Linux · Oracle Linux · Security advisory · June 11, 2025

ELSA-2025-20372: Security update for 8 packages

ELSA-2025-20372, released June 11, 2025, fixes 30 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
30
None rated Critical
Exploited
0
None reported
Highest CVSS
8.6
Base score, 0 to 10
Highest EPSS
0.0047
40th percentile

Priority of the 30 CVEs

Patch now 0 Urgent 0 High 10 Routine 20

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-containerol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-debugol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-develol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-docol 80:5.4.17-2136.344.4.1.el7uek
kernel-uek-toolsol 80:5.4.17-2136.344.4.1.el7uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-22004 linux: In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The...8.6 0.0036 None reported
High CVE-2025-22035 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0030 None reported
High CVE-2025-22063 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0030 None reported
High CVE-2023-52667 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0027 None reported
High CVE-2024-38555 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
High CVE-2025-22079 linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bou...7.1 0.0025 None reported
High CVE-2024-58093 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0023 None reported
High CVE-2025-21991 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...7.8 0.0023 None reported
High CVE-2025-21993 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...7.1 0.0022 None reported
High CVE-2025-22020 kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H...7.8 0.0021 None reported
Routine CVE-2025-22021 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0047 None reported
Routine CVE-2025-21959 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0045 None reported
Routine CVE-2025-38637 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0033 None reported
Routine CVE-2024-50001 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE tra...5.5 0.0033 None reported
Routine CVE-2025-22086 kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow...5.5 0.0029 None reported
Routine CVE-2025-22071 linux: In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufs_create_context() Lea...5.5 0.0024 None reported
Routine CVE-2025-37937 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0024 None reported
Routine CVE-2025-22045 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B...5.5 0.0024 None reported
Routine CVE-2024-50000 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_a...5.5 0.0024 None reported
Routine CVE-2025-21956 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0023 None reported
Routine CVE-2025-21957 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0023 None reported
Routine CVE-2025-22054 linux: In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() d...5.5 0.0023 None reported
Routine CVE-2025-22073 linux: In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure I...5.5 0.0023 None reported
Routine CVE-2025-21971 kernel-zfcpdump: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0023 None reported
Routine CVE-2025-22007 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...5.5 0.0022 None reported
Showing 1 to 25 of 30 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.