Linux · Security advisory · September 22, 2025
ELSA-2025-20608: Security update for 35 packages
ELSA-2025-20608, released September 22, 2025, fixes 6 CVEs across 35 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
6
1 rated Critical
Exploited
1
CVE-2025-39682
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0320
88th percentile
Priority of the 6 CVEs
Patch now 1
Urgent 0
High 5
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-core | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-core | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-core | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-core | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-devel | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-core | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-core | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-deprecated | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-desktop | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-extra | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-extra-netfilter | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-usb | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-usb | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-debug-modules-wireless | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-devel | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-devel | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-doc | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-doc | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-core | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-core | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-deprecated | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-deprecated | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-desktop | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-desktop | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-extra | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-extra-netfilter | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-usb | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-usb | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-wireless | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-modules-wireless | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-tools | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek-tools | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-core | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-core | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-devel | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-devel | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-core | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-core | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-deprecated | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-desktop | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-desktop | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-extra | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-extra-netfilter | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-usb | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-usb | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-wireless | ol 10 | 0:6.12.0-103.40.4.3.el9uek |
| kernel-uek64k-modules-wireless | ol 9 | 0:6.12.0-103.40.4.3.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-39682 | tls: fix handling of zero-length records on the rx_list | 9.8 | 0.0320 | KEVExploited | |
| High | CVE-2025-38566 | sunrpc: fix handling of server side tls alerts | 8.1 | 0.0063 | None reported | |
| High | CVE-2025-38571 | sunrpc: fix client side handling of tls alerts | 8.1 | 0.0035 | None reported | |
| High | CVE-2025-38618 | vsock: Do not allow binding to VMADDR_PORT_ANY | 7.8 | 0.0018 | None reported | |
| High | CVE-2025-38560 | x86/sev: Evict cache lines during SNP memory validation | 7.5 | 0.0018 | None reported | |
| High | CVE-2025-38500 | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 7.8 | 0.0017 | None reported |
Showing 1 to 6 of 6
1