)  \n- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo)  \n- media: rc: fix races with imon_disconnect() (Larshin Sergey)  \n- media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou)  \n- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou)  \n- scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran)  \n- gcc-plugins: Remove TODO_verify_il for GCC = 16 (Kees Cook)  \n- crypto: sha256 - fix crash at kexec (Breno Leitao)  \n- LTS version v6.12.50 (Jack Vogel)  \n- drm/i915/backlight: Return immediately when scale() finds invalid parameters (Guenter Roeck)  \n- Revert 'usb: xhci: remove option to change a default ring's TRB cycle bit' (Niklas Neronin)  \n- iommufd: Fix race during abort for file descriptors (Jason Gunthorpe)  \n- fbcon: Fix OOB access in font allocation (Thomas Zimmermann)  \n- fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda)  \n- mm/hugetlb: fix folio is still mapped when deleted (Jinjiang Tu)  \n- kmsan: fix out-of-bounds access to shadow memory (Eric Biggers)  \n- gpiolib: Extend software-node support to support secondary software-nodes (Hans de Goede)  \n- fs/proc/task_mmu: check p-vec_buf for NULL (Jakub Acs)  \n- afs: Fix potential null pointer dereference in afs_put_server (Zhen Ni)  \n- drm/ast: Use msleep instead of mdelay for edid read (Nirmoy Das)  \n- arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports (Josua Mayer)  \n- arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes (Josua Mayer)  \n- ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address (Nobuhiro Iwamatsu)  \n- tracing: dynevent: Add a missing lockdown check on dynevent (Masami Hiramatsu (Google))  \n- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  \n- i40e: improve VF MAC filters accounting (Lukasz Czapnik)  \n- i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)  \n- i40e: add max boundary check for VF filters (Lukasz Czapnik)  \n- i40e: fix validation of VF state in get resources (Lukasz Czapnik)  \n- i40e: fix input validation logic for action_meta (Lukasz Czapnik)  \n- i40e: fix idx validation in config queues msg (Lukasz Czapnik)  \n- i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik)  \n- i40e: add validation for ring_len param (Lukasz Czapnik)  \n- HID: asus: add support for missing PX series fn keys (Amit Chaudhari)  \n- smb: client: fix wrong index reference in smb2_compound_op() (Sang-Heon Jeon)  \n- platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() (Daniel Lee)  \n- drm/panthor: Defer scheduler entitiy destruction to queue release (Adrian Larumbe)  \n- futex: Prevent use-after-free during requeue-PI (Sebastian Andrzej Siewior)  \n- drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita)  \n- mm: folio_may_be_lru_cached() unless folio_test_large() (Hugh Dickins)  \n- mm: revert 'mm/gup: clear the LRU flag of a page before adding to LRU batch' (Hugh Dickins)  \n- mm/gup: local lru_add_drain() to avoid lru_add_drain_all() (Hugh Dickins)  \n- octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (Dan Carpenter)  \n- net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port (Vladimir Oltean)  \n- net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() (Vladimir Oltean)  \n- selftests: fib_nexthops: Fix creation of non-FDB nexthops (Ido Schimmel)  \n- nexthop: Forbid FDB status change while nexthop is in a group (Ido Schimmel)  \n- net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Jason Baron)  \n- bnxt_en: correct offset handling for IPv6 destination address (Alok Tiwari)  \n- vhost: Take a reference on the task in struct vhost_task. (Sebastian Andrzej Siewior)  \n- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (Luiz Augusto von Dentz)  \n- Bluetooth: hci_sync: Fix hci_resume_advertising_sync (Luiz Augusto von Dentz)  \n- ethernet: rvu-af: Remove slash from the driver name (Petr Malat)  \n- net/smc: fix warning in smc_rx_splice() when calling get_page() (Sidraya Jayagond)  \n- net: tun: Update napi-skb after XDP process (Wang Liang)  \n- can: peak_usb: fix shift-out-of-bounds issue (Stephane Grosjean)  \n- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca)  \n- bpf: Reject bpf_timer for PREEMPT_RT (Leon Hwang)  \n- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)  \n- wifi: virt_wifi: Fix page fault on connect (James Guan)  \n- btrfs: don't allow adding block device of less than 1 MB (Mark Harmstone)  \n- bpf: Check the helper function is valid in get_helper_proto (Jiri Olsa)  \n- smb: server: use disable_work_sync in transport_rdma.c (Stefan Metzmacher)  \n- smb: server: don't use delayed_work for post_recv_credits_work (Stefan Metzmacher)  \n- cpufreq: Initialize cpufreq-based invariance before subsys (Christian Loehle)  \n- ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients (Jihed Chaibi)  \n- arm64: dts: imx8mp: Correct thermal sensor index (Peng Fan)  \n- firmware: imx: Add stub functions for SCMI MISC API (Peng Fan)  \n- HID: amd_sfh: Add sync across amd sfh work functions (Basavaraj Natikar)  \n- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)  \n- net: sfp: add quirk for FLYPRO copper SFP+ module (Aleksander Jan Bajkowski)  \n- ALSA: usb-audio: Add mute TLV for playback volumes on more devices (qaqland)  \n- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk (Cryolitia PukNgae)  \n- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device (noble.yang)  \n- i2c: designware: Add quirk for Intel Xe (Heikki Krogerus)  \n- mmc: sdhci-cadence: add Mobileye eyeQ support (Benoit Monin)  \n- net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick (Chris Morgan)  \n- net: fec: rename struct fec_devinfo fec_imx6x_info - fec_imx6sx_info (Marc Kleine-Budde)  \n- usb: core: Add 0x prefix to quirks debug output (Jiayi Li)  \n- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)  \n- ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Stefan Binding)  \n- ALSA: usb-audio: Convert comma to semicolon (Chen Ni)  \n- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)  \n- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Fix code alignment in mixer_quirks (Cristian Ciocaltea)  \n- firewire: core: fix overlooked update of subsystem ABI version (Takashi Sakamoto)  \n- scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE (Alok Tiwari)\n\n[6.12.0-105.49.4]\n- fs/dax: don't disassociate zero page entries (Alistair Popple)  [Orabug: 36859857]\n- device/dax: properly refcount device dax pages when mapping (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: properly refcount fs dax pages (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: Fix 'don't skip locked entries when scanning entries' (Alistair Popple)  [Orabug: 36859857]\n- mm: decline to manipulate the refcount on a slab page (Matthew Wilcox (Oracle))  [Orabug: 36859857]\n- dcssblk: mark DAX broken, remove FS_DAX_LIMITED support (Dan Williams)  [Orabug: 36859857]\n- mm/gup: don't allow FOLL_LONGTERM pinning of FS DAX pages (Alistair Popple)  [Orabug: 36859857]\n- mm/huge_memory: add vmf_insert_folio_pmd() (Alistair Popple)  [Orabug: 36859857]\n- mm/huge_memory: add vmf_insert_folio_pud() (Alistair Popple)  [Orabug: 36859857]\n- mm/rmap: add support for PUD sized mappings to rmap (Alistair Popple)  [Orabug: 36859857]\n- mm/memory: add vmf_insert_page_mkwrite() (Alistair Popple)  [Orabug: 36859857]\n- mm/memory: enhance insert_page_into_pte_locked() to create writable mappings (Alistair Popple)  [Orabug: 36859857]\n- mm: allow compound zone device pages (Alistair Popple)  [Orabug: 36859857]\n- mm/mm_init: move p2pdma page refcount initialisation to p2pdma (Alistair Popple)  [Orabug: 36859857]\n- mm/gup: remove redundant check for PCI P2PDMA page (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: remove PAGE_MAPPING_DAX_SHARED mapping flag (Alistair Popple)  [Orabug: 36859857]\n- dax: use folios more widely within DAX (Matthew Wilcox (Oracle))  [Orabug: 36859857]\n- dax: remove access to page-index (Matthew Wilcox (Oracle))  [Orabug: 36859857]\n- fs/dax: ensure all pages are idle prior to filesystem unmount (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: always remove DAX page-cache entries when breaking layouts (Alistair Popple)  [Orabug: 36859857]\n- mm: optimize invalidation of shadow entries (Shakeel Butt)  [Orabug: 36859857]\n- mm: optimize truncation of shadow entries (Shakeel Butt)  [Orabug: 36859857]\n- fs/dax: create a common implementation to break DAX layouts (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: refactor wait for dax idle page (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: don't skip locked entries when scanning entries (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: return unmapped busy pages from dax_layout_busy_page_range() (Alistair Popple)  [Orabug: 36859857]\n- uek: kabi: Update check-kabi to support namespace checks (Saeed Mirzamohammadi)  [Orabug: 38459242]","id":"ELSA-2025-25754","ovalId":"oval:com.oracle.elsa:def:202525754","source":"oracle_linux","title":"ELSA-2025-25754: Unbreakable Enterprise kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2025-25754.html"}