{
  "cveId": "CVE-2025-21825",
  "url": "https://patchblox.com/security/cve/CVE-2025-21825",
  "summary": "CVE-2025-21825 is fixed in 61 products on 1 platform, first by DEBIAN-CVE-2025-21825, released March 6, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT  During the update procedure, when overwrite element in a pre-allocated htab, the freeing of old_element is protected by the bucket lock. The reason why the bucket lock is necessary is that the old_element has already been stashed in htab-\u003Eextra_elems after alloc_htab_elem() returns. If freeing the old_element after the bucket lock is unlocked, the stashed element may be reused by concurrent update procedure and the freeing of old_element will run concurrently with the reuse of the old_element. However, the invocation of check_and_free_fields() may acquire a spin-lock which violates the lockdep rule because its caller has already held a raw-spin-lock (bucket lock). The following warning will be reported when such race happens:    BUG: scheduling while atomic: test_progs/676/0x00000003   3 locks held by test_progs/676:   #0: ffffffff864b0240 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall\u002B0x2c0/0x830   #1: ffff88810e961188 (\u0026htab-\u003Elockdep_key){....}-{2:2}, at: htab_map_update_elem\u002B0x306/0x1500   #2: ffff8881f4eac1b8 (\u0026base-\u003Esoftirq_expiry_lock){....}-{2:2}, at: hrtimer_cancel_wait_running\u002B0xe9/0x1b0   Modules linked in: bpf_testmod(O)   Preemption disabled at:   [\u003Cffffffff817837a3\u003E] htab_map_update_elem\u002B0x293/0x1500   CPU: 0 UID: 0 PID: 676 Comm: test_progs Tainted: G ... 6.12.0\u002B #11   Tainted: [W]=WARN, [O]=OOT_MODULE   Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996)...   Call Trace:   \u003CTASK\u003E   dump_stack_lvl\u002B0x57/0x70   dump_stack\u002B0x10/0x20   __schedule_bug\u002B0x120/0x170   __schedule\u002B0x300c/0x4800   schedule_rtlock\u002B0x37/0x60   rtlock_slowlock_locked\u002B0x6d9/0x54c0   rt_spin_lock\u002B0x168/0x230   hrtimer_cancel_wait_running\u002B0xe9/0x1b0   hrtimer_cancel\u002B0x24/0x30   bpf_timer_delete_work\u002B0x1d/0x40   bpf_timer_cancel_and_free\u002B0x5e/0x80   bpf_obj_free_fields\u002B0x262/0x4a0   check_and_free_fields\u002B0x1d0/0x280   htab_map_update_elem\u002B0x7fc/0x1500   bpf_prog_9f90bc20768e0cb9_overwrite_cb\u002B0x3f/0x43   bpf_prog_ea601c4649694dbd_overwrite_timer\u002B0x5d/0x7e   bpf_prog_test_run_syscall\u002B0x322/0x830   __sys_bpf\u002B0x135d/0x3ca0   __x64_sys_bpf\u002B0x75/0xb0   x64_sys_call\u002B0x1b5/0xa10   do_syscall_64\u002B0x3b/0xc0   entry_SYSCALL_64_after_hwframe\u002B0x4b/0x53   ...   \u003C/TASK\u003E  It seems feasible to break the reuse and refill of per-cpu extra_elems into two independent parts: reuse the per-cpu extra_elems with bucket lock being held and refill the old_element as per-cpu extra_elems after the bucket lock is unlocked. However, it will make the concurrent overwrite procedures on the same CPU return unexpected -E2BIG error when the map is full.  Therefore, the patch fixes the lock problem by breaking the cancelling of bpf_timer into two steps for PREEMPT_RT: 1) use hrtimer_try_to_cancel() and check its return value 2) if the timer is running, use hrtimer_cancel() through a kworker to    cancel it again Considering that the current implementation of hrtimer_cancel() will try to acquire a being held softirq_expiry_lock when the current timer is running, these steps above are reasonable. However, it also has downside. When the timer is running, the cancelling of the timer is delayed when releasing the last map uref. The delay is also fixable (e.g., break the cancelling of bpf timer into two parts: one part in locked scope, another one in unlocked scope), it can be revised later if necessary.  It is a bit hard to decide the right fix tag. One reason is that the problem depends on PREEMPT_RT which is enabled in v6.12. Considering the softirq_expiry_lock lock exists since v5.4 and bpf_timer is introduced in v5.15, the bpf_timer commit is used in the fixes tag and an extra depends-on tag is added to state the dependency on PREEMPT_RT.  Depends-on: v6.12\u002B with PREEMPT_RT enabled",
  "published": "2025-03-06T16:15:54Z",
  "severity": "medium",
  "cvss": 4.7,
  "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00218,
  "epssPercentile": 0.12362,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21825",
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco_debug",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2.150600.12.20.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2.150600.12.20.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_10",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.5.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_10",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.5.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.34.2",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.1",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.34.1",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.34.1",
      "fix": "SUSE-SU-2025:1177-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1177-1",
      "released": "2025-04-08T15:36:33Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.21.coco15sp6.1",
      "fix": "SUSE-SU-2025:01919-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01919-1",
      "released": "2025-06-12T06:29:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.34.1",
      "fix": "SUSE-SU-2025:1178-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1178-1",
      "released": "2025-04-08T16:32:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-101.33.4.3.el9uek",
      "fix": "ELSA-2025-20480",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-20480",
      "released": "2025-07-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.47.2",
      "fix": "SUSE-SU-2025:1180-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1180-1",
      "released": "2025-04-09T07:02:27Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.13-1",
      "fix": "DEBIAN-CVE-2025-21825",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-21825",
      "released": "2025-03-06T16:15:54Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.12.13-1",
      "fix": "DEBIAN-CVE-2025-21825",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-21825",
      "released": "2025-03-06T16:15:54Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}