Linux · Security advisory · November 9, 2025

ELSA-2025-25754: Security update for 35 packages

ELSA-2025-25754, released November 9, 2025, fixes 116 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
116
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0048
41st percentile

Priority of the 116 CVEs

Patch now 0 Urgent 1 High 66 Routine 49

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-105.51.5.el9uek
kernel-uekol 90:6.12.0-105.51.5.el9uek
kernel-uek-coreol 100:6.12.0-105.51.5.el9uek
kernel-uek-coreol 90:6.12.0-105.51.5.el9uek
kernel-uek-debugol 100:6.12.0-105.51.5.el9uek
kernel-uek-debugol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-coreol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-coreol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-develol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-develol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modulesol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modulesol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-105.51.5.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-105.51.5.el9uek
kernel-uek-develol 100:6.12.0-105.51.5.el9uek
kernel-uek-develol 90:6.12.0-105.51.5.el9uek
kernel-uek-docol 100:6.12.0-105.51.5.el9uek
kernel-uek-docol 90:6.12.0-105.51.5.el9uek
kernel-uek-modulesol 100:6.12.0-105.51.5.el9uek
kernel-uek-modulesol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-coreol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-coreol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-desktopol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-desktopol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-extraol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-extraol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-usbol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-usbol 90:6.12.0-105.51.5.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-105.51.5.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-105.51.5.el9uek
kernel-uek-toolsol 100:6.12.0-105.51.5.el9uek
kernel-uek-toolsol 90:6.12.0-105.51.5.el9uek
kernel-uek64kol 100:6.12.0-105.51.5.el9uek
kernel-uek64kol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-coreol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-coreol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-develol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-develol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modulesol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modulesol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-105.51.5.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-105.51.5.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-39898 e1000e: fix heap overflow in e1000_set_eeprom 9.8 n/a None reported
High CVE-2025-39841 scsi: lpfc: Fix buffer free/clear order in deferred receive path 7.8 0.0048 None reported
High CVE-2025-38676 iommu/amd: Avoid stack buffer overflow from kernel cmdline 7.8 0.0042 None reported
High CVE-2025-39851 vxlan: Fix NPD when refreshing an FDB entry with a nexthop object 7.0 0.0040 None reported
High CVE-2025-38737 kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix... 7.8 0.0039 None reported
High CVE-2025-39894 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed... 7.0 0.0033 None reported
High CVE-2025-39880 libceph: fix invalid accesses to ceph_connection_v1_info 7.8 0.0033 None reported
High CVE-2025-39673 ppp: fix race conditions in ppp_fill_forward_path 7.0 0.0032 None reported
High CVE-2025-23133 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0031 None reported
High CVE-2025-39932 smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) 7.0 0.0031 None reported
High CVE-2025-22113 ext4: avoid journaling sb update on error if journal is destroying 7.8 0.0025 None reported
High CVE-2025-39723 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If a... 7.8 0.0024 None reported
High CVE-2025-39806 kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 7.8 0.0024 None reported
High CVE-2025-39864 wifi: cfg80211: fix use-after-free in cmp_bss() 7.8 0.0024 None reported
High CVE-2025-39860 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() 7.8 0.0023 None reported
High CVE-2025-39849 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() 7.8 0.0022 None reported
High CVE-2025-39918 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.6 0.0021 None reported
High CVE-2025-39810 bnxt_en: Fix memory corruption when FW resources change during ifdown 7.8 0.0020 None reported
High CVE-2025-38322 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... 7.0 0.0020 None reported
High CVE-2025-39850 vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects 7.0 0.0020 None reported
High CVE-2025-39691 fs/buffer: fix use-after-free when call bh_read() helper 7.8 0.0019 None reported
High CVE-2025-39689 ftrace: Also allocate and copy hash for reading of filter files 7.8 0.0019 None reported
High CVE-2025-39683 tracing: Limit access to parser->buffer when trace_get_user failed 7.1 0.0019 None reported
High CVE-2025-38453 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0019 None reported
High CVE-2025-39913 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. 7.8 0.0019 None reported
Showing 1 to 25 of 116 1Next