Linux · Security advisory · December 12, 2025

ELSA-2025-28049: Security update for 8 packages

ELSA-2025-28049, released December 12, 2025, fixes 63 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
63
7 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
51st percentile

Priority of the 63 CVEs

Patch now 0 Urgent 7 High 36 Routine 20

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-containerol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-container-debugol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-debugol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-develol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-docol 80:5.4.17-2136.350.3.1.el8uek
kernel-uek-toolsol 80:5.4.17-2136.350.3.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-39996 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove 9.8 0.0023 None reported
Urgent CVE-2025-39967 fbcon: fix integer overflow in fbcon_do_set_font 9.8 0.0017 None reported
Urgent CVE-2025-39994 media: tuner: xc5000: Fix use-after-free in xc5000_release 9.8 0.0016 None reported
Urgent CVE-2025-39970 i40e: fix input validation logic for action_meta 9.8 0.0016 None reported
Urgent CVE-2025-39971 i40e: fix idx validation in config queues msg 9.8 0.0016 None reported
Urgent CVE-2025-39972 i40e: fix idx validation in i40e_validate_queue_map 9.8 0.0016 None reported
Urgent CVE-2025-39968 i40e: add max boundary check for VF filters 9.8 0.0015 None reported
High CVE-2025-40240 sctp: avoid NULL dereference when chunk data buffer is missing 8.6 0.0064 None reported
High CVE-2025-40048 uio_hv_generic: Let userspace take care of interrupt mask 8.4 0.0064 None reported
High CVE-2025-40187 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() 7.5 0.0064 None reported
High CVE-2025-40186 linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_c... 8.1 0.0059 None reported
High CVE-2025-40087 NFSD: Define a proc_layoutcommit for the FlexFiles layout type 7.5 0.0050 None reported
High CVE-2025-40204 sctp: Fix MAC comparison to be constant-time 8.1 0.0047 None reported
High CVE-2025-40140 linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netif_wake_queue in... 8.8 0.0032 None reported
High CVE-2025-40001 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue 7.8 0.0026 None reported
High CVE-2025-39995 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe 7.1 0.0023 None reported
High CVE-2025-22058 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 7.3 0.0023 None reported
High CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak 7.1 0.0023 None reported
High CVE-2025-40055 ocfs2: fix double free in user_cluster_connect() 7.8 0.0023 None reported
High CVE-2025-40020 can: peak_usb: fix shift-out-of-bounds issue 7.1 0.0021 None reported
High CVE-2025-40006 linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when delet... 7.8 0.0020 None reported
High CVE-2025-39913 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. 7.8 0.0019 None reported
High CVE-2025-40190 ext4: guard against EA inode refcount underflow in xattr update 7.8 0.0018 None reported
High CVE-2025-39998 scsi: target: target_core_configfs: Add length check to avoid buffer overflow 7.8 0.0018 None reported
High CVE-2025-40044 fs: udf: fix OOB read in lengthAllocDescs handling 7.8 0.0017 None reported
Showing 1 to 25 of 63 1Next