Linux · Security advisory · July 17, 2025
ELSA-2025-20480: Security update for 35 packages
ELSA-2025-20480, released July 17, 2025, fixes 1,343 CVEs across 35 products. 3 of them are being exploited (CVE-2024-53197); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV
CVEs closed
1,343
2 rated Critical
Exploited
3
CVE-2024-53197
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6876
99th percentile
Priority of the 1,343 CVEs
Patch now 3
Urgent 2
High 524
Routine 814
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-core | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-core | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-core | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-core | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-devel | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-core | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-core | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-extra | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-usb | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-usb | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-devel | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-devel | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-doc | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-doc | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-core | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-core | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-deprecated | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-deprecated | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-desktop | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-desktop | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-extra | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-usb | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-usb | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-wireless | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-modules-wireless | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-tools | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek-tools | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-core | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-core | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-devel | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-devel | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-core | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-core | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-desktop | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-desktop | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-extra | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-usb | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-usb | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-wireless | ol 10 | 0:6.12.0-101.33.4.3.el9uek |
| kernel-uek64k-modules-wireless | ol 9 | 0:6.12.0-101.33.4.3.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-53197 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0412 | KEVExploited | |
| Patch now | CVE-2024-53104 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0340 | KEVExploited | |
| Patch now | CVE-2024-53150 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.1 | 0.0135 | KEVExploited | |
| Urgent | CVE-2024-53177 | linux: In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_d... | 9.8 | 0.0055 | None reported | |
| Urgent | CVE-2025-22088 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_acce... | 9.8 | 0.0054 | None reported | |
| High | CVE-2025-22037 | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_pre... | 7.5 | 0.6876 | None reported | |
| High | CVE-2025-21760 | linux: In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb()... | 8.1 | 0.3800 | None reported | |
| High | CVE-2025-37924 | ksmbd: fix use-after-free in kerberos authentication | 7.8 | 0.2455 | None reported | |
| High | CVE-2025-21759 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0780 | None reported | |
| High | CVE-2016-5244 | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | 7.5 | 0.0552 | None reported | |
| High | CVE-2019-11815 | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | 8.1 | 0.0444 | None reported | |
| High | CVE-2022-28733 | grub-efi-amd64: Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in gru... | 8.1 | 0.0127 | None reported | |
| High | CVE-2025-37778 | ksmbd: Fix dangling pointer in krb_authenticate | 7.8 | 0.0116 | None reported | |
| High | CVE-2022-28734 | grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... | 8.1 | 0.0112 | None reported | |
| High | CVE-2012-3430 | kernel-uek64k-devel: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | n/a | 0.0095 | None reported | |
| High | CVE-2025-21756 | perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0089 | None reported | |
| High | CVE-2025-37899 | ksmbd: fix use-after-free in session logoff | 7.8 | 0.0088 | None reported | |
| High | CVE-2025-22039 | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check... | 7.1 | 0.0079 | None reported | |
| High | CVE-2024-57791 | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when... | 7.5 | 0.0077 | None reported | |
| High | CVE-2025-37928 | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 | None reported | |
| High | CVE-2025-37879 | 9p/net: fix improper handling of bogus negative read/write replies | 7.1 | 0.0072 | None reported | |
| High | CVE-2024-56644 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.0071 | None reported | |
| High | CVE-2025-22040 | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichanne... | 8.8 | 0.0070 | None reported | |
| High | CVE-2024-56626 | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stre... | 7.8 | 0.0070 | None reported | |
| High | CVE-2025-22041 | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_dere... | 8.8 | 0.0070 | None reported |
Showing 1 to 25 of 1,343
1Next