Linux · Security advisory · February 9, 2025

ELSA-2025-20095: Security update for 14 packages

ELSA-2025-20095, released February 9, 2025, fixes 188 CVEs across 14 products. 4 of them are being exploited (CVE-2024-53197); 4 on CISA KEV. Patch Radar priority: Patch now.

Patch now4 on CISA KEV

CVEs closed

188

None rated Critical

Exploited

CVE-2024-53197

Exploitation more likely

Vendor assessment

Highest EPSS

0.0412

90th percentile

Priority of the 188 CVEs

Patch now 4
                                Urgent 0
                                High 80
                                Routine 104

Fixed package versions

Product	Release	Fixed in
bpftool	ol 8	0:5.15.0-305.176.4.el9uek
bpftool	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-container	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-container	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-container-debug	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-container-debug	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-core	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-core	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-debug	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-debug	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-core	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-core	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-devel	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-devel	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-modules	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-modules	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-modules-extra	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-debug-modules-extra	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-devel	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-devel	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-doc	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-doc	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-modules	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-modules	ol 9	0:5.15.0-305.176.4.el9uek
kernel-uek-modules-extra	ol 8	0:5.15.0-305.176.4.el9uek
kernel-uek-modules-extra	ol 9	0:5.15.0-305.176.4.el9uek

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2024-53197	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H...	7.8	0.0412	KEVExploited
Patch now	CVE-2024-53104	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m...	7.8	0.0340	KEVExploited
Patch now	CVE-2024-53150	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...	7.1	0.0135	KEVExploited
Patch now	CVE-2024-50302	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H...	6.4	0.0081	KEVExploited
High	CVE-2024-49996	kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0078	None reported
High	CVE-2024-44940	linux: In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupport...	7.8	0.0075	None reported
High	CVE-2024-56644	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...	7.1	0.0071	None reported
High	CVE-2024-56626	linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stre...	7.8	0.0070	None reported
High	CVE-2024-56627	linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_strea...	7.1	0.0063	None reported
High	CVE-2024-50283	linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_h...	7.8	0.0062	None reported
High	CVE-2024-56640	kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0062	None reported
High	CVE-2024-56662	kernel: In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nf...	7.8	0.0061	None reported
High	CVE-2024-53141	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: h...	7.8	0.0040	None reported
High	CVE-2024-49950	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0037	None reported
High	CVE-2024-50264	kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...	7.8	0.0035	None reported
High	CVE-2024-53096	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0034	None reported
High	CVE-2024-53171	linux: In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubi...	7.8	0.0032	None reported
High	CVE-2024-53237	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...	7.8	0.0032	None reported
High	CVE-2024-53241	kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...	7.8	0.0031	None reported
High	CVE-2024-39494	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0031	None reported
High	CVE-2024-40906	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0031	None reported
High	CVE-2024-53061	linux: In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The c...	7.8	0.0031	None reported
High	CVE-2024-53239	linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release...	7.8	0.0029	None reported
High	CVE-2024-50267	linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in...	7.8	0.0028	None reported
High	CVE-2024-56633	linux: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bp...	7.8	0.0028	None reported

Also fixes CVE-2024-53197

ELSA-2025-20100
kernel-uek-tools on ol 8
ELSA-2025-20480
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
SUSE-SU-2025:0289-1
kernel-coco, kernel-coco_debug, kernel-source-coco and 1 more on sles 15.6
ALSA-2025:2627
bpftool, kernel, kernel-64k and 62 more on almalinux 9
ELSA-2025-2627
bpftool, kernel, kernel-abi-stablelists and 27 more on ol 9
RHSA-2025:2627
bpftool, kernel, kernel-64k and 60 more on RHEL 9
RLSA-2025:2474
kernel-rt on rocky 8
RLSA-2025:2473
kernel on rocky 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2025-20095.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo