Linux · Security advisory · November 11, 2025

ALSA-2025:20095: Security update for 75 packages

ALSA-2025:20095, released November 11, 2025, fixes 88 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
88
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0067
52nd percentile

Priority of the 88 CVEs

Patch now 0 Urgent 2 High 86 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 106.12.0-124.8.1.el10_1
kernel-64kalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-corealmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debugalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debug-corealmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debug-develalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matchedalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debug-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debug-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-develalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-devel-matchedalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-64k-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-64k-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-abi-stablelistsalmalinux 106.12.0-124.8.1.el10_1
kernel-corealmalinux 106.12.0-124.8.1.el10_1
kernel-cross-headersalmalinux 106.12.0-124.8.1.el10_1
kernel-debugalmalinux 106.12.0-124.8.1.el10_1
kernel-debug-corealmalinux 106.12.0-124.8.1.el10_1
kernel-debug-develalmalinux 106.12.0-124.8.1.el10_1
kernel-debug-devel-matchedalmalinux 106.12.0-124.8.1.el10_1
kernel-debug-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-debug-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-debug-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-debug-uki-virtalmalinux 106.12.0-124.8.1.el10_1
kernel-develalmalinux 106.12.0-124.8.1.el10_1
kernel-devel-matchedalmalinux 106.12.0-124.8.1.el10_1
kernel-docalmalinux 106.12.0-124.8.1.el10_1
kernel-headersalmalinux 106.12.0-124.8.1.el10_1
kernel-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-modules-extra-matchedalmalinux 106.12.0-124.8.1.el10_1
kernel-rtalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64kalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-debugalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-debug-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-debug-develalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-develalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-64k-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-debugalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-debug-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-debug-develalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-debug-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-debug-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-debug-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-develalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-rt-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-rt-modules-extraalmalinux 106.12.0-124.8.1.el10_1
kernel-toolsalmalinux 106.12.0-124.8.1.el10_1
kernel-tools-libsalmalinux 106.12.0-124.8.1.el10_1
kernel-tools-libs-develalmalinux 106.12.0-124.8.1.el10_1
kernel-uki-virtalmalinux 106.12.0-124.8.1.el10_1
kernel-uki-virt-addonsalmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdumpalmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdump-corealmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdump-develalmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdump-devel-matchedalmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdump-modulesalmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdump-modules-corealmalinux 106.12.0-124.8.1.el10_1
kernel-zfcpdump-modules-extraalmalinux 106.12.0-124.8.1.el10_1
libperfalmalinux 106.12.0-124.8.1.el10_1
perfalmalinux 106.12.0-124.8.1.el10_1
python3-perfalmalinux 106.12.0-124.8.1.el10_1
rtlaalmalinux 106.12.0-124.8.1.el10_1
rvalmalinux 106.12.0-124.8.1.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2024-36350 AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue 7.8 0.0049 Exploitation Less Likely
Urgent CVE-2024-36357 AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue 7.8 0.0036 Exploitation Less Likely
High CVE-2025-21796 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0067 None reported
High CVE-2025-21795 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0067 None reported
High CVE-2025-21844 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0062 None reported
High CVE-2025-21765 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0061 None reported
High CVE-2024-56662 kernel: In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nf... 7.8 0.0061 None reported
High CVE-2025-21855 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0044 None reported
High CVE-2024-28956 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0043 None reported
High CVE-2025-37749 net: ppp: Add bound checking for skb data on ppp_sync_txmung 7.8 0.0041 None reported
High CVE-2024-57995 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0036 None reported
High CVE-2025-22056 kernel-64k-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0032 None reported
High CVE-2024-57986 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0032 None reported
High CVE-2024-53241 kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... 7.8 0.0031 None reported
High CVE-2024-58006 PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() 7.8 0.0031 None reported
High CVE-2025-21647 kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0028 None reported
High CVE-2025-21702 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0028 None reported
High CVE-2025-21864 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0028 None reported
High CVE-2025-21785 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2024-57901 kernel-64k-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2024-57902 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2024-57981 kernel-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2025-21863 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2025-21791 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2024-58020 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0026 None reported
Showing 1 to 25 of 88 1Next