Linux · Security advisory · November 10, 2025

ELSA-2025-25757: Security update for 19 packages

ELSA-2025-25757, released November 10, 2025, fixes 116 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
116
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0048
41st percentile

Priority of the 116 CVEs

Patch now 0 Urgent 1 High 70 Routine 45

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-314.193.5.3.el9uek
bpftoolol 90:5.15.0-314.193.5.3.el9uek
kernel-uekol 80:5.15.0-314.193.5.3.el9uek
kernel-uekol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-containerol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-containerol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-container-debugol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-container-debugol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-coreol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-coreol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-debugol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-debugol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-coreol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-coreol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-develol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-develol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-modulesol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-modulesol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-develol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-develol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-docol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-docol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-modulesol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-modulesol 90:5.15.0-314.193.5.3.el9uek
kernel-uek-modules-extraol 80:5.15.0-314.193.5.3.el9uek
kernel-uek-modules-extraol 90:5.15.0-314.193.5.3.el9uek
kernel-uek64kol 80:5.15.0-314.193.5.3.el9uek
kernel-uek64kol 90:5.15.0-314.193.5.3.el9uek
kernel-uek64k-coreol 80:5.15.0-314.193.5.3.el9uek
kernel-uek64k-coreol 90:5.15.0-314.193.5.3.el9uek
kernel-uek64k-develol 80:5.15.0-314.193.5.3.el9uek
kernel-uek64k-develol 90:5.15.0-314.193.5.3.el9uek
kernel-uek64k-modulesol 80:5.15.0-314.193.5.3.el9uek
kernel-uek64k-modulesol 90:5.15.0-314.193.5.3.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-314.193.5.3.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-314.193.5.3.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-39898 e1000e: fix heap overflow in e1000_set_eeprom 9.8 n/a None reported
High CVE-2025-39841 scsi: lpfc: Fix buffer free/clear order in deferred receive path 7.8 0.0048 None reported
High CVE-2025-38676 iommu/amd: Avoid stack buffer overflow from kernel cmdline 7.8 0.0042 None reported
High CVE-2025-38608 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls 7.1 0.0041 None reported
High CVE-2025-38563 perf/core: Prevent VMA split of buffer mappings 7.8 0.0040 None reported
High CVE-2025-38617 net/packet: fix a race in packet_set_ring() and packet_notifier() 7.0 0.0040 None reported
High CVE-2025-38708 drbd: add missing kref_get in handle_write_conflicts 7.8 0.0040 None reported
High CVE-2025-39703 net, hsr: reject HSR frame if skb can't hold tag 7.0 0.0039 None reported
High CVE-2025-38574 pptp: ensure minimal skb length in pptp_xmit() 7.8 0.0039 None reported
High CVE-2025-39894 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed... 7.0 0.0033 None reported
High CVE-2025-39673 ppp: fix race conditions in ppp_fill_forward_path 7.0 0.0032 None reported
High CVE-2025-39798 NFS: Fix the setting of capabilities when automounting a new filesystem 7.0 0.0028 None reported
High CVE-2025-38601 wifi: ath11k: clear initialized flag for deinit-ed srng lists 7.0 0.0025 None reported
High CVE-2025-39806 kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 7.8 0.0024 None reported
High CVE-2025-39864 wifi: cfg80211: fix use-after-free in cmp_bss() 7.8 0.0024 None reported
High CVE-2025-37916 pds_core: remove write-after-free of client_id 7.8 0.0023 None reported
High CVE-2025-39860 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() 7.8 0.0023 None reported
High CVE-2025-37798 codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() 7.8 0.0023 None reported
High CVE-2025-38095 dma-buf: insert memory barrier before updating num_fences 7.0 0.0022 None reported
High CVE-2025-38177 sch_hfsc: make hfsc_qlen_notify() idempotent 7.0 0.0021 None reported
High CVE-2025-38425 i2c: tegra: check msg length in SMBUS block read 7.8 0.0020 None reported
High CVE-2025-38729 ALSA: usb-audio: Validate UAC3 power domain descriptors, too 7.8 0.0020 None reported
High CVE-2025-39730 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() 7.8 0.0020 None reported
High CVE-2025-38468 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree 7.8 0.0020 None reported
High CVE-2025-39691 fs/buffer: fix use-after-free when call bh_read() helper 7.8 0.0019 None reported
Showing 1 to 25 of 116 1Next