# ELSA-2025-20553: Security update for 8 packages

ELSA-2025-20553, released September 9, 2025, fixes 47 CVEs across 8 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/elsa-2025-20553
- Platform: Linux
- Released: Sep 9, 2025
- Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV))
- CVEs: 47, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20553.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |
| [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 8 | 0:5.4.17-2136.347.6.el7uek |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV |
| [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 |  |
| [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 |  |
| [CVE-2025-37752](https://patchblox.com/security/data/cve/CVE-2025-37752.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.   The following security bu... | 7.8 | 0.0030 |  |
| [CVE-2024-57996](https://patchblox.com/security/data/cve/CVE-2024-57996.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net_sched: sch_sfq: don't allow 1 packet limit... | 7.0 | 0.0027 |  |
| [CVE-2025-38298](https://patchblox.com/security/data/cve/CVE-2025-38298.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/skx_common: Fix general protection fault  A... | 7.8 | 0.0023 |  |
| [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 |  |
| [CVE-2025-38194](https://patchblox.com/security/data/cve/CVE-2025-38194.md) | High | jffs2: check that raw node were preallocated before writing summary | 7.0 | 0.0023 |  |
| [CVE-2025-37958](https://patchblox.com/security/data/cve/CVE-2025-37958.md) | High | mm/huge_memory: fix dereferencing invalid pmd migration entry | 7.1 | 0.0023 |  |
| [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 |  |
| [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 |  |
| [CVE-2025-38184](https://patchblox.com/security/data/cve/CVE-2025-38184.md) | High | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 7.0 | 0.0022 |  |
| [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 |  |
| [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 |  |
| [CVE-2025-38328](https://patchblox.com/security/data/cve/CVE-2025-38328.md) | High | jffs2: check jffs2_prealloc_raw_node_refs() result in few other places | 7.1 | 0.0022 |  |
| [CVE-2025-38324](https://patchblox.com/security/data/cve/CVE-2025-38324.md) | High | mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). | 7.0 | 0.0022 |  |
| [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 |  |
| [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0022 |  |
| [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 |  |
| [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 |  |
| [CVE-2025-38320](https://patchblox.com/security/data/cve/CVE-2025-38320.md) | High | arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() | 7.1 | 0.0021 |  |
| [CVE-2025-38285](https://patchblox.com/security/data/cve/CVE-2025-38285.md) | High | bpf: Fix WARN() in get_bpf_raw_tp_regs | 7.1 | 0.0021 |  |
| [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 |  |
| [CVE-2025-38086](https://patchblox.com/security/data/cve/CVE-2025-38086.md) | High | net: ch9200: fix uninitialised access during mii_nway_restart | 7.8 | 0.0021 |  |
| [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 |  |
| [CVE-2025-38346](https://patchblox.com/security/data/cve/CVE-2025-38346.md) | High | ftrace: Fix UAF when lookup kallsym after ftrace disabled | 7.8 | 0.0020 |  |
| [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 |  |
| [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 |  |
| [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 |  |
| [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0018 |  |
| [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0016 |  |
| [CVE-2025-38083](https://patchblox.com/security/data/cve/CVE-2025-38083.md) | High | net_sched: prio: fix a race in prio_tune() | 7.0 | 0.0016 |  |
| [CVE-2022-48829](https://patchblox.com/security/data/cve/CVE-2022-48829.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSD: Fix NFSv3 SETATTR/CREATE's handling of lar... | 5.5 | 0.0065 |  |
| [CVE-2022-48828](https://patchblox.com/security/data/cve/CVE-2022-48828.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSD: Fix ia_size underflow  iattr::ia_size is a... | 5.5 | 0.0063 |  |
| [CVE-2022-48773](https://patchblox.com/security/data/cve/CVE-2022-48773.md) | Routine | kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 5.5 | 0.0025 |  |
| [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0024 |  |
| [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 |  |
| [CVE-2025-38135](https://patchblox.com/security/data/cve/CVE-2025-38135.md) | Routine | serial: Fix potential null-ptr-deref in mlb_usio_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 |  |
| [CVE-2025-38190](https://patchblox.com/security/data/cve/CVE-2025-38190.md) | Routine | atm: Revert atm_account_tx() if copy_from_iter_full() fails. | 5.5 | 0.0021 |  |
| [CVE-2025-38185](https://patchblox.com/security/data/cve/CVE-2025-38185.md) | Routine | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 5.5 | 0.0020 |  |
| [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 |  |
| [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 |  |
| [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 |  |
| [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0020 |  |
| [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 |  |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.