elsa-2025-22854

{
  "cves": [
    "CVE-2025-38737",
    "CVE-2025-39925",
    "CVE-2025-39979",
    "CVE-2025-39981",
    "CVE-2025-39982",
    "CVE-2025-39983",
    "CVE-2025-40047",
    "CVE-2025-40058",
    "CVE-2025-40185"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[6.12.0-124.20.1]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]\n- Disable UKI signing [Orabug: 36571828]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5]\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]\n- Add Oracle Linux IMA certificates\n- Update module name for cryptographic module [Orabug: 37400433]\n- Clean git history at setup stage\n\n[6.12.0-124.20.1]\n- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}\n- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}\n- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]\n- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]\n- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]\n- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]\n- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]\n- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]\n- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]\n- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]\n- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]\n- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]\n- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]\n- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]\n- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]\n- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]\n\n[6.12.0-124.19.1]\n- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}\n- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}\n- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}\n- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}\n\n[6.12.0-124.18.1]\n- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}\n- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}\n\n[6.12.0-124.17.1]\n- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]\n- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]\n- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}",
  "id": "ELSA-2025-22854",
  "ovalId": "oval:com.oracle.elsa:def:202522854",
  "source": "oracle_linux",
  "title": "ELSA-2025-22854:  kernel security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-22854.html"
}