Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20404)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20404 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20405)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20405 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129827 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

Oracle Linux 10 : Unbreakable Enterprise kernel (ELSA-2025-20371)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20371 advisory. 6.12.0-100.28.2.el10uek - sched/eevdf: Fix se-slice being set to U64MAX and resulting crash Omar Sandoval - certs: Add new Oracle Linux Driver Signing key 1...

Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2025-20368)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20368 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37945459 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunking Pawan Gupt...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20365)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20365 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37945842 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunki...

CVE-2023-22024

In the Unbreakable Enterprise Kernel UEK, the RDS module in UEK has two setsockopt2 options, RDSCONNRESET and RDS6CONNRESET, that are not re-entrant. A malicious local user with CAPNETADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 Availability impacts. CVSS Vector:...

Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2025-20318)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20318 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37863725 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunking Pawan Gupt...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20323)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20323 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37863726 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunking Pawan...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20320)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20320 advisory. - x86/sev: Harden VC instruction emulation somewhat Borislav Petkov AMD Orabug: 37687865 CVE-2024-25743 CVE-2024-25742 - x86/entry: Do not allow...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20319)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20319 advisory. - net: mana: Fix TX CQE error handling Haiyang Zhang Orabug: 36983924 CVE-2023-52532 - net: core: reject skbcopyexpand for fraglist GSO skbs Felix...

Unbreakable Enterprise kernel security update

5.15.0-308.179.6 - net: bridge: IP defragmentation failing for jumboframes Venkat Venkatsubra Orabug: 37847171 - uek-rpm: remove .el9 from shim version Samasth Norway Ananda Orabug: 37834731 - RDS: avoid using offlined CPU during reconnect Arumugam Kolappan Orabug: 37783021 - net/mlx5e: Rely on...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20271)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20271 advisory. - ima: Fix use-after-free on a dentry's dname.name Stefan Berger Orabug: 36835558 CVE-2024-39494 Tenable has extracted the preceding description block...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20270)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20270 advisory. - net/mlx5: DR, prevent potential error pointer dereference Dan Carpenter Orabug: 37434242 CVE-2024-56660 - bnxten: Fix aggregation ID mask to...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20190)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20190 advisory. - ima: Fix use-after-free on a dentry's dname.name Stefan Berger Orabug: 37727037 CVE-2024-39494 - ocfs2: fix slab-use-after-free due to dangling...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20152)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20152 advisory. - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs Ranjan Kumar Orabug: 37472354 CVE-2024-57804 - crypto: qat/qat4xxx - fix o...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20153)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20153 advisory. - ipv6: fix possible UAF in ip6finishoutput2 Eric Dumazet Orabug: 37029070 CVE-2024-44986 - dmaengine: atxdmac: avoid nullprtderef in...

Unbreakable Enterprise kernel security update

5.15.0-306.177.4 - Revert 'usb: gadget: userial: Disable ep before setting port to null to fix the crash caused by port being null' Greg Kroah-Hartman - drm/v3d: Assign job pointer to NULL before signaling the fence Maira Canal - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sys...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20100)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20100 advisory. - xen/netfront: fix crash when removing device Juergen Gross Orabug: 37427542 CVE-2024-53240 - net: lapb: increase LAPBHEADERLEN Eric Dumazet...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20095)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20095 advisory. - macsec: Fix use-after-free while sending the offloading packet Jianbo Liu Orabug: 37268700 CVE-2024-50261 - net/mlx5e: Fix CT entry update leaks...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20066)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20066 advisory. - NFSD: Limit the number of concurrent async COPY operations Chuck Lever Orabug: 37516381 CVE-2024-49974 - NFSD: Async COPY result needs to return...