Linux · Security advisory · July 7, 2025

ELSA-2025-20404: Security update for 19 packages

ELSA-2025-20404, released July 7, 2025, fixes 2 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
2
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0049
42nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 2 High 0 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-309.180.4.2.el9uek
bpftoolol 90:5.15.0-309.180.4.2.el9uek
kernel-uekol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-containerol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-containerol 90:5.15.0-309.180.4.2.el9uek
kernel-uek-container-debugol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-container-debugol 90:5.15.0-309.180.4.2.el9uek
kernel-uek-coreol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-debugol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-debug-develol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-develol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-docol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-modulesol 80:5.15.0-309.180.4.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-309.180.4.2.el9uek
kernel-uek64kol 80:5.15.0-309.180.4.2.el9uek
kernel-uek64k-coreol 80:5.15.0-309.180.4.2.el9uek
kernel-uek64k-develol 80:5.15.0-309.180.4.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-309.180.4.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-309.180.4.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2024-36350 AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue 7.8 0.0049 Exploitation Less Likely
Urgent CVE-2024-36357 AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue 7.8 0.0036 Exploitation Less Likely
Showing 1 to 2 of 2 1