elsa-2025-20608

oracle_linux
Description

[6.12.0-103.40.4.3] - x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38453836] {CVE-2025-38560} - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [Orabug: 38453837] {CVE-2025-38500} - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [Orabug: 38453835] {CVE-2025-38566} - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [Orabug: 38453834] {CVE-2025-38571} - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38453833] {CVE-2025-38618} - tls: fix handling of zero-length records on the rx_list (Jakub Kicinski) [Orabug: 38453832] {CVE-2025-39682}

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2025-38560",
    "CVE-2025-38500",
    "CVE-2025-38566",
    "CVE-2025-38618",
    "CVE-2025-39682",
    "CVE-2025-38571"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[6.12.0-103.40.4.3]\n- x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky)  [Orabug: 38453836]  {CVE-2025-38560}\n- xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger)  [Orabug: 38453837]  {CVE-2025-38500}\n- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38453835]  {CVE-2025-38566}\n- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38453834]  {CVE-2025-38571}\n- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic)  [Orabug: 38453833]  {CVE-2025-38618}\n- tls: fix handling of zero-length records on the rx_list (Jakub Kicinski)  [Orabug: 38453832]  {CVE-2025-39682}",
  "id": "ELSA-2025-20608",
  "ovalId": "oval:com.oracle.elsa:def:202520608",
  "source": "oracle_linux",
  "title": "ELSA-2025-20608: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-20608.html"
}
View JSON API Download JSON