Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20721)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20721 advisory. - nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Jeff Layton Orabug: 38575798 CVE-2025-38724 Tenable has extracted the preceding...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20719)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20719 advisory. - iouring/futex: ensure iofutexwait cleans up properly on failure Jens Axboe Orabug: 38572958 CVE-2025-39698 - fs: writeback: fix use-after-free ...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20662)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20662 advisory. - tls: fix handling of zero-length records on the rxlist Jakub Kicinski Orabug: 38401543,38453832 CVE-2025-39682 - net: usb: asixdevices: Fix PHY...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20716)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20716 advisory. - afunix: Don't leave consecutive consumed OOB skbs. Kuniyuki Iwashima Orabug: 38528187 CVE-2025-38236 - fs: writeback: fix use-after-free in...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20663)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20663 advisory. - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38310007 CVE-2025-38499 - HID: hid-ntrig: fix unable ...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20650)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20650 advisory. 5.4.17-2136.347.6.4 - nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Jeff Layton Orabug: 38501612 CVE-2025-38724 Tenable has extracted the...

EUVD-2023-26189

Malicious code in bioql PyPI...

Unbreakable Enterprise kernel security update

5.4.17-2136.347.6.3 - uek-rpm: Move ifb module to nano modules Harshit Mogalapalli Orabug: 38462132...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20645)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20645 advisory. 5.4.17-2136.347.6.3 - uek-rpm: Move ifb module to nano modules Harshit Mogalapalli Orabug: 38462132 Tenable has extracted the preceding descriptio...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20632)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20632 advisory. - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38453918 CVE-2025-38499 Tenable has extracted the...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20608)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20608 advisory. - x86/sev: Evict cache lines during SNP memory validation Tom Lendacky Orabug: 38453836 CVE-2025-38560 - xfrm: interface: fix use-after-free afte...

Oracle Linux 8 : microcode_ctl (ELSA-2025-10991)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10991 advisory. 4:20250512-1.0.1 - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs...

Unbreakable Enterprise kernel security update

5.15.0-312.187.5.1 - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343660 - x86/bugs: Move cpubugssmtupdate down Pawan Gupta Orabug: 38343660 - x86/vmscape: Enable the mitigation Pawan Gupta Orabug: 38343660 - x86/vmscape: Add conditional IBPB mitigation Pawan Gupta...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20530 advisory. - sunrpc: handle SVCGARBAGE during svc auth processing as auth error Jeff Layton Orabug: 38137447 CVE-2025-38089 - Add Zen34 clients Borislav...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20521)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20521 advisory. - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261486 CVE-2023-6931 - perf: Fix perfeventvalidatesize Peter Zijlstra Orabu...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20520)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20520 advisory. - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261485 CVE-2023-6931 - perf: Fix perfeventvalidatesize Peter Zijlstra Orabu...

Unbreakable Enterprise kernel security update

5.4.17-2136.346.6 - net/mlx5: Add poll-eq API to be used by ULP's Praveen Kumar Kannoju Orabug: 38109070 - net/rds: poll eq during user-reset Praveen Kumar Kannoju Orabug: 38189315 5.4.17-2136.346.5 - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261486 CVE-2023-6931 - perf...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20471)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20471 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38023241 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20470)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20470 advisory. - sunrpc: handle SVCGARBAGE during svc auth processing as auth error Jeff Layton CVE-2025-38089 - netsched: schsfq: move the limit validation...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20406)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20406 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...