Linux · Security advisory · October 14, 2025

ELSA-2025-20716: Security update for 19 packages

ELSA-2025-20716, released October 14, 2025, fixes 30 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
30
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0058
47th percentile

Priority of the 30 CVEs

Patch now 0 Urgent 0 High 15 Routine 15

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-313.189.5.1.el9uek
bpftoolol 90:5.15.0-313.189.5.1.el9uek
kernel-uekol 80:5.15.0-313.189.5.1.el9uek
kernel-uekol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-containerol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-containerol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-container-debugol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-container-debugol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-coreol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-coreol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debugol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debugol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-coreol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-coreol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-develol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-develol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modulesol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modulesol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-develol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-develol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-docol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-docol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-modulesol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-modulesol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-modules-extraol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-modules-extraol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64kol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64kol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-coreol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-coreol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-develol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-develol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modulesol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modulesol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-313.189.5.1.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38439 bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT 7.8 0.0058 None reported
High CVE-2025-39866 fs: writeback: fix use-after-free in __mark_inode_dirty() 7.8 0.0031 None reported
High CVE-2025-38236 af_unix: Don't leave consecutive consumed OOB skbs. 7.8 0.0030 None reported
High CVE-2025-38466 perf: Revert to requiring CAP_SYS_ADMIN for uprobes 7.8 0.0023 None reported
High CVE-2025-38464 tipc: Fix use-after-free in tipc_conn_close(). 7.8 0.0022 None reported
High CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size 7.8 0.0021 None reported
High CVE-2025-38459 atm: clip: Fix infinite recursive call of clip_push(). 7.8 0.0021 None reported
High CVE-2025-38465 netlink: Fix wraparounds of sk->sk_rmem_alloc. 7.8 0.0020 None reported
High CVE-2025-38445 md/raid1: Fix stack memory use after return in raid1_reshape 7.1 0.0020 None reported
High CVE-2025-38457 net/sched: Abort __tc_modify_qdisc if parent class does not exist 7.1 0.0020 None reported
High CVE-2025-38458 atm: clip: Fix NULL pointer dereference in vcc_sendmsg() 7.0 0.0020 None reported
High CVE-2025-38443 nbd: fix uaf in nbd_genl_connect() error path 7.8 0.0018 None reported
High CVE-2025-38569 linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes... 7.0 0.0018 None reported
High CVE-2025-38461 vsock: Fix transport_* TOCTOU 7.8 0.0014 None reported
High CVE-2025-38462 vsock: Fix transport_{g2h,h2g} TOCTOU 7.0 0.0014 None reported
Routine CVE-2025-38067 rseq: Fix segfault on registration when rseq_cs is non-zero 5.5 0.0058 None reported
Routine CVE-2025-38165 bpf, sockmap: Fix panic when calling skb_linearize 5.5 0.0036 None reported
Routine CVE-2022-48703 kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... 5.5 0.0024 None reported
Routine CVE-2025-38467 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling 5.5 0.0020 None reported
Routine CVE-2025-38460 atm: clip: Fix potential null-ptr-deref in to_atmarpd(). 5.5 0.0020 None reported
Routine CVE-2025-38441 kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system 5.5 0.0019 None reported
Routine CVE-2024-26775 aoe: avoid potential deadlock at set_capacity 5.5 0.0018 None reported
Routine CVE-2025-38513 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() 5.5 0.0018 None reported
Routine CVE-2025-38516 pinctrl: qcom: msm: mark certain pins as invalid for interrupts 5.5 0.0018 None reported
Routine CVE-2025-38540 HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras 5.5 0.0018 None reported
Showing 1 to 25 of 30 1Next