{
  "fix": "ELSA-2025-20719",
  "url": "https://patchblox.com/security/fix/linux/elsa-2025-20719",
  "summary": "ELSA-2025-20719, released October 24, 2025, fixes 7 CVEs across 35 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 35 packages",
  "released": "2025-10-24T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-39964, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 7,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.10258,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2025-20719.html",
  "appliesTo": [
    {
      "product": "kernel-uek",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-deprecated",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-deprecated",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-desktop",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-desktop",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-usb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-usb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-wireless",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-wireless",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-doc",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-doc",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-deprecated",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-deprecated",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-desktop",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-desktop",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-extra-netfilter",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-extra-netfilter",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-usb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-usb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-wireless",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-wireless",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-deprecated",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-deprecated",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-desktop",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-desktop",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-extra-netfilter",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-extra-netfilter",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-usb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-usb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-wireless",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-wireless",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-104.43.4.3.el9uek",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39964",
      "url": "https://patchblox.com/security/cve/CVE-2025-39964",
      "title": "crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01607,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39973",
      "url": "https://patchblox.com/security/cve/CVE-2025-39973",
      "title": "i40e: add validation for ring_len param",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39946",
      "url": "https://patchblox.com/security/cve/CVE-2025-39946",
      "title": "tls: make sure to abort the stream if headers are bogus",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.10258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39965",
      "url": "https://patchblox.com/security/cve/CVE-2025-39965",
      "title": "xfrm: xfrm_alloc_spi shouldn\u0027t use 0 as SPI",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39718",
      "url": "https://patchblox.com/security/cve/CVE-2025-39718",
      "title": "vsock/virtio: Validate length in packet header before skb_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39963",
      "url": "https://patchblox.com/security/cve/CVE-2025-39963",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring: fix incorrect io_kiocb reference in io...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39977",
      "url": "https://patchblox.com/security/cve/CVE-2025-39977",
      "title": "futex: Prevent use-after-free during requeue-PI",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}