Linux · Security advisory · October 11, 2025

ELSA-2025-20663: Security update for 8 packages

ELSA-2025-20663, released October 11, 2025, fixes 136 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
136
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0058
47th percentile

Priority of the 136 CVEs

Patch now 0 Urgent 0 High 80 Routine 56

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.348.3.el7uek
kernel-uek-containerol 80:5.4.17-2136.348.3.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.348.3.el7uek
kernel-uek-debugol 80:5.4.17-2136.348.3.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.348.3.el7uek
kernel-uek-develol 80:5.4.17-2136.348.3.el7uek
kernel-uek-docol 80:5.4.17-2136.348.3.el7uek
kernel-uek-toolsol 80:5.4.17-2136.348.3.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38439 bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT 7.8 0.0058 None reported
High CVE-2025-38608 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls 7.1 0.0041 None reported
High CVE-2025-38211 RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction 7.8 0.0041 None reported
High CVE-2025-38563 perf/core: Prevent VMA split of buffer mappings 7.8 0.0040 None reported
High CVE-2025-38617 net/packet: fix a race in packet_set_ring() and packet_notifier() 7.0 0.0040 None reported
High CVE-2025-38708 drbd: add missing kref_get in handle_write_conflicts 7.8 0.0040 None reported
High CVE-2025-38574 pptp: ensure minimal skb length in pptp_xmit() 7.8 0.0039 None reported
High CVE-2024-53237 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... 7.8 0.0032 None reported
High CVE-2025-38377 rose: fix dangling neighbour pointers in rose_rt_device_down() 7.8 0.0028 None reported
High CVE-2025-39798 NFS: Fix the setting of capabilities when automounting a new filesystem 7.0 0.0028 None reported
High CVE-2024-26958 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0025 None reported
High CVE-2025-37798 codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() 7.8 0.0023 None reported
High CVE-2025-38403 vsock/vmci: Clear the vmci transport packet properly when initializing it 7.8 0.0022 None reported
High CVE-2025-38464 tipc: Fix use-after-free in tipc_conn_close(). 7.8 0.0022 None reported
High CVE-2025-38389 drm/i915/gt: Fix timeline left held on VMA alloc error 7.8 0.0022 None reported
High CVE-2025-38386 ACPICA: Refuse to evaluate a method if arguments are missing 7.1 0.0021 None reported
High CVE-2025-38177 sch_hfsc: make hfsc_qlen_notify() idempotent 7.0 0.0021 None reported
High CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size 7.8 0.0021 None reported
High CVE-2025-38395 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods 7.1 0.0021 None reported
High CVE-2025-38401 mtk-sd: Prevent memory corruption from DMA map failure 7.8 0.0021 None reported
High CVE-2025-38459 atm: clip: Fix infinite recursive call of clip_push(). 7.8 0.0021 None reported
High CVE-2025-38193 net_sched: sch_sfq: reject invalid perturb period 7.0 0.0021 None reported
High CVE-2025-38465 netlink: Fix wraparounds of sk->sk_rmem_alloc. 7.8 0.0020 None reported
High CVE-2025-38729 ALSA: usb-audio: Validate UAC3 power domain descriptors, too 7.8 0.0020 None reported
High CVE-2025-38445 md/raid1: Fix stack memory use after return in raid1_reshape 7.1 0.0020 None reported
Showing 1 to 25 of 136 1Next