Linux · Security advisory · October 24, 2025

ELSA-2025-20719: Security update for 35 packages

ELSA-2025-20719, released October 24, 2025, fixes 7 CVEs across 35 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
7
1 rated Critical
Exploited
1
CVE-2025-39964
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1026
95th percentile

Priority of the 7 CVEs

Patch now 1 Urgent 1 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-104.43.4.3.el9uek
kernel-uekol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-coreol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-coreol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debugol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debugol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-coreol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-coreol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-develol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-develol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modulesol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modulesol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-develol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-develol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-docol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-docol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modulesol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modulesol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-coreol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-coreol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-desktopol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-desktopol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-extraol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-extraol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-usbol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-usbol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-104.43.4.3.el9uek
kernel-uek-toolsol 100:6.12.0-104.43.4.3.el9uek
kernel-uek-toolsol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64kol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64kol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-coreol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-coreol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-develol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-develol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modulesol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modulesol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-104.43.4.3.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-104.43.4.3.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 8.8 0.0161 KEVExploited
Urgent CVE-2025-39973 i40e: add validation for ring_len param 9.8 0.0016 None reported
High CVE-2025-39946 tls: make sure to abort the stream if headers are bogus 7.0 0.1026 None reported
High CVE-2025-39965 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI 7.8 0.0020 None reported
High CVE-2025-39718 vsock/virtio: Validate length in packet header before skb_put() 7.8 0.0017 None reported
High CVE-2025-39963 linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io... 7.8 0.0016 None reported
High CVE-2025-39977 futex: Prevent use-after-free during requeue-PI 7.8 0.0015 None reported
Showing 1 to 7 of 7 1