Linux · 
Oracle Linux · Security advisory · August 10, 2025
Oracle Linux · Security advisory · August 10, 2025ELSA-2025-20521: Security update for 8 packages
ELSA-2025-20521, released August 10, 2025, fixes 40 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
40
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0120
68th percentile
Priority of the 40 CVEs
Patch now 0
Urgent 0
High 29
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-container | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-container-debug | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-debug | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-debug-devel | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-devel | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-doc | ol 8 | 0:5.4.17-2136.346.6.el7uek |
| kernel-uek-tools | ol 8 | 0:5.4.17-2136.346.6.el7uek |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2023-6931 | linux: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited t... | 7.0 | 0.0120 | None reported |
| High | CVE-2024-38541 | linux: In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 | None reported |
| High | CVE-2025-38035 | nvmet-tcp: don't restore null sk_state_change | 7.5 | 0.0057 | None reported |
| High | CVE-2025-38001 | net_sched: hfsc: Address reentrant enqueue adding class to eltree twice | 7.8 | 0.0056 | None reported |
| High | CVE-2025-38075 | scsi: target: iscsi: Fix timeout on deleted connection | 7.0 | 0.0046 | None reported |
| High | CVE-2025-38003 | can: bcm: add missing rcu read protection for procfs content | 7.0 | 0.0030 | None reported |
| High | CVE-2025-37927 | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 | None reported |
| High | CVE-2025-38004 | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 | None reported |
| High | CVE-2025-37923 | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 | None reported |
| High | CVE-2025-38000 | sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() | 7.8 | 0.0024 | None reported |
| High | CVE-2025-37913 | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 | None reported |
| High | CVE-2025-38065 | orangefs: Do not truncate file size | 7.0 | 0.0023 | None reported |
| High | CVE-2025-38024 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0023 | None reported |
| High | CVE-2025-38023 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0023 | None reported |
| High | CVE-2025-37819 | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 | None reported |
| High | CVE-2025-37991 | linux: In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed th... | 7.8 | 0.0023 | None reported |
| High | CVE-2025-37915 | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 | None reported |
| High | CVE-2025-37994 | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 | None reported |
| High | CVE-2025-37890 | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 | None reported |
| High | CVE-2025-37995 | module: ensure that kobject_put() is safe for module type kobjects | 7.0 | 0.0022 | None reported |
| High | CVE-2025-38051 | smb: client: Fix use-after-free in cifs_fill_dirent | 7.1 | 0.0022 | None reported |
| High | CVE-2025-38079 | crypto: algif_hash - fix double free in hash_accept | 7.8 | 0.0022 | None reported |
| High | CVE-2025-38066 | dm cache: prevent BUG_ON by blocking retries on failed device resumes | 7.0 | 0.0021 | None reported |
| High | CVE-2025-37953 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0019 | None reported |
| High | CVE-2025-38058 | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0019 | None reported |
Showing 1 to 25 of 40
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.