Linux · Security advisory · October 6, 2025

ELSA-2025-20649: Security update for 35 packages

ELSA-2025-20649, released October 6, 2025, fixes 4 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0041
35th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-103.40.4.4.el9uek
kernel-uekol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-coreol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-coreol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debugol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debugol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-coreol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-coreol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-develol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-develol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modulesol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modulesol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-develol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-develol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-docol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-docol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modulesol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modulesol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-coreol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-coreol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-desktopol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-desktopol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-extraol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-extraol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-usbol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-usbol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-103.40.4.4.el9uek
kernel-uek-toolsol 100:6.12.0-103.40.4.4.el9uek
kernel-uek-toolsol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64kol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64kol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-coreol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-coreol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-develol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-develol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modulesol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modulesol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-103.40.4.4.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-103.40.4.4.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38724 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() 7.8 0.0041 None reported
High CVE-2025-39866 fs: writeback: fix use-after-free in __mark_inode_dirty() 7.8 0.0031 None reported
High CVE-2025-39698 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.5 0.0020 None reported
High CVE-2025-39881 kernfs: Fix UAF in polling when open file is released 7.8 0.0015 None reported
Showing 1 to 4 of 4 1