[El-errata] ELSA-2025-20608 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-20608

http://linux.oracle.com/errata/ELSA-2025-20608.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-103.40.4.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.3.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-103.40.4.3.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-103.40.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-103.40.4.3.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-103.40.4.3.el9uek.src.rpm

Related CVEs:

CVE-2025-38500
CVE-2025-38560
CVE-2025-38566
CVE-2025-38571
CVE-2025-38618
CVE-2025-39682




Description of changes:

[6.12.0-103.40.4.3.el9uek]
- x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky)  [Orabug: 38453836]  {CVE-2025-38560}
- xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger)  [Orabug: 38453837]  {CVE-2025-38500}
- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38453835]  {CVE-2025-38566}
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38453834]  {CVE-2025-38571}
- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic)  [Orabug: 38453833]  {CVE-2025-38618}
- tls: fix handling of zero-length records on the rx_list (Jakub Kicinski)  [Orabug: 38453832]  {CVE-2025-39682}