{
"document": {
"aggregate_severity": {
"text": "Medium"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "TuxCare License Agreement",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"publisher": {
"category": "vendor",
"contact_details": "https://tuxcare.com/contact/",
"name": "TuxCare",
"namespace": "https://tuxcare.com/"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/vex/2025/cve-2025-38400-els_os-oraclelinux7els.json"
}
],
"title": "Security update on CVE-2025-38400",
"tracking": {
"current_release_date": "2025-12-23T22:15:38Z",
"generator": {
"date": "2025-12-23T22:15:38Z",
"engine": {
"name": "pyCSAF"
}
},
"id": "CVE-2025-38400-ELS_OS-ORACLELINUX7ELS",
"initial_release_date": "2025-07-25T00:00:00Z",
"revision_history": [
{
"date": "2025-07-25T00:00:00Z",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-11-25T15:54:26Z",
"number": "2",
"summary": "Official Publication"
},
{
"date": "2025-12-23T22:15:38Z",
"number": "3",
"summary": "Update document"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux 7",
"product": {
"name": "Oracle Linux 7",
"product_id": "Oracle-Linux-7",
"product_identification_helper": {
"cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Oracle Linux"
}
],
"category": "vendor",
"name": "Oracle Corporation"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/bpftool@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-tools@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-container@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-devel@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/python-perf@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/perf@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-headers@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-debug-devel@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-container-debug@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product": {
"name": "kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_id": "kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/tuxcare/kernel-uek-debug@5.4.17-2136.338.4.2.el7uek.tuxcare.els4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "TuxCare"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/bpftool@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-tools@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-container@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-devel@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "python-perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "python-perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/python-perf@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/perf@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-headers@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-debug-devel@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-container-debug@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"product": {
"name": "kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_id": "kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/oracle/kernel-uek-debug@5.4.17-2136.338.4.2.el7uek?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Oracle Corporation"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
},
"product_reference": "kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:bpftool-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:python-perf-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "python-perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:perf-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64 as a component of Oracle Linux 7",
"product_id": "Oracle-Linux-7:kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64"
},
"product_reference": "kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"relates_to_product_reference": "Oracle-Linux-7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-38400",
"notes": [
{
"category": "description",
"text": "In the Linux kernel, the following vulnerability has been resolved:\nnfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.\nsyzbot reported a warning below [1] following a fault injection in\nnfs_fs_proc_net_init(). [0]\nWhen nfs_fs_proc_net_init() fails, /proc/net/rpc/nfs is not removed.\nLater, rpc_proc_exit() tries to remove /proc/net/rpc, and the warning\nis logged as the directory is not empty.\nLet's handle the error of nfs_fs_proc_net_init() properly.\n[0]:\nFAULT_INJECTION: forcing a failure.\nname failslab, interval 1, probability 0, space 0, times 0\nCPU: 1 UID: 0 PID: 6120 Comm: syz.2.27 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nCall Trace:\n\ndump_stack_lvl (lib/dump_stack.c:123)\nshould_fail_ex (lib/fault-inject.c:73 lib/fault-inject.c:174)\nshould_failslab (mm/failslab.c:46)\nkmem_cache_alloc_noprof (mm/slub.c:4178 mm/slub.c:4204)\n__proc_create (fs/proc/generic.c:427)\nproc_create_reg (fs/proc/generic.c:554)\nproc_create_net_data (fs/proc/proc_net.c:120)\nnfs_fs_proc_net_init (fs/nfs/client.c:1409)\nnfs_net_init (fs/nfs/inode.c:2600)\nops_init (net/core/net_namespace.c:138)\nsetup_net (net/core/net_namespace.c:443)\ncopy_net_ns (net/core/net_namespace.c:576)\ncreate_new_namespaces (kernel/nsproxy.c:110)\nunshare_nsproxy_namespaces (kernel/nsproxy.c:218 (discriminator 4))\nksys_unshare (kernel/fork.c:3123)\n__x64_sys_unshare (kernel/fork.c:3190)\ndo_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n\n[1]:\nremove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs'\nWARNING: CPU: 1 PID: 6120 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727\nModules linked in:\nCPU: 1 UID: 0 PID: 6120 Comm: syz.2.27 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nRIP: 0010:remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727\nCode: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 40 ba a2 8b 48 c7 c7 60 b9 a2 8b e8 33 81 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 04 69 5e ff 90 48 b8 00 00 00 00 00\nRSP: 0018:ffffc90003637b08 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff88805f534140 RCX: ffffffff817a92c8\nRDX: ffff88807da99e00 RSI: ffffffff817a92d5 RDI: 0000000000000001\nRBP: ffff888033431ac0 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000001 R11: 0000000000000001 R12: ffff888033431a00\nR13: ffff888033431ae4 R14: ffff888033184724 R15: dffffc0000000000\nFS: 0000555580328500(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f71733743e0 CR3: 000000007f618000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\nsunrpc_exit_net+0x46/0x90 net/sunrpc/sunrpc_syms.c:76\nops_exit_list net/core/net_namespace.c:200 [inline]\nops_undo_list+0x2eb/0xab0 net/core/net_namespace.c:253\nsetup_net+0x2e1/0x510 net/core/net_namespace.c:457\ncopy_net_ns+0x2a6/0x5f0 net/core/net_namespace.c:574\ncreate_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110\nunshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:218\nksys_unshare+0x45b/0xa40 kernel/fork.c:3121\n__do_sys_unshare kernel/fork.c:3192 [inline]\n__se_sys_unshare kernel/fork.c:3190 [inline]\n__x64_sys_unshare+0x31/0x40 kernel/fork.c:3190\ndo_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\ndo_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94\nentry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fa1a6b8e929\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c\n---truncated---",
"title": "Vulnerability description"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Oracle-Linux-7:bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64"
],
"known_affected": [
"Oracle-Linux-7:bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:python-perf-5.4.17-2136.338.4.2.el7uek.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://cve.tuxcare.com/els/cve/CVE-2025-38400"
}
],
"release_date": "2025-07-25T00:00:00Z",
"remediations": [
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"Oracle-Linux-7:bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:python-perf-5.4.17-2136.338.4.2.el7uek.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Oracle-Linux-7:bpftool-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:bpftool-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-container-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-container-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-container-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-container-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-debug-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-debug-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-debug-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-debug-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-devel-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-devel-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-headers-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-headers-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:kernel-uek-tools-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:kernel-uek-tools-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:perf-5.4.17-2136.338.4.2.el7uek.x86_64",
"Oracle-Linux-7:python-perf-0:5.4.17-2136.338.4.2.el7uek.tuxcare.els4.x86_64",
"Oracle-Linux-7:python-perf-5.4.17-2136.338.4.2.el7uek.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
]
}
]
}