Linux · Security advisory · July 14, 2025

ELSA-2025-20471: Security update for 8 packages

ELSA-2025-20471, released July 14, 2025, fixes 53 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
53
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0056
46th percentile

Priority of the 53 CVEs

Patch now 0 Urgent 0 High 25 Routine 28

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-containerol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-debugol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-develol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-docol 80:5.4.17-2136.345.5.3.el7uek
kernel-uek-toolsol 80:5.4.17-2136.345.5.3.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-50154 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.0 0.0056 None reported
High CVE-2025-37749 net: ppp: Add bound checking for skb data on ppp_sync_txmung 7.8 0.0041 None reported
High CVE-2025-37839 jbd2: remove wrong sb->s_sequence check 7.8 0.0033 None reported
High CVE-2025-37840 mtd: rawnand: brcmnand: fix PM resume warning 7.8 0.0033 None reported
High CVE-2025-37858 fs/jfs: Prevent integer overflow in AG size calculation 7.8 0.0031 None reported
High CVE-2025-37785 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.1 0.0031 None reported
High CVE-2021-47352 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0027 None reported
High CVE-2025-37803 udmabuf: fix a buf size overflow issue during udmabuf creation 7.8 0.0025 None reported
High CVE-2025-37810 usb: dwc3: gadget: check that event count does not exceed event buffer length 7.8 0.0025 None reported
High CVE-2025-37838 linux: In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerabil... 7.8 0.0025 None reported
High CVE-2025-23150 ext4: fix off-by-one error in do_split 8.4 0.0023 None reported
High CVE-2025-37823 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too 7.8 0.0023 None reported
High CVE-2025-23142 sctp: detect and prevent references to a freed transport in sendmsg 7.8 0.0023 None reported
High CVE-2025-37797 net_sched: hfsc: Fix a UAF vulnerability in class handling 7.8 0.0023 None reported
High CVE-2025-23158 media: venus: hfi: add check to handle incorrect queue size 7.8 0.0022 None reported
High CVE-2025-23157 media: venus: hfi_parser: add check to avoid out of bound access 7.1 0.0022 None reported
High CVE-2025-37789 net: openvswitch: fix nested key length validation in the set() action 7.8 0.0022 None reported
High CVE-2025-37817 mcb: fix a double free bug in chameleon_parse_gdd() 7.8 0.0022 None reported
High CVE-2025-37738 ext4: ignore xattrs past end 7.8 0.0022 None reported
High CVE-2025-37780 isofs: Prevent the use of too small fid 7.1 0.0022 None reported
High CVE-2025-37892 mtd: inftlcore: Add error check for inftl_read_oob() 7.8 0.0021 None reported
High CVE-2025-37796 wifi: at76c50x: fix use after free access in at76_disconnect 7.8 0.0020 None reported
High CVE-2025-37989 net: phy: leds: fix memory leak 7.0 0.0020 None reported
High CVE-2025-37982 wifi: wl1251: fix memory leak in wl1251_tx_work 7.0 0.0020 None reported
High CVE-2025-37940 ftrace: Add cond_resched() to ftrace_graph_set_hash() 7.0 0.0016 None reported
Showing 1 to 25 of 53 1Next