{"cves":["CVE-2025-37819","CVE-2025-38022","CVE-2025-38349","CVE-2025-38453","CVE-2025-38568","CVE-2025-38731","CVE-2025-40135","CVE-2025-40154","CVE-2025-40158","CVE-2025-40170","CVE-2025-40248","CVE-2025-40251","CVE-2025-40258","CVE-2025-40271","CVE-2025-40294","CVE-2025-40301","CVE-2025-40318","CVE-2025-68301","CVE-2025-68305"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[6.12.0-124.31.1]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]\n- Disable UKI signing [Orabug: 36571828]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5]\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]\n- Add Oracle Linux IMA certificates\n- Update module name for cryptographic module [Orabug: 37400433]\n- Clean git history at setup stage\n\n[6.12.0-124.31.1]\n- i40e: support generic devlink param 'max_mac_per_vf' (Mohammad Heib) [RHEL-121647]\n- devlink: Add new 'max_mac_per_vf' generic device param (Mohammad Heib) [RHEL-121647]\n- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]\n- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]\n- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]\n- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]\n- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]\n- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]\n- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]\n- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]\n- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]\n- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]\n- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]\n- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]\n- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}\n- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]\n- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}\n\n[6.12.0-124.30.1]\n- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}\n- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}\n- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}\n- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}\n- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}\n- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}\n- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}\n- net: dst: introduce dst-dev_rcu (Hangbin Liu) [RHEL-129026]\n- net: Add locking to protect skb-dev access in ip_output (Hangbin Liu) [RHEL-129026]\n- net: dst: add four helpers to annotate data-races around dst-dev (Hangbin Liu) [RHEL-129026]\n- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}\n- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}\n- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}\n- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}\n- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}\n- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}\n- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}\n- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}\n- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}\n- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}","id":"ELSA-2026-1690","ovalId":"oval:com.oracle.elsa:def:20261690","source":"oracle_linux","title":"ELSA-2026-1690:  kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-1690.html"}