Linux · Security advisory · December 10, 2025

ELSA-2025-28040: Security update for 35 packages

ELSA-2025-28040, released December 10, 2025, fixes 39 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
39
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
51st percentile

Priority of the 39 CVEs

Patch now 0 Urgent 0 High 25 Routine 14

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-106.55.4.1.el9uek
kernel-uekol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debugol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debugol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-develol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-develol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modulesol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modulesol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-develol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-develol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-docol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-docol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modulesol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modulesol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-desktopol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-desktopol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extraol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extraol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-usbol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-usbol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-toolsol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-toolsol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64kol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64kol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-develol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-develol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modulesol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modulesol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-106.55.4.1.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-40048 uio_hv_generic: Let userspace take care of interrupt mask 8.4 0.0064 None reported
High CVE-2025-40053 net: dlink: handle copy_thresh allocation failure 7.5 0.0063 None reported
High CVE-2025-40087 NFSD: Define a proc_layoutcommit for the FlexFiles layout type 7.5 0.0050 None reported
High CVE-2025-40099 cifs: parse_dfs_referrals: prevent oob on malformed input 9.4 0.0041 None reported
High CVE-2025-40001 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue 7.8 0.0026 None reported
High CVE-2025-40057 ptp: Add a upper bound on max_vclocks 7.1 0.0025 None reported
High CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak 7.1 0.0023 None reported
High CVE-2025-40055 ocfs2: fix double free in user_cluster_connect() 7.8 0.0023 None reported
High CVE-2025-40052 smb: client: fix crypto buffers in non-linear memory 7.1 0.0021 None reported
High CVE-2025-40103 smb: client: Fix refcount leak for cifs_sb_tlink 7.1 0.0021 None reported
High CVE-2025-38105 ALSA: usb-audio: Kill timer properly at removal 7.0 0.0020 None reported
High CVE-2025-40101 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SIN... n/a 0.0020 None reported
High CVE-2025-40038 KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid 7.1 0.0018 None reported
High CVE-2025-40044 fs: udf: fix OOB read in lengthAllocDescs handling 7.8 0.0017 None reported
High CVE-2025-40026 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O 7.9 0.0017 None reported
High CVE-2025-40105 vfs: Don't leak disconnected dentries on umount 7.8 0.0017 None reported
High CVE-2025-40051 vhost: vringh: Modify the return value check 7.8 0.0017 None reported
High CVE-2025-40058 linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoheren... 8.8 0.0016 None reported
High CVE-2025-40047 linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry i... 7.8 0.0016 None reported
High CVE-2025-40027 net/9p: fix double req put in p9_fd_cancelled 7.8 0.0016 None reported
High CVE-2025-40081 perf: arm_spe: Prevent overflow in PERF_IDX2OFF() 7.8 0.0015 None reported
High CVE-2025-40096 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies 7.8 0.0015 None reported
High CVE-2025-40104 ixgbevf: fix mailbox API compatibility by negotiating supported features 7.8 0.0015 None reported
High CVE-2025-40018 ipvs: Defer ip_vs_ftp unregister during netns cleanup 7.8 0.0015 None reported
High CVE-2025-40061 RDMA/rxe: Fix race in do_task() when draining 7.8 0.0015 None reported
Showing 1 to 25 of 39 1Next