Oracle Linux 10 : kernel (ELSA-2025-22395)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22395 advisory. - mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory CKI Backport Bot RHEL-119161 CVE-2025-39883 - nfsd: handle getclientlocked...

ALSA-2025:15782 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ublk: make sure ubq-canceling is set when queue is frozen CVE-2025-22068 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel: idpf: convert control queue mutex to a...

CVE-2025-22068 ublk: make sure ubq->canceling is set when queue is frozen

In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq-canceling is set when queue is frozen Now ublk driver depends on ubq-canceling for deciding if the request can be dispatched via uringcmd & iouringcmdcompleteintask. Once ubq-canceling is set, the uringcmd can...