{"cves":["CVE-2025-38566","CVE-2025-38571","CVE-2025-40215","CVE-2025-40258","CVE-2025-68209"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[5.15.0-316.196.4.2]\n- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca)  \n- usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE (Gopi Krishna Menon)  \n- ext4: clear i_state_flags when alloc inode (Haibo Chen)  \n- ext4: align max orphan file size with e2fsprogs limit (Baokun Li)  \n- PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Rafael J. Wysocki)  \n- net: enetc: fix build warning when PAGE_SIZE is greater than 128K (Wei Fang)  \n- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Xiang Mei)  \n- block: fix comment for op_is_zone_mgmt() to include RESET_ALL (shechenglong)  \n- fuse: fix readahead reclaim deadlock (Joanne Koong)  \n- i40e: validate ring_len parameter against hardware-specific values (Gregory Herrero)  \n- fs/ntfs3: fix mount failure for sparse runs in run_unpack() (Konstantin Komarov)  \n- xfrm: delete x-tunnel as we delete x (Sabrina Dubroca)  [Orabug: 38933003]  {CVE-2025-40215}\n- mptcp: fix race condition in mptcp_schedule_work() (Eric Dumazet)  [Orabug: 38932997]  {CVE-2025-40258}\n- mlx5: Fix default values in create CQ (Akiva Goldberger)  [Orabug: 38932992] \n- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38932991]  {CVE-2025-38566}\n- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38932988]  {CVE-2025-38571}","id":"ELSA-2026-50095","ovalId":"oval:com.oracle.elsa:def:202650095","source":"oracle_linux","title":"ELSA-2026-50095: Unbreakable Enterprise kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-50095.html"}