# ELSA-2025-20518-0: Security update for 29 packages

ELSA-2025-20518-0, released November 17, 2025, fixes 109 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2025-20518-0
- Platform: Linux
- Released: Nov 17, 2025
- Priority: High (Closes CVE-2022-49670, high severity)
- CVEs: 109, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20518-0.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| [rv](https://patchblox.com/security/data/product/linux/rv.md) | ol 9 | 0:5.14.0-611.5.1.el9_7 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-49670](https://patchblox.com/security/data/cve/CVE-2022-49670.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0072 |  |
| [CVE-2024-56645](https://patchblox.com/security/data/cve/CVE-2024-56645.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0068 |  |
| [CVE-2024-53090](https://patchblox.com/security/data/cve/CVE-2024-53090.md) | High | afs: Fix lock recursion | 7.8 | 0.0068 |  |
| [CVE-2025-21796](https://patchblox.com/security/data/cve/CVE-2025-21796.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0067 |  |
| [CVE-2025-21795](https://patchblox.com/security/data/cve/CVE-2025-21795.md) | High | kernel: kernel: NFSD: fix hang in nfsd4_shutdown_callback | 7.8 | 0.0067 |  |
| [CVE-2025-21844](https://patchblox.com/security/data/cve/CVE-2025-21844.md) | High | kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512). | 7.8 | 0.0062 |  |
| [CVE-2025-21765](https://patchblox.com/security/data/cve/CVE-2025-21765.md) | High | kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906). | 7.8 | 0.0061 |  |
| [CVE-2024-56662](https://patchblox.com/security/data/cve/CVE-2024-56662.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0061 |  |
| [CVE-2024-49864](https://patchblox.com/security/data/cve/CVE-2024-49864.md) | High | kernel-64kb: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256). | 7.8 | 0.0045 |  |
| [CVE-2025-21855](https://patchblox.com/security/data/cve/CVE-2025-21855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0044 |  |
| [CVE-2025-21829](https://patchblox.com/security/data/cve/CVE-2025-21829.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0041 |  |
| [CVE-2024-57995](https://patchblox.com/security/data/cve/CVE-2024-57995.md) | High | kernel-rt-64k-devel: kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() | 7.8 | 0.0036 |  |
| [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525). | 7.8 | 0.0033 |  |
| [CVE-2024-57986](https://patchblox.com/security/data/cve/CVE-2024-57986.md) | High | kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections | 7.8 | 0.0032 |  |
| [CVE-2022-48830](https://patchblox.com/security/data/cve/CVE-2022-48830.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0031 |  |
| [CVE-2024-53241](https://patchblox.com/security/data/cve/CVE-2024-53241.md) | High | kernel-64kb: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). | 7.8 | 0.0031 |  |
| [CVE-2022-49672](https://patchblox.com/security/data/cve/CVE-2022-49672.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0030 |  |
| [CVE-2024-46744](https://patchblox.com/security/data/cve/CVE-2024-46744.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2025-21647](https://patchblox.com/security/data/cve/CVE-2025-21647.md) | High | kernel-64kb: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133). | 7.8 | 0.0028 |  |
| [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312). | 7.8 | 0.0028 |  |
| [CVE-2022-49623](https://patchblox.com/security/data/cve/CVE-2022-49623.md) | High | kernel: kernel: powerpc/xive/spapr: correct bitmap allocation size | 7.8 | 0.0028 |  |
| [CVE-2022-49657](https://patchblox.com/security/data/cve/CVE-2022-49657.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0028 |  |
| [CVE-2022-49432](https://patchblox.com/security/data/cve/CVE-2022-49432.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0028 |  |
| [CVE-2022-49643](https://patchblox.com/security/data/cve/CVE-2022-49643.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0028 |  |
| [CVE-2025-21864](https://patchblox.com/security/data/cve/CVE-2025-21864.md) | High | kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482). | 7.8 | 0.0028 |  |
| [CVE-2022-49648](https://patchblox.com/security/data/cve/CVE-2022-49648.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0027 |  |
| [CVE-2024-56672](https://patchblox.com/security/data/cve/CVE-2024-56672.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2025-21787](https://patchblox.com/security/data/cve/CVE-2025-21787.md) | High | kernel-64kb: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774). | 7.8 | 0.0027 |  |
| [CVE-2022-49269](https://patchblox.com/security/data/cve/CVE-2022-49269.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0027 |  |
| [CVE-2022-49437](https://patchblox.com/security/data/cve/CVE-2022-49437.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0027 |  |
| [CVE-2022-49627](https://patchblox.com/security/data/cve/CVE-2022-49627.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0027 |  |
| [CVE-2024-56709](https://patchblox.com/security/data/cve/CVE-2024-56709.md) | High | io_uring: check if iowq is killed before queuing | 7.8 | 0.0027 |  |
| [CVE-2024-57981](https://patchblox.com/security/data/cve/CVE-2024-57981.md) | High | kernel-64k-modules-extra: kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts | 7.8 | 0.0027 |  |
| [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel-64kb: io_uring: prevent opcode speculation (bsc#1239475). | 7.8 | 0.0027 |  |
| [CVE-2025-21791](https://patchblox.com/security/data/cve/CVE-2025-21791.md) | High | kernel-rt: kernel: vrf: use RCU protection in l3mdev_l3_out() | 7.8 | 0.0027 |  |
| [CVE-2025-21745](https://patchblox.com/security/data/cve/CVE-2025-21745.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2025-21696](https://patchblox.com/security/data/cve/CVE-2025-21696.md) | High | mm: clear uffd-wp PTE/PMD state on mremap() | 7.8 | 0.0026 |  |
| [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-58012](https://patchblox.com/security/data/cve/CVE-2024-58012.md) | High | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | 7.8 | 0.0026 |  |
| [CVE-2025-21848](https://patchblox.com/security/data/cve/CVE-2025-21848.md) | High | kernel-64kb: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479). | 7.8 | 0.0025 |  |
| [CVE-2024-46689](https://patchblox.com/security/data/cve/CVE-2024-46689.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-21846](https://patchblox.com/security/data/cve/CVE-2025-21846.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-53119](https://patchblox.com/security/data/cve/CVE-2024-53119.md) | High | kernel-coco_debug: virtio/vsock: Fix accept_queue memory leak (bsc#1234073). | 7.8 | 0.0025 |  |
| [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-47727](https://patchblox.com/security/data/cve/CVE-2024-47727.md) | High | kernel-64kb: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116). | 7.8 | 0.0025 |  |
| [CVE-2024-57998](https://patchblox.com/security/data/cve/CVE-2024-57998.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21714](https://patchblox.com/security/data/cve/CVE-2025-21714.md) | High | RDMA/mlx5: Fix implicit ODP use after free | 7.8 | 0.0024 |  |
| [CVE-2024-53170](https://patchblox.com/security/data/cve/CVE-2024-53170.md) | High | kernel-64kb: block: fix uaf for flush rq while iterating tags (bsc#1234888). | 7.8 | 0.0024 |  |
| [CVE-2024-53135](https://patchblox.com/security/data/cve/CVE-2024-53135.md) | High | kernel-64kb: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154). | 7.8 | 0.0024 |  |
| [CVE-2025-21861](https://patchblox.com/security/data/cve/CVE-2025-21861.md) | High | kernel-64kb: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize() (bsc#1239483). | 7.8 | 0.0024 |  |
| [CVE-2024-56603](https://patchblox.com/security/data/cve/CVE-2024-56603.md) | High | kernel-64kb: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415). | 8.1 | 0.0024 |  |
| [CVE-2024-53229](https://patchblox.com/security/data/cve/CVE-2024-53229.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2022-49024](https://patchblox.com/security/data/cve/CVE-2022-49024.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0024 |  |
| [CVE-2024-57990](https://patchblox.com/security/data/cve/CVE-2024-57990.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21726](https://patchblox.com/security/data/cve/CVE-2025-21726.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21729](https://patchblox.com/security/data/cve/CVE-2025-21729.md) | High | kernel-64kb: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874). | 7.8 | 0.0024 |  |
| [CVE-2024-50195](https://patchblox.com/security/data/cve/CVE-2024-50195.md) | High | kernel-64kb: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103). | 7.8 | 0.0023 |  |
| [CVE-2024-56739](https://patchblox.com/security/data/cve/CVE-2024-56739.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-21786](https://patchblox.com/security/data/cve/CVE-2025-21786.md) | High | workqueue: Put the pwq after detaching the rescuer from the pool | 7.8 | 0.0023 |  |
| [CVE-2022-49353](https://patchblox.com/security/data/cve/CVE-2022-49353.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0023 |  |
| [CVE-2025-21790](https://patchblox.com/security/data/cve/CVE-2025-21790.md) | High | kernel-modules-core: kernel: vxlan: check vxlan_vnigroup_init() return value | 7.8 | 0.0023 |  |
| [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel-64kb: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061). | 7.8 | 0.0023 |  |
| [CVE-2024-53680](https://patchblox.com/security/data/cve/CVE-2024-53680.md) | High | kernel-64kb: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715). | 7.8 | 0.0023 |  |
| [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-64kb: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555). | 7.8 | 0.0023 |  |
| [CVE-2025-21806](https://patchblox.com/security/data/cve/CVE-2025-21806.md) | High | kernel-64kb: net: let net.core.dev_weight always be non-zero (bsc#1238746). | 7.8 | 0.0023 |  |
| [CVE-2024-54456](https://patchblox.com/security/data/cve/CVE-2024-54456.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0023 |  |
| [CVE-2024-49570](https://patchblox.com/security/data/cve/CVE-2024-49570.md) | High | kernel-64kb: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782). | 7.8 | 0.0023 |  |
| [CVE-2024-58083](https://patchblox.com/security/data/cve/CVE-2024-58083.md) | High | kernel-64kb: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036). | 7.8 | 0.0022 |  |
| [CVE-2025-21738](https://patchblox.com/security/data/cve/CVE-2025-21738.md) | High | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 7.8 | 0.0022 |  |
| [CVE-2024-58014](https://patchblox.com/security/data/cve/CVE-2024-58014.md) | High | kernel-64k-core: kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() | 7.8 | 0.0022 |  |
| [CVE-2025-21739](https://patchblox.com/security/data/cve/CVE-2025-21739.md) | High | kernel-64kb: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506). | 7.8 | 0.0022 |  |
| [CVE-2025-21828](https://patchblox.com/security/data/cve/CVE-2025-21828.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 |  |
| [CVE-2024-53216](https://patchblox.com/security/data/cve/CVE-2024-53216.md) | High | kernel-coco_debug: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003). | 7.8 | 0.0022 |  |
| [CVE-2024-50060](https://patchblox.com/security/data/cve/CVE-2024-50060.md) | High | kernel-64kb: io_uring: check if we need to reschedule during overflow flush (bsc#1232417). | 7.8 | 0.0022 |  |
| [CVE-2025-21648](https://patchblox.com/security/data/cve/CVE-2025-21648.md) | High | kernel-64kb: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142). | 7.8 | 0.0022 |  |
| [CVE-2024-57987](https://patchblox.com/security/data/cve/CVE-2024-57987.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-57988](https://patchblox.com/security/data/cve/CVE-2024-57988.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-57989](https://patchblox.com/security/data/cve/CVE-2024-57989.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0022 |  |
| [CVE-2025-21847](https://patchblox.com/security/data/cve/CVE-2025-21847.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2022-49845](https://patchblox.com/security/data/cve/CVE-2022-49845.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0022 |  |
| [CVE-2025-21671](https://patchblox.com/security/data/cve/CVE-2025-21671.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-58072](https://patchblox.com/security/data/cve/CVE-2024-58072.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21728](https://patchblox.com/security/data/cve/CVE-2025-21728.md) | High | kernel-64kb: bpf: Send signals asynchronously if !preemptible (bsc#1237879). | 7.8 | 0.0021 |  |
| [CVE-2025-21631](https://patchblox.com/security/data/cve/CVE-2025-21631.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-57993](https://patchblox.com/security/data/cve/CVE-2024-57993.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21691](https://patchblox.com/security/data/cve/CVE-2025-21691.md) | High | kernel-debug-devel: kernel: cachestat: fix page cache statistics permission checking | 7.8 | 0.0020 |  |
| [CVE-2024-47679](https://patchblox.com/security/data/cve/CVE-2024-47679.md) | High | kernel-64kb: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930). | 7.8 | 0.0020 |  |
| [CVE-2025-21693](https://patchblox.com/security/data/cve/CVE-2025-21693.md) | High | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 7.8 | 0.0020 |  |
| [CVE-2025-21826](https://patchblox.com/security/data/cve/CVE-2025-21826.md) | High | kernel-64k-debug: kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length | 7.8 | 0.0020 |  |
| [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 |  |
| [CVE-2024-58068](https://patchblox.com/security/data/cve/CVE-2024-58068.md) | High | kernel-64kb: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961). | 7.8 | 0.0019 |  |
| [CVE-2024-58075](https://patchblox.com/security/data/cve/CVE-2024-58075.md) | High | kernel-64k-devel-matched: kernel: crypto: tegra - do not transfer req when tegra init fails | 7.8 | 0.0019 |  |
| [CVE-2025-38116](https://patchblox.com/security/data/cve/CVE-2025-38116.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0019 |  |
| [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel-rt-64k-modules: kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY | 7.8 | 0.0019 |  |
| [CVE-2024-58077](https://patchblox.com/security/data/cve/CVE-2024-58077.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-53052](https://patchblox.com/security/data/cve/CVE-2024-53052.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-58088](https://patchblox.com/security/data/cve/CVE-2024-58088.md) | High | kernel-64kb: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). | 7.8 | 0.0018 |  |
| [CVE-2022-49443](https://patchblox.com/security/data/cve/CVE-2022-49443.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0018 |  |
| [CVE-2024-58057](https://patchblox.com/security/data/cve/CVE-2024-58057.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-58015](https://patchblox.com/security/data/cve/CVE-2024-58015.md) | High | kernel-64k-debug-modules-core: kernel: wifi: ath12k: Fix for out-of bound access error | 7.8 | 0.0018 |  |
| [CVE-2024-58062](https://patchblox.com/security/data/cve/CVE-2024-58062.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2025-21851](https://patchblox.com/security/data/cve/CVE-2025-21851.md) | High | kernel-64k-core: kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel | 7.8 | 0.0018 |  |
| [CVE-2024-50294](https://patchblox.com/security/data/cve/CVE-2024-50294.md) | High | kernel-64kb: rxrpc: Fix missing locking causing hanging calls (bsc#1233483). | 7.8 | 0.0017 |  |
| [CVE-2022-49357](https://patchblox.com/security/data/cve/CVE-2022-49357.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0017 |  |
| [CVE-2025-21746](https://patchblox.com/security/data/cve/CVE-2025-21746.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0015 |  |
| [CVE-2025-21672](https://patchblox.com/security/data/cve/CVE-2025-21672.md) | High | afs: Fix merge preference rule failure condition | 7.8 | 0.0014 |  |
| [CVE-2024-56786](https://patchblox.com/security/data/cve/CVE-2024-56786.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a |  |
| [CVE-2025-21837](https://patchblox.com/security/data/cve/CVE-2025-21837.md) | High | kernel-64kb: io_uring/uring_cmd: unconditionally copy SQEs at prep time (bsc#1239064). | 7.8 | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.