elsa-2025-20719

oracle_linux
Description

[6.12.0-104.43.4.3] - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38572958] {CVE-2025-39698} - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38572953] {CVE-2025-39866} - kernfs: Fix UAF in polling when open file is released (Chen Ridong) [Orabug: 38572951] {CVE-2025-3988} - vsock/virtio: Validate length in packet header before skb_put() (Will Deacon) [Orabug: 38572950] {CVE-2025-39718} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu) [Orabug: 38572948] {CVE-2025-39964} - io_uring: fix incorrect io_kiocb reference in io_link_skb (Yang Xiuwei) [Orabug: 38572947] {CVE-2025-39963} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [Orabug: 38572946] {CVE-2025-39965} - tls: make sure to abort the stream if headers are bogus (Jakub Kicinski) [Orabug: 38572944] {CVE-2025-39946} - futex: Prevent use-after-free during requeue-PI (Sebastian Andrzej Siewior) [Orabug: 38572943] {CVE-2025-39977} - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38572941] {CVE-2025-39973}

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2025-39866",
    "CVE-2025-39965",
    "CVE-2025-39946",
    "CVE-2025-39718",
    "CVE-2025-39881",
    "CVE-2025-39963",
    "CVE-2025-39977",
    "CVE-2025-39964",
    "CVE-2025-39973",
    "CVE-2025-39698"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[6.12.0-104.43.4.3]\n- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe)  [Orabug: 38572958]  {CVE-2025-39698}\n- fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue)  [Orabug: 38572953]  {CVE-2025-39866}\n- kernfs: Fix UAF in polling when open file is released (Chen Ridong)  [Orabug: 38572951]  {CVE-2025-3988}\n- vsock/virtio: Validate length in packet header before skb_put() (Will Deacon)  [Orabug: 38572950]  {CVE-2025-39718}\n- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38572948]  {CVE-2025-39964}\n- io_uring: fix incorrect io_kiocb reference in io_link_skb (Yang Xiuwei)  [Orabug: 38572947]  {CVE-2025-39963}\n- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca)  [Orabug: 38572946]  {CVE-2025-39965}\n- tls: make sure to abort the stream if headers are bogus (Jakub Kicinski)  [Orabug: 38572944]  {CVE-2025-39946}\n- futex: Prevent use-after-free during requeue-PI (Sebastian Andrzej Siewior)  [Orabug: 38572943]  {CVE-2025-39977}\n- i40e: add validation for ring_len param (Lukasz Czapnik)  [Orabug: 38572941]  {CVE-2025-39973}",
  "id": "ELSA-2025-20719",
  "ovalId": "oval:com.oracle.elsa:def:202520719",
  "source": "oracle_linux",
  "title": "ELSA-2025-20719: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-20719.html"
}
View JSON API Download JSON