# ELSA-2025-20471: Security update for 8 packages

ELSA-2025-20471, released July 14, 2025, fixes 53 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2025-20471
- Platform: Linux
- Released: Jul 14, 2025
- Priority: High (Closes CVE-2024-50154, high severity)
- CVEs: 53, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20471.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |
| [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 8 | 0:5.4.17-2136.345.5.3.el7uek |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-50154](https://patchblox.com/security/data/cve/CVE-2024-50154.md) | High | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 7.0 | 0.0056 |  |
| [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 |  |
| [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 |  |
| [CVE-2025-37840](https://patchblox.com/security/data/cve/CVE-2025-37840.md) | High | mtd: rawnand: brcmnand: fix PM resume warning | 7.8 | 0.0033 |  |
| [CVE-2025-37858](https://patchblox.com/security/data/cve/CVE-2025-37858.md) | High | fs/jfs: Prevent integer overflow in AG size calculation | 7.8 | 0.0031 |  |
| [CVE-2025-37785](https://patchblox.com/security/data/cve/CVE-2025-37785.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 7.1 | 0.0031 |  |
| [CVE-2021-47352](https://patchblox.com/security/data/cve/CVE-2021-47352.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2025-37803](https://patchblox.com/security/data/cve/CVE-2025-37803.md) | High | udmabuf: fix a buf size overflow issue during udmabuf creation | 7.8 | 0.0025 |  |
| [CVE-2025-37810](https://patchblox.com/security/data/cve/CVE-2025-37810.md) | High | usb: dwc3: gadget: check that event count does not exceed event buffer length | 7.8 | 0.0025 |  |
| [CVE-2025-37838](https://patchblox.com/security/data/cve/CVE-2025-37838.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HSI: ssi_protocol: Fix use after free vulnerabil... | 7.8 | 0.0025 |  |
| [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 |  |
| [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 |  |
| [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 |  |
| [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 |  |
| [CVE-2025-23158](https://patchblox.com/security/data/cve/CVE-2025-23158.md) | High | media: venus: hfi: add check to handle incorrect queue size | 7.8 | 0.0022 |  |
| [CVE-2025-23157](https://patchblox.com/security/data/cve/CVE-2025-23157.md) | High | media: venus: hfi_parser: add check to avoid out of bound access | 7.1 | 0.0022 |  |
| [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 |  |
| [CVE-2025-37817](https://patchblox.com/security/data/cve/CVE-2025-37817.md) | High | mcb: fix a double free bug in chameleon_parse_gdd() | 7.8 | 0.0022 |  |
| [CVE-2025-37738](https://patchblox.com/security/data/cve/CVE-2025-37738.md) | High | ext4: ignore xattrs past end | 7.8 | 0.0022 |  |
| [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 |  |
| [CVE-2025-37892](https://patchblox.com/security/data/cve/CVE-2025-37892.md) | High | mtd: inftlcore: Add error check for inftl_read_oob() | 7.8 | 0.0021 |  |
| [CVE-2025-37796](https://patchblox.com/security/data/cve/CVE-2025-37796.md) | High | wifi: at76c50x: fix use after free access in at76_disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 |  |
| [CVE-2025-37982](https://patchblox.com/security/data/cve/CVE-2025-37982.md) | High | wifi: wl1251: fix memory leak in wl1251_tx_work | 7.0 | 0.0020 |  |
| [CVE-2025-37940](https://patchblox.com/security/data/cve/CVE-2025-37940.md) | High | ftrace: Add cond_resched() to ftrace_graph_set_hash() | 7.0 | 0.0016 |  |
| [CVE-2025-37757](https://patchblox.com/security/data/cve/CVE-2025-37757.md) | Routine | tipc: fix memory leak in tipc_link_xmit | 6.1 | 0.0045 |  |
| [CVE-2025-37857](https://patchblox.com/security/data/cve/CVE-2025-37857.md) | Routine | scsi: st: Fix array overflow in st_setup() | 5.5 | 0.0031 |  |
| [CVE-2025-37859](https://patchblox.com/security/data/cve/CVE-2025-37859.md) | Routine | page_pool: avoid infinite loop to schedule delayed worker | 5.5 | 0.0031 |  |
| [CVE-2025-37862](https://patchblox.com/security/data/cve/CVE-2025-37862.md) | Routine | HID: pidff: Fix null pointer dereference in pidff_find_fields | 5.5 | 0.0031 |  |
| [CVE-2025-37881](https://patchblox.com/security/data/cve/CVE-2025-37881.md) | Routine | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | 5.5 | 0.0031 |  |
| [CVE-2025-37841](https://patchblox.com/security/data/cve/CVE-2025-37841.md) | Routine | pm: cpupower: bench: Prevent NULL dereference on malloc failure | 5.5 | 0.0030 |  |
| [CVE-2025-37850](https://patchblox.com/security/data/cve/CVE-2025-37850.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.   The following security bu... | 5.5 | 0.0030 |  |
| [CVE-2024-26744](https://patchblox.com/security/data/cve/CVE-2024-26744.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: M... | 5.5 | 0.0026 |  |
| [CVE-2025-23159](https://patchblox.com/security/data/cve/CVE-2025-23159.md) | Routine | media: venus: hfi: add a check to handle OOB in sfr region | 5.5 | 0.0023 |  |
| [CVE-2025-37765](https://patchblox.com/security/data/cve/CVE-2025-37765.md) | Routine | drm/nouveau: prime: fix ttm_bo_delayed_delete oops | 5.5 | 0.0022 |  |
| [CVE-2025-23140](https://patchblox.com/security/data/cve/CVE-2025-23140.md) | Routine | misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | 5.5 | 0.0022 |  |
| [CVE-2025-23147](https://patchblox.com/security/data/cve/CVE-2025-23147.md) | Routine | i3c: Add NULL pointer check in i3c_master_queue_ibi() | 5.5 | 0.0022 |  |
| [CVE-2025-37766](https://patchblox.com/security/data/cve/CVE-2025-37766.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-37808](https://patchblox.com/security/data/cve/CVE-2025-37808.md) | Routine | crypto: null - Use spin lock instead of mutex | 5.5 | 0.0021 |  |
| [CVE-2025-37768](https://patchblox.com/security/data/cve/CVE-2025-37768.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-37770](https://patchblox.com/security/data/cve/CVE-2025-37770.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-37781](https://patchblox.com/security/data/cve/CVE-2025-37781.md) | Routine | i2c: cros-ec-tunnel: defer probe if parent EC is not present | 5.5 | 0.0021 |  |
| [CVE-2025-37824](https://patchblox.com/security/data/cve/CVE-2025-37824.md) | Routine | tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | 5.5 | 0.0021 |  |
| [CVE-2025-37829](https://patchblox.com/security/data/cve/CVE-2025-37829.md) | Routine | cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | 5.5 | 0.0021 |  |
| [CVE-2025-37792](https://patchblox.com/security/data/cve/CVE-2025-37792.md) | Routine | Bluetooth: btrtl: Prevent potential NULL dereference | 5.5 | 0.0020 |  |
| [CVE-2025-37794](https://patchblox.com/security/data/cve/CVE-2025-37794.md) | Routine | wifi: mac80211: Purge vif txq in ieee80211_do_stop() | 5.5 | 0.0020 |  |
| [CVE-2025-37740](https://patchblox.com/security/data/cve/CVE-2025-37740.md) | Routine | jfs: add sanity check for agwidth in dbMount | 5.5 | 0.0020 |  |
| [CVE-2025-37758](https://patchblox.com/security/data/cve/CVE-2025-37758.md) | Routine | ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | 5.5 | 0.0020 |  |
| [CVE-2025-37773](https://patchblox.com/security/data/cve/CVE-2025-37773.md) | Routine | virtiofs: add filesystem context source name check | 5.5 | 0.0020 |  |
| [CVE-2025-37983](https://patchblox.com/security/data/cve/CVE-2025-37983.md) | Routine | qibfs: fix _another_ leak | 5.5 | 0.0019 |  |
| [CVE-2025-37741](https://patchblox.com/security/data/cve/CVE-2025-37741.md) | Routine | jfs: Prevent copying of nlink with value 0 from disk inode | 5.5 | 0.0016 |  |
| [CVE-2025-37812](https://patchblox.com/security/data/cve/CVE-2025-37812.md) | Routine | usb: cdns3: Fix deadlock when using NCM gadget | 5.5 | 0.0016 |  |
| [CVE-2025-23163](https://patchblox.com/security/data/cve/CVE-2025-23163.md) | Routine | net: vlan: don't propagate flags on open | 5.5 | 0.0016 |  |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.