Linux · Security advisory · October 14, 2025

ELSA-2025-20662: Security update for 35 packages

ELSA-2025-20662, released October 14, 2025, fixes 95 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
95
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0041
35th percentile

Priority of the 95 CVEs

Patch now 0 Urgent 0 High 54 Routine 41

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-104.43.4.2.el9uek
kernel-uekol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-coreol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-coreol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debugol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debugol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-coreol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-coreol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-develol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-develol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modulesol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modulesol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-develol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-develol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-docol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-docol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modulesol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modulesol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-coreol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-coreol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-desktopol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-desktopol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-extraol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-extraol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-usbol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-usbol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-104.43.4.2.el9uek
kernel-uek-toolsol 100:6.12.0-104.43.4.2.el9uek
kernel-uek-toolsol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64kol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64kol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-coreol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-coreol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-develol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-develol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modulesol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modulesol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-104.43.4.2.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-104.43.4.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38608 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls 7.1 0.0041 None reported
High CVE-2025-38590 net/mlx5e: Remove skb secpath if xfrm state is not found 7.5 0.0041 None reported
High CVE-2025-38660 [ceph] parse_longname(): strrchr() expects NUL-terminated string 7.1 0.0041 None reported
High CVE-2025-38563 perf/core: Prevent VMA split of buffer mappings 7.8 0.0040 None reported
High CVE-2025-38617 net/packet: fix a race in packet_set_ring() and packet_notifier() 7.0 0.0040 None reported
High CVE-2025-38708 drbd: add missing kref_get in handle_write_conflicts 7.8 0.0040 None reported
High CVE-2025-38574 pptp: ensure minimal skb length in pptp_xmit() 7.8 0.0039 None reported
High CVE-2025-38728 smb3: fix for slab out of bounds on mount to ksmbd 7.1 0.0036 None reported
High CVE-2025-39798 NFS: Fix the setting of capabilities when automounting a new filesystem 7.0 0.0028 None reported
High CVE-2025-38601 wifi: ath11k: clear initialized flag for deinit-ed srng lists 7.0 0.0025 None reported
High CVE-2025-38616 tls: handle data disappearing from under the TLS ULP 7.1 0.0021 None reported
High CVE-2025-38729 ALSA: usb-audio: Validate UAC3 power domain descriptors, too 7.8 0.0020 None reported
High CVE-2025-39732 wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() 7.0 0.0020 None reported
High CVE-2025-38702 fbdev: fix potential buffer overflow in do_register_framebuffer() 7.8 0.0020 None reported
High CVE-2025-39730 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() 7.8 0.0020 None reported
High CVE-2025-38572 ipv6: reject malicious packets in ipv6_gso_segment() 7.8 0.0019 None reported
High CVE-2025-38699 scsi: bfa: Double-free fix 7.8 0.0019 None reported
High CVE-2025-38351 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush 7.5 0.0019 None reported
High CVE-2025-38565 perf/core: Exit early on perf_mmap() fail 7.8 0.0019 None reported
High CVE-2025-38701 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr 7.0 0.0019 None reported
High CVE-2025-38704 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access 7.8 0.0019 None reported
High CVE-2025-38680 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() 7.1 0.0019 None reported
High CVE-2025-38685 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit 7.8 0.0019 None reported
High CVE-2025-38614 eventpoll: Fix semi-unbounded recursion 7.5 0.0019 None reported
High CVE-2025-38569 linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes... 7.0 0.0018 None reported
Showing 1 to 25 of 95 1Next