Linux · Security advisory · October 24, 2025

ELSA-2025-20721: Security update for 19 packages

ELSA-2025-20721, released October 24, 2025, fixes 2 CVEs across 19 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
2
None rated Critical
Exploited
1
CVE-2025-39964
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0161
76th percentile

Priority of the 2 CVEs

Patch now 1 Urgent 0 High 1 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-313.189.5.2.el9uek
bpftoolol 90:5.15.0-313.189.5.2.el9uek
kernel-uekol 80:5.15.0-313.189.5.2.el9uek
kernel-uekol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-containerol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-containerol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-coreol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-coreol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-debugol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-debugol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-develol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-develol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-docol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-docol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-313.189.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-313.189.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-313.189.5.2.el9uek
kernel-uek64kol 80:5.15.0-313.189.5.2.el9uek
kernel-uek64kol 90:5.15.0-313.189.5.2.el9uek
kernel-uek64k-coreol 80:5.15.0-313.189.5.2.el9uek
kernel-uek64k-coreol 90:5.15.0-313.189.5.2.el9uek
kernel-uek64k-develol 80:5.15.0-313.189.5.2.el9uek
kernel-uek64k-develol 90:5.15.0-313.189.5.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-313.189.5.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-313.189.5.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-313.189.5.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-313.189.5.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 8.8 0.0161 KEVExploited
High CVE-2025-38724 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() 7.8 0.0041 None reported
Showing 1 to 2 of 2 1