Linux · Security advisory · December 2, 2025

ELSA-2025-28024: Security update for 14 packages

ELSA-2025-28024, released December 2, 2025, fixes 1 CVE across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0029
21st percentile

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-314.193.5.5.el9uek
bpftoolol 90:5.15.0-314.193.5.5.el9uek
kernel-uek-containerol 90:5.15.0-314.193.5.5.el9uek
kernel-uek-container-debugol 90:5.15.0-314.193.5.5.el9uek
kernel-uek-coreol 80:5.15.0-314.193.5.5.el9uek
kernel-uek-debug-coreol 80:5.15.0-314.193.5.5.el9uek
kernel-uek-debug-modulesol 80:5.15.0-314.193.5.5.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-314.193.5.5.el9uek
kernel-uek-modulesol 80:5.15.0-314.193.5.5.el9uek
kernel-uek-modules-extraol 80:5.15.0-314.193.5.5.el9uek
kernel-uek64kol 80:5.15.0-314.193.5.5.el9uek
kernel-uek64k-coreol 80:5.15.0-314.193.5.5.el9uek
kernel-uek64k-develol 80:5.15.0-314.193.5.5.el9uek
kernel-uek64k-modulesol 80:5.15.0-314.193.5.5.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-314.193.5.5.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-40019 crypto: essiv - Check ssize for decryption and in-place encryption 7.0 0.0029 None reported
Showing 1 to 1 of 1 1