Oracle Linux Kernel Vulnerabilities ELSA-2025-28066 and CVE-2025-40271

Oracle Linux Kernel Vulnerabilities ELSA-2025-28066 and CVE-2025-40271

First seen 24 Dec 2025, 23:05 UTC Linuxsecurity 23.9

Article Content

Browse articles
ThreatCluster

Oracle has released important updates for its Linux kernel addressing two vulnerabilities: CVE-2025-40271, which involves a use-after-free issue in proc_readdir_de(), and CVE-2025-40215, related to xfrm. These updates affect Oracle Linux versions 6 and 9, with specific RPM packages provided for each version.