Linux · Security advisory · July 14, 2025

ELSA-2025-20470: Security update for 19 packages

ELSA-2025-20470, released July 14, 2025, fixes 144 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
144
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0090
59th percentile

Priority of the 144 CVEs

Patch now 0 Urgent 0 High 67 Routine 77

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-310.184.5.2.el9uek
bpftoolol 90:5.15.0-310.184.5.2.el9uek
kernel-uekol 80:5.15.0-310.184.5.2.el9uek
kernel-uekol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-containerol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-containerol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-coreol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-coreol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-debugol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-debugol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-develol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-develol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-docol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-docol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-310.184.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-310.184.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-310.184.5.2.el9uek
kernel-uek64kol 80:5.15.0-310.184.5.2.el9uek
kernel-uek64kol 90:5.15.0-310.184.5.2.el9uek
kernel-uek64k-coreol 80:5.15.0-310.184.5.2.el9uek
kernel-uek64k-coreol 90:5.15.0-310.184.5.2.el9uek
kernel-uek64k-develol 80:5.15.0-310.184.5.2.el9uek
kernel-uek64k-develol 90:5.15.0-310.184.5.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-310.184.5.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-310.184.5.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-310.184.5.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-310.184.5.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-38541 linux: In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_moda... 7.8 0.0090 None reported
High CVE-2024-26952 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer o... 7.8 0.0073 None reported
High CVE-2024-50047 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0052 None reported
High CVE-2025-37749 net: ppp: Add bound checking for skb data on ppp_sync_txmung 7.8 0.0041 None reported
High CVE-2024-50125 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... 7.8 0.0034 None reported
High CVE-2025-37839 jbd2: remove wrong sb->s_sequence check 7.8 0.0033 None reported
High CVE-2025-37840 mtd: rawnand: brcmnand: fix PM resume warning 7.8 0.0033 None reported
High CVE-2025-37885 KVM: x86: Reset IRTE to host control if *new* route isn't postable 7.8 0.0032 None reported
High CVE-2025-37858 fs/jfs: Prevent integer overflow in AG size calculation 7.8 0.0031 None reported
High CVE-2025-37927 iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid 7.8 0.0030 None reported
High CVE-2024-49960 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0029 None reported
High CVE-2024-26739 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0028 None reported
High CVE-2024-53203 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0027 None reported
High CVE-2024-35867 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0027 None reported
High CVE-2024-46774 linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construc... 7.1 0.0027 None reported
High CVE-2024-54458 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0026 None reported
High CVE-2024-49989 linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during am... 7.8 0.0026 None reported
High CVE-2024-50280 linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_wor... 7.8 0.0025 None reported
High CVE-2025-37803 udmabuf: fix a buf size overflow issue during udmabuf creation 7.8 0.0025 None reported
High CVE-2025-21853 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0025 None reported
High CVE-2025-37810 usb: dwc3: gadget: check that event count does not exceed event buffer length 7.8 0.0025 None reported
High CVE-2025-37838 linux: In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerabil... 7.8 0.0025 None reported
High CVE-2025-37923 tracing: Fix oob write in trace_seq_to_buffer() 7.8 0.0025 None reported
High CVE-2024-35866 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0024 None reported
High CVE-2023-52621 kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... 7.8 0.0024 None reported
Showing 1 to 25 of 144 1Next