Linux · Security advisory · September 22, 2025
ELSA-2025-20609: Security update for 19 packages
ELSA-2025-20609, released September 22, 2025, fixes 5 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0045
39th percentile
Priority of the 5 CVEs
Patch now 0
Urgent 0
High 5
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| bpftool | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-container | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-container | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-container-debug | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-container-debug | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-core | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-core | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-core | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-core | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-devel | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-devel | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-modules | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-modules | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-modules-extra | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-debug-modules-extra | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-devel | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-devel | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-doc | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-doc | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-modules | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-modules | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-modules-extra | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek-modules-extra | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-core | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-core | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-devel | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-devel | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-modules | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-modules | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-modules-extra | ol 8 | 0:5.15.0-312.187.5.3.el9uek |
| kernel-uek64k-modules-extra | ol 9 | 0:5.15.0-312.187.5.3.el9uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2025-38264 | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 | None reported | |
| High | CVE-2025-38495 | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 | None reported | |
| High | CVE-2025-38494 | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 | None reported | |
| High | CVE-2025-38499 | clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns | 8.2 | 0.0019 | None reported | |
| High | CVE-2025-38618 | vsock: Do not allow binding to VMADDR_PORT_ANY | 7.8 | 0.0018 | None reported |
Showing 1 to 5 of 5
1