Linux · Security advisory · December 12, 2025

ELSA-2025-28048: Security update for 19 packages

ELSA-2025-28048, released December 12, 2025, fixes 76 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
76
7 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
51st percentile

Priority of the 76 CVEs

Patch now 0 Urgent 7 High 45 Routine 24

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-315.196.5.1.el9uek
bpftoolol 90:5.15.0-315.196.5.1.el9uek
kernel-uekol 80:5.15.0-315.196.5.1.el9uek
kernel-uekol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-containerol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-containerol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-container-debugol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-container-debugol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-coreol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-coreol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-debugol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-debugol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-coreol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-coreol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-develol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-develol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-modulesol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-modulesol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-develol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-develol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-docol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-docol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-modulesol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-modulesol 90:5.15.0-315.196.5.1.el9uek
kernel-uek-modules-extraol 80:5.15.0-315.196.5.1.el9uek
kernel-uek-modules-extraol 90:5.15.0-315.196.5.1.el9uek
kernel-uek64kol 80:5.15.0-315.196.5.1.el9uek
kernel-uek64kol 90:5.15.0-315.196.5.1.el9uek
kernel-uek64k-coreol 80:5.15.0-315.196.5.1.el9uek
kernel-uek64k-coreol 90:5.15.0-315.196.5.1.el9uek
kernel-uek64k-develol 80:5.15.0-315.196.5.1.el9uek
kernel-uek64k-develol 90:5.15.0-315.196.5.1.el9uek
kernel-uek64k-modulesol 80:5.15.0-315.196.5.1.el9uek
kernel-uek64k-modulesol 90:5.15.0-315.196.5.1.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-315.196.5.1.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-315.196.5.1.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-39996 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove 9.8 0.0023 None reported
Urgent CVE-2025-39967 fbcon: fix integer overflow in fbcon_do_set_font 9.8 0.0017 None reported
Urgent CVE-2025-39994 media: tuner: xc5000: Fix use-after-free in xc5000_release 9.8 0.0016 None reported
Urgent CVE-2025-39970 i40e: fix input validation logic for action_meta 9.8 0.0016 None reported
Urgent CVE-2025-39971 i40e: fix idx validation in config queues msg 9.8 0.0016 None reported
Urgent CVE-2025-39972 i40e: fix idx validation in i40e_validate_queue_map 9.8 0.0016 None reported
Urgent CVE-2025-39968 i40e: add max boundary check for VF filters 9.8 0.0015 None reported
High CVE-2025-40048 uio_hv_generic: Let userspace take care of interrupt mask 8.4 0.0064 None reported
High CVE-2025-40187 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() 7.5 0.0064 None reported
High CVE-2025-40053 net: dlink: handle copy_thresh allocation failure 7.5 0.0063 None reported
High CVE-2025-40183 linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadata_dst leak __bpf_redirect_neigh_... 7.5 0.0063 None reported
High CVE-2025-40186 linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_c... 8.1 0.0059 None reported
High CVE-2025-40087 NFSD: Define a proc_layoutcommit for the FlexFiles layout type 7.5 0.0050 None reported
High CVE-2025-40171 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_... 7.5 0.0048 None reported
High CVE-2025-40204 sctp: Fix MAC comparison to be constant-time 8.1 0.0047 None reported
High CVE-2025-39880 libceph: fix invalid accesses to ceph_connection_v1_info 7.8 0.0033 None reported
High CVE-2025-40140 linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netif_wake_queue in... 8.8 0.0032 None reported
High CVE-2025-38678 netfilter: nf_tables: reject duplicate device on updates 7.1 0.0029 None reported
High CVE-2025-40001 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue 7.8 0.0026 None reported
High CVE-2025-40022 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in... n/a 0.0024 None reported
High CVE-2025-39980 nexthop: Forbid FDB status change while nexthop is in a group 7.1 0.0023 None reported
High CVE-2025-40121 linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk inp... 7.0 0.0023 None reported
High CVE-2025-22058 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 7.3 0.0023 None reported
High CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak 7.1 0.0023 None reported
High CVE-2025-40055 ocfs2: fix double free in user_cluster_connect() 7.8 0.0023 None reported
Showing 1 to 25 of 76 1Next