Linux · Security advisory · September 9, 2025

ELSA-2025-20553: Security update for 8 packages

ELSA-2025-20553, released September 9, 2025, fixes 47 CVEs across 8 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
47
None rated Critical
Exploited
1
CVE-2025-38352
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0136
71st percentile

Priority of the 47 CVEs

Patch now 1 Urgent 0 High 32 Routine 14

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.347.6.el7uek
kernel-uek-containerol 80:5.4.17-2136.347.6.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.347.6.el7uek
kernel-uek-debugol 80:5.4.17-2136.347.6.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.347.6.el7uek
kernel-uek-develol 80:5.4.17-2136.347.6.el7uek
kernel-uek-docol 80:5.4.17-2136.347.6.el7uek
kernel-uek-toolsol 80:5.4.17-2136.347.6.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-38352 posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() 7.8 0.0136 KEVExploited
High CVE-2025-38430 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request 7.1 0.0059 None reported
High CVE-2025-38181 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). 7.0 0.0056 None reported
High CVE-2025-37752 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0030 None reported
High CVE-2024-57996 linux: In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit... 7.0 0.0027 None reported
High CVE-2025-38298 linux: In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault A... 7.8 0.0023 None reported
High CVE-2025-38103 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() 7.1 0.0023 None reported
High CVE-2025-37958 mm/huge_memory: fix dereferencing invalid pmd migration entry 7.1 0.0023 None reported
High CVE-2025-38115 net_sched: sch_sfq: fix a potential crash on gso_skb handling 7.0 0.0023 None reported
High CVE-2025-38147 calipso: Don't call calipso functions for AF_INET sk. 7.8 0.0023 None reported
High CVE-2025-38194 jffs2: check that raw node were preallocated before writing summary 7.0 0.0022 None reported
High CVE-2025-38498 do_change_type(): refuse to operate on unmounted/not ours mounts 7.9 0.0022 None reported
High CVE-2025-38332 scsi: lpfc: Use memcpy() for BIOS version 7.8 0.0022 None reported
High CVE-2025-38415 Squashfs: check return result of sb_min_blocksize 7.8 0.0022 None reported
High CVE-2025-38328 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places 7.1 0.0022 None reported
High CVE-2025-38324 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). 7.0 0.0022 None reported
High CVE-2025-38424 perf: Fix sample vs do_exit() 7.0 0.0022 None reported
High CVE-2025-38184 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer 7.0 0.0022 None reported
High CVE-2025-38323 net: atm: add lec_mutex 7.8 0.0021 None reported
High CVE-2025-38200 i40e: fix MMIO write access to an invalid page in i40e_clear_hw 7.8 0.0021 None reported
High CVE-2025-38320 arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() 7.1 0.0021 None reported
High CVE-2025-38285 bpf: Fix WARN() in get_bpf_raw_tp_regs 7.1 0.0021 None reported
High CVE-2025-38420 wifi: carl9170: do not ping device which has failed to load firmware 7.0 0.0021 None reported
High CVE-2025-38086 net: ch9200: fix uninitialised access during mii_nway_restart 7.8 0.0021 None reported
High CVE-2025-38180 net: atm: fix /proc/net/atm/lec handling 7.8 0.0021 None reported
Showing 1 to 25 of 47 1Next