Linux · 
AlmaLinux · Security advisory · September 15, 2025
AlmaLinux · Security advisory · September 15, 2025ALSA-2025:15782: Security update for 2 packages
ALSA-2025:15782, released September 15, 2025, fixes 7 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
7.9
Base score, 0 to 10
Highest EPSS
0.0038
31st percentile
Priority of the 7 CVEs
Patch now 0
Urgent 0
High 6
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-abi-stablelists | almalinux 10 | 6.12.0-55.33.1.el10_0 |
| kernel-doc | almalinux 10 | 6.12.0-55.33.1.el10_0 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2025-38498 | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 | None reported |
| High | CVE-2025-38332 | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 | None reported |
| High | CVE-2025-38392 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.3 | 0.0019 | None reported |
| High | CVE-2025-38463 | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 | None reported |
| High | CVE-2025-38550 | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | 7.8 | 0.0017 | None reported |
| High | CVE-2025-38500 | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 7.8 | 0.0017 | None reported |
| Routine | CVE-2025-39770 | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0038 | None reported |
Showing 1 to 7 of 7
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.