elsa-2025-25754

{
  "cves": [
    "CVE-2025-22103",
    "CVE-2025-22106",
    "CVE-2025-22113",
    "CVE-2025-22124",
    "CVE-2025-23133",
    "CVE-2025-38272",
    "CVE-2025-38306",
    "CVE-2025-38322",
    "CVE-2025-38453",
    "CVE-2025-38502",
    "CVE-2025-38556",
    "CVE-2025-38676",
    "CVE-2025-38730",
    "CVE-2025-38732",
    "CVE-2025-38735",
    "CVE-2025-38737",
    "CVE-2025-39673",
    "CVE-2025-39675",
    "CVE-2025-39676",
    "CVE-2025-39679",
    "CVE-2025-39681",
    "CVE-2025-39683",
    "CVE-2025-39689",
    "CVE-2025-39691",
    "CVE-2025-39693",
    "CVE-2025-39695",
    "CVE-2025-39697",
    "CVE-2025-39698",
    "CVE-2025-39700",
    "CVE-2025-39705",
    "CVE-2025-39706",
    "CVE-2025-39707",
    "CVE-2025-39713",
    "CVE-2025-39714",
    "CVE-2025-39718",
    "CVE-2025-39721",
    "CVE-2025-39723",
    "CVE-2025-39724",
    "CVE-2025-39759",
    "CVE-2025-39765",
    "CVE-2025-39766",
    "CVE-2025-39770",
    "CVE-2025-39772",
    "CVE-2025-39773",
    "CVE-2025-39779",
    "CVE-2025-39780",
    "CVE-2025-39782",
    "CVE-2025-39790",
    "CVE-2025-39791",
    "CVE-2025-39800",
    "CVE-2025-39805",
    "CVE-2025-39806",
    "CVE-2025-39808",
    "CVE-2025-39810",
    "CVE-2025-39812",
    "CVE-2025-39813",
    "CVE-2025-39817",
    "CVE-2025-39819",
    "CVE-2025-39824",
    "CVE-2025-39825",
    "CVE-2025-39828",
    "CVE-2025-39829",
    "CVE-2025-39832",
    "CVE-2025-39835",
    "CVE-2025-39838",
    "CVE-2025-39841",
    "CVE-2025-39842",
    "CVE-2025-39843",
    "CVE-2025-39844",
    "CVE-2025-39845",
    "CVE-2025-39847",
    "CVE-2025-39849",
    "CVE-2025-39850",
    "CVE-2025-39851",
    "CVE-2025-39852",
    "CVE-2025-39853",
    "CVE-2025-39854",
    "CVE-2025-39860",
    "CVE-2025-39861",
    "CVE-2025-39863",
    "CVE-2025-39864",
    "CVE-2025-39865",
    "CVE-2025-39866",
    "CVE-2025-39867",
    "CVE-2025-39870",
    "CVE-2025-39871",
    "CVE-2025-39877",
    "CVE-2025-39880",
    "CVE-2025-39881",
    "CVE-2025-39883",
    "CVE-2025-39884",
    "CVE-2025-39885",
    "CVE-2025-39886",
    "CVE-2025-39891",
    "CVE-2025-39894",
    "CVE-2025-39895",
    "CVE-2025-39898",
    "CVE-2025-39899",
    "CVE-2025-39900",
    "CVE-2025-39901",
    "CVE-2025-39902",
    "CVE-2025-39903",
    "CVE-2025-39911",
    "CVE-2025-39913",
    "CVE-2025-39914",
    "CVE-2025-39917",
    "CVE-2025-39918",
    "CVE-2025-39922",
    "CVE-2025-39923",
    "CVE-2025-39926",
    "CVE-2025-39927",
    "CVE-2025-39929",
    "CVE-2025-39931",
    "CVE-2025-39932",
    "CVE-2025-39940",
    "CVE-2025-39945",
    "CVE-2025-39946",
    "CVE-2025-39947",
    "CVE-2025-39948",
    "CVE-2025-39949",
    "CVE-2025-39953"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[6.12.0-105.51.5]\n- RDMA/mlx5: Fix vport loopback forcing for MPV device (Patrisious Haddad)  [Orabug: 38226124] \n- arm64: Utilize for_each_cpu_wrap for reference lookup (Beata Michalska)  [Orabug: 38454705] \n- arm64: Update AMU-based freq scale factor on entering idle (Beata Michalska)  [Orabug: 38454705] \n- arm64: Provide an AMU-based version of arch_freq_get_on_cpu (Beata Michalska)  [Orabug: 38454705] \n- cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry (Beata Michalska)  [Orabug: 38454705] \n- cpufreq: Allow arch_freq_get_on_cpu to return an error (Beata Michalska)  [Orabug: 38454705] \n- arch_topology: init capacity_freq_ref to 0 (Ionela Voinescu)  [Orabug: 38454705] \n- ACPI/HMAT: Move HMAT messages to pr_debug() (Dan Williams)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: monitor all ports by default (Besar Wicaksono)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Besar Wicaksono)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Besar Wicaksono)  [Orabug: 38454705] \n- perf: arm_cspmu: nvidia: remove unsupported SCF events (Besar Wicaksono)  [Orabug: 38454705] \n- cppc_cpufreq: Remove HiSilicon CPPC workaround (Jie Zhan)  [Orabug: 38454705] \n- Revert 'sched/fair: Bump sd-max_newidle_lb_cost when newidle balance fails' (Joseph Salisbury)  [Orabug: 38498945] \n- uek-rpm/config-aarch64: Enable configs for Grace platform support (Vijay Kumar)  [Orabug: 38526374] \n- LTS version: v6.12.51 (Jack Vogel)  \n- ASoC: qcom: audioreach: fix potential null pointer dereference (Srinivas Kandagatla)  \n- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Matvey Kovalev)  \n- mm: swap: check for stable address space before operating on the VMA (Charan Teja Kalla)  \n- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo)  \n- media: rc: fix races with imon_disconnect() (Larshin Sergey)  \n- media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou)  \n- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou)  \n- scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran)  \n- gcc-plugins: Remove TODO_verify_il for GCC = 16 (Kees Cook)  \n- crypto: sha256 - fix crash at kexec (Breno Leitao)  \n- LTS version v6.12.50 (Jack Vogel)  \n- drm/i915/backlight: Return immediately when scale() finds invalid parameters (Guenter Roeck)  \n- Revert 'usb: xhci: remove option to change a default ring's TRB cycle bit' (Niklas Neronin)  \n- iommufd: Fix race during abort for file descriptors (Jason Gunthorpe)  \n- fbcon: Fix OOB access in font allocation (Thomas Zimmermann)  \n- fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda)  \n- mm/hugetlb: fix folio is still mapped when deleted (Jinjiang Tu)  \n- kmsan: fix out-of-bounds access to shadow memory (Eric Biggers)  \n- gpiolib: Extend software-node support to support secondary software-nodes (Hans de Goede)  \n- fs/proc/task_mmu: check p-vec_buf for NULL (Jakub Acs)  \n- afs: Fix potential null pointer dereference in afs_put_server (Zhen Ni)  \n- drm/ast: Use msleep instead of mdelay for edid read (Nirmoy Das)  \n- arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports (Josua Mayer)  \n- arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes (Josua Mayer)  \n- ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address (Nobuhiro Iwamatsu)  \n- tracing: dynevent: Add a missing lockdown check on dynevent (Masami Hiramatsu (Google))  \n- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  \n- i40e: improve VF MAC filters accounting (Lukasz Czapnik)  \n- i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)  \n- i40e: add max boundary check for VF filters (Lukasz Czapnik)  \n- i40e: fix validation of VF state in get resources (Lukasz Czapnik)  \n- i40e: fix input validation logic for action_meta (Lukasz Czapnik)  \n- i40e: fix idx validation in config queues msg (Lukasz Czapnik)  \n- i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik)  \n- i40e: add validation for ring_len param (Lukasz Czapnik)  \n- HID: asus: add support for missing PX series fn keys (Amit Chaudhari)  \n- smb: client: fix wrong index reference in smb2_compound_op() (Sang-Heon Jeon)  \n- platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() (Daniel Lee)  \n- drm/panthor: Defer scheduler entitiy destruction to queue release (Adrian Larumbe)  \n- futex: Prevent use-after-free during requeue-PI (Sebastian Andrzej Siewior)  \n- drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita)  \n- mm: folio_may_be_lru_cached() unless folio_test_large() (Hugh Dickins)  \n- mm: revert 'mm/gup: clear the LRU flag of a page before adding to LRU batch' (Hugh Dickins)  \n- mm/gup: local lru_add_drain() to avoid lru_add_drain_all() (Hugh Dickins)  \n- octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (Dan Carpenter)  \n- net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port (Vladimir Oltean)  \n- net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() (Vladimir Oltean)  \n- selftests: fib_nexthops: Fix creation of non-FDB nexthops (Ido Schimmel)  \n- nexthop: Forbid FDB status change while nexthop is in a group (Ido Schimmel)  \n- net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Jason Baron)  \n- bnxt_en: correct offset handling for IPv6 destination address (Alok Tiwari)  \n- vhost: Take a reference on the task in struct vhost_task. (Sebastian Andrzej Siewior)  \n- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (Luiz Augusto von Dentz)  \n- Bluetooth: hci_sync: Fix hci_resume_advertising_sync (Luiz Augusto von Dentz)  \n- ethernet: rvu-af: Remove slash from the driver name (Petr Malat)  \n- net/smc: fix warning in smc_rx_splice() when calling get_page() (Sidraya Jayagond)  \n- net: tun: Update napi-skb after XDP process (Wang Liang)  \n- can: peak_usb: fix shift-out-of-bounds issue (Stephane Grosjean)  \n- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)  \n- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca)  \n- bpf: Reject bpf_timer for PREEMPT_RT (Leon Hwang)  \n- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)  \n- wifi: virt_wifi: Fix page fault on connect (James Guan)  \n- btrfs: don't allow adding block device of less than 1 MB (Mark Harmstone)  \n- bpf: Check the helper function is valid in get_helper_proto (Jiri Olsa)  \n- smb: server: use disable_work_sync in transport_rdma.c (Stefan Metzmacher)  \n- smb: server: don't use delayed_work for post_recv_credits_work (Stefan Metzmacher)  \n- cpufreq: Initialize cpufreq-based invariance before subsys (Christian Loehle)  \n- ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients (Jihed Chaibi)  \n- arm64: dts: imx8mp: Correct thermal sensor index (Peng Fan)  \n- firmware: imx: Add stub functions for SCMI MISC API (Peng Fan)  \n- HID: amd_sfh: Add sync across amd sfh work functions (Basavaraj Natikar)  \n- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)  \n- net: sfp: add quirk for FLYPRO copper SFP+ module (Aleksander Jan Bajkowski)  \n- ALSA: usb-audio: Add mute TLV for playback volumes on more devices (qaqland)  \n- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk (Cryolitia PukNgae)  \n- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device (noble.yang)  \n- i2c: designware: Add quirk for Intel Xe (Heikki Krogerus)  \n- mmc: sdhci-cadence: add Mobileye eyeQ support (Benoit Monin)  \n- net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick (Chris Morgan)  \n- net: fec: rename struct fec_devinfo fec_imx6x_info - fec_imx6sx_info (Marc Kleine-Budde)  \n- usb: core: Add 0x prefix to quirks debug output (Jiayi Li)  \n- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)  \n- ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Stefan Binding)  \n- ALSA: usb-audio: Convert comma to semicolon (Chen Ni)  \n- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)  \n- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)  \n- ALSA: usb-audio: Fix code alignment in mixer_quirks (Cristian Ciocaltea)  \n- firewire: core: fix overlooked update of subsystem ABI version (Takashi Sakamoto)  \n- scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE (Alok Tiwari)\n\n[6.12.0-105.49.4]\n- fs/dax: don't disassociate zero page entries (Alistair Popple)  [Orabug: 36859857]\n- device/dax: properly refcount device dax pages when mapping (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: properly refcount fs dax pages (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: Fix 'don't skip locked entries when scanning entries' (Alistair Popple)  [Orabug: 36859857]\n- mm: decline to manipulate the refcount on a slab page (Matthew Wilcox (Oracle))  [Orabug: 36859857]\n- dcssblk: mark DAX broken, remove FS_DAX_LIMITED support (Dan Williams)  [Orabug: 36859857]\n- mm/gup: don't allow FOLL_LONGTERM pinning of FS DAX pages (Alistair Popple)  [Orabug: 36859857]\n- mm/huge_memory: add vmf_insert_folio_pmd() (Alistair Popple)  [Orabug: 36859857]\n- mm/huge_memory: add vmf_insert_folio_pud() (Alistair Popple)  [Orabug: 36859857]\n- mm/rmap: add support for PUD sized mappings to rmap (Alistair Popple)  [Orabug: 36859857]\n- mm/memory: add vmf_insert_page_mkwrite() (Alistair Popple)  [Orabug: 36859857]\n- mm/memory: enhance insert_page_into_pte_locked() to create writable mappings (Alistair Popple)  [Orabug: 36859857]\n- mm: allow compound zone device pages (Alistair Popple)  [Orabug: 36859857]\n- mm/mm_init: move p2pdma page refcount initialisation to p2pdma (Alistair Popple)  [Orabug: 36859857]\n- mm/gup: remove redundant check for PCI P2PDMA page (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: remove PAGE_MAPPING_DAX_SHARED mapping flag (Alistair Popple)  [Orabug: 36859857]\n- dax: use folios more widely within DAX (Matthew Wilcox (Oracle))  [Orabug: 36859857]\n- dax: remove access to page-index (Matthew Wilcox (Oracle))  [Orabug: 36859857]\n- fs/dax: ensure all pages are idle prior to filesystem unmount (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: always remove DAX page-cache entries when breaking layouts (Alistair Popple)  [Orabug: 36859857]\n- mm: optimize invalidation of shadow entries (Shakeel Butt)  [Orabug: 36859857]\n- mm: optimize truncation of shadow entries (Shakeel Butt)  [Orabug: 36859857]\n- fs/dax: create a common implementation to break DAX layouts (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: refactor wait for dax idle page (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: don't skip locked entries when scanning entries (Alistair Popple)  [Orabug: 36859857]\n- fs/dax: return unmapped busy pages from dax_layout_busy_page_range() (Alistair Popple)  [Orabug: 36859857]\n- uek: kabi: Update check-kabi to support namespace checks (Saeed Mirzamohammadi)  [Orabug: 38459242]",
  "id": "ELSA-2025-25754",
  "ovalId": "oval:com.oracle.elsa:def:202525754",
  "source": "oracle_linux",
  "title": "ELSA-2025-25754: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-25754.html"
}