Linux · Security advisory · December 2, 2025

ELSA-2025-28025: Security update for 35 packages

ELSA-2025-28025, released December 2, 2025, fixes 2 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0029
21st percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-105.51.5.1.el9uek
kernel-uekol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-coreol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-coreol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debugol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debugol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-coreol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-coreol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-develol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-develol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modulesol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modulesol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-develol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-develol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-docol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-docol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modulesol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modulesol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-coreol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-coreol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-desktopol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-desktopol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-extraol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-extraol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-usbol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-usbol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-105.51.5.1.el9uek
kernel-uek-toolsol 100:6.12.0-105.51.5.1.el9uek
kernel-uek-toolsol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64kol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64kol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-coreol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-coreol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-develol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-develol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modulesol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modulesol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-105.51.5.1.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-105.51.5.1.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-38678 netfilter: nf_tables: reject duplicate device on updates 7.1 0.0029 None reported
High CVE-2025-40019 crypto: essiv - Check ssize for decryption and in-place encryption 7.0 0.0029 None reported
Showing 1 to 2 of 2 1