Linux · 
Oracle Linux · Security advisory · November 17, 2025
Oracle Linux · Security advisory · November 17, 2025ELSA-2025-20518-0: Security update for 29 packages
ELSA-2025-20518-0, released November 17, 2025, fixes 109 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
109
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0072
54th percentile
Priority of the 109 CVEs
Patch now 0
Urgent 0
High 109
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-abi-stablelists | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-core | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-cross-headers | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-core | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-devel | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-devel-matched | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-modules | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-modules-core | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-modules-extra | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-debug-uki-virt | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-devel | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-devel-matched | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-doc | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-headers | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-modules | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-modules-core | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-modules-extra | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-tools | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-tools-libs | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-tools-libs-devel | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-uki-virt | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| kernel-uki-virt-addons | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| libperf | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| perf | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| python3-perf | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| rtla | ol 9 | 0:5.14.0-611.5.1.el9_7 |
| rv | ol 9 | 0:5.14.0-611.5.1.el9_7 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2022-49670 | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0072 | None reported |
| High | CVE-2024-56645 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0068 | None reported |
| High | CVE-2024-53090 | afs: Fix lock recursion | 7.8 | 0.0068 | None reported |
| High | CVE-2025-21796 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0067 | None reported |
| High | CVE-2025-21795 | kernel: kernel: NFSD: fix hang in nfsd4_shutdown_callback | 7.8 | 0.0067 | None reported |
| High | CVE-2025-21844 | kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512). | 7.8 | 0.0062 | None reported |
| High | CVE-2025-21765 | kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906). | 7.8 | 0.0061 | None reported |
| High | CVE-2024-56662 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0061 | None reported |
| High | CVE-2024-49864 | kernel-64kb: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256). | 7.8 | 0.0045 | None reported |
| High | CVE-2025-21855 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0044 | None reported |
| High | CVE-2025-21829 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0041 | None reported |
| High | CVE-2024-57995 | kernel-rt-64k-devel: kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() | 7.8 | 0.0036 | None reported |
| High | CVE-2025-22056 | kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525). | 7.8 | 0.0033 | None reported |
| High | CVE-2024-57986 | kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections | 7.8 | 0.0032 | None reported |
| High | CVE-2022-48830 | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0031 | None reported |
| High | CVE-2024-53241 | kernel-64kb: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). | 7.8 | 0.0031 | None reported |
| High | CVE-2022-49672 | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0030 | None reported |
| High | CVE-2024-46744 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 | None reported |
| High | CVE-2025-21647 | kernel-64kb: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133). | 7.8 | 0.0028 | None reported |
| High | CVE-2025-21702 | kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312). | 7.8 | 0.0028 | None reported |
| High | CVE-2022-49623 | kernel: kernel: powerpc/xive/spapr: correct bitmap allocation size | 7.8 | 0.0028 | None reported |
| High | CVE-2022-49657 | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0028 | None reported |
| High | CVE-2022-49432 | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0028 | None reported |
| High | CVE-2022-49643 | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0028 | None reported |
| High | CVE-2025-21864 | kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482). | 7.8 | 0.0028 | None reported |
Showing 1 to 25 of 109
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.