FEDORA-2025-cca2fcc70c — security update for kernel

stable

kernel-6.12.15-200.fc41

FEDORA-2025-cca2fcc70c created by acaringi a year ago for Fedora 41

The 6.12.15 stable kernel update contains a number of important fixes across the tree.

The 6.12.14 stable kernel update contains a number of important fixes across the tree.

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-cca2fcc70c

This update has been submitted for testing by acaringi.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update has obsoleted kernel-6.12.14-200.fc41, and has inherited its bugs and notes.

a year ago

markec provided feedback a year ago

karma

This update's test gating status has been changed to 'passed'.

a year ago

bretth commented & provided feedback a year ago

karma

default & performance tests pass (KVM)

Test Case kernel regression

js314592 provided feedback a year ago

karma

robatino commented & provided feedback a year ago

It should say "Reboot Required", not "Logout Required", correct?

anotheruser provided feedback a year ago

karma

BZ#2333706 Kernel 6.12.6 kernel lockdown disabled

BZ#2345700 CVE-2025-1272 kernel: Secure Boot does not automatically enable kernel lockdown [fedora-41]

Test Case kernel regression

This update has been pushed to testing.

a year ago

This update can be pushed to stable now if the maintainer wishes

a year ago

tribly-ray commented & provided feedback a year ago

karma

Default test all passed bare metal 12th gen Intel i7 / AMD7900XTX dgpu

Test Case kernel regression

bojan commented & provided feedback a year ago

karma

Works.

cmorris commented & provided feedback a year ago

So far, so good. The NMI watchdog problem I mentioned for 6.12.13 was apparently fixed in selinux-policy-41.33-1.fc41.

A related note on the upcoming 6.13.x kernels:

Unfortunately, some of the regressions with amdgpu (but not with the older radeon driver) in earlier builds of 6.13.x are still present in kernel-6.13.3-200.fc41, https://koji.fedoraproject.org/koji/buildinfo?buildID=2661338 :

From the dmesg, with a Bonaire (GFX7, VCN 2nd Gen., Sea Islands) dGPU:

[drm:amdgpu_device_ip_set_powergating_state [amdgpu]] ERROR set_powergating_state of IP block <vce_v2_0> failed -22 ... amdgpu 0000:01:00.0: amdgpu: failed to send message 146 ret is 0

And the same large performance regressions in amdgpu, not present with 6.12.15 or with the older, less-capable radeon driver:

env AMD_DEBUG=useaco glmark2 -s 2560x1440:

6.12.15 amdgpu:  851      6.12.15 radeonsi: 803      6.13.3 amdgpu: 32    6.13.3 radeonsi: 810

env __GLX_VENDOR_LIBRARY_NAME=mesa MESA_LOADER_DRIVER_OVERRIDE=zink GALLIUM_DRIVER=zink glmark2 -s 2560x1440:

6.12.15 amdgpu:  675    6.13.3 amdgpu: 27

glmark2 -s 2560x1440:

6.12.15 amdgpu:  839      6.12.15 radeonsi: 795      6.13.3 amdgpu: 32     6.13.3 radeonsi: 787

env AMD_DEBUG=useaco glmark2-es2 -s 2560x1440:

6.12.15 amdgpu:  851      6.12.15 radeonsi: 804      6.13.3 amdgpu: 32    6.13.3 radeonsi: 803

env __GLX_VENDOR_LIBRARY_NAME=mesa MESA_LOADER_DRIVER_OVERRIDE=zink GALLIUM_DRIVER=zink glmark2-es2 -s 2560x1440:

6.12.15 amdgpu: 681    6.13.3 amdgpu: 27

glmark2-es2 -s 2560x1440:

6.12.15 amdgpu:  839      6.12.15 radeonsi: 793      6.13.3 amdgpu: 32   6.13.3 radeonsi: 796

env AMD_DEBUG=useaco glmark2-es2-wayland -s 2560x1440:

6.12.15 amdgpu:  2840      6.12.15 radeonsi: 902      6.13.3 amdgpu: 113    6.13.3 radeonsi: 910

env __GLX_VENDOR_LIBRARY_NAME=mesa MESA_LOADER_DRIVER_OVERRIDE=zink GALLIUM_DRIVER=zink glmark2-es2-wayland -s 2560x1440:

6.12.15 amdgpu: 1429     6.13.3 amdgpu: 64

glmark2-es2-wayland -s 2560x1440:

6.12.15 amdgpu: 2621       6.12.15 radeonsi:  916     6.13.3 amdgpu: 113    6.13.3 radeonsi: 914

env AMD_DEBUG=useaco glmark2-wayland -s 2560x1440:

6.12.15 amdgpu: 2835       6.12.15 radeonsi: 901      6.13.3 amdgpu: 113    6.13.3 radeonsi: 901

env __GLX_VENDOR_LIBRARY_NAME=mesa MESA_LOADER_DRIVER_OVERRIDE=zink GALLIUM_DRIVER=zink glmark2-wayland -s 2560x1440:

6.12.15 amdgpu:  1427   6.13.3 amdgpu: 63

env glmark2-wayland -s 2560x1440:

6.12.15 amdgpu: 2629       6.12.15 radeonsi: 884      6.13.3 amdgpu: 113      6.13.3 radeonsi: 923

nixuser commented & provided feedback a year ago

karma

Working fine.

Intel NUC NUC13ANHi7 (NUC13ANHi7000) (rev N11225-207) 1 x 13th Gen Intel(R) Core(TM) i7-1360P Intel Corporation Raptor Lake-P [Iris Xe Graphics] (rev 04)

Test Case kernel regression

This update has been submitted for stable by jforbes.

a year ago

geraldosimiao commented & provided feedback a year ago

karma

Working fine on baremetal

Acer Aspire Intel® Core™ i7-3632QM CPU @ 2.20GHz              
Graphics Processor: Mesa DRI Intel® HD Graphics 4000. driver: i915 v: kernel arch: Gen-7                  
wi-fi: Qualcomm Atheros AR9485 Wireless Network. Adapter vendor: Lite-On. driver: ath9k v: kernel.

kernel tests PASSED
Suspension works

Test Case kernel regression

This update has been pushed to stable.

a year ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

approved

a year ago

Builds

kernel-6.12.15-200.fc41

BZ#2333706 Kernel 6.12.6 kernel lockdown disabled

BZ#2345700 CVE-2025-1272 kernel: Secure Boot does not automatically enable kernel lockdown [fedora-41]

BZ#2345701 CVE-2025-1272 kernel: Secure Boot does not automatically enable kernel lockdown [fedora-40]

kernel-6.12.15-200.fc41

Automated Test Results

passed

Test Cases


0	5	Test Case kernel regression