Linux · Security advisory · December 22, 2025

ELSA-2025-28067: Security update for 19 packages

ELSA-2025-28067, released December 22, 2025, fixes 3 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0049
42nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-315.196.5.2.el9uek
bpftoolol 90:5.15.0-315.196.5.2.el9uek
kernel-uekol 80:5.15.0-315.196.5.2.el9uek
kernel-uekol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-containerol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-containerol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-container-debugol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-container-debugol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-coreol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-coreol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-debugol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-debugol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-coreol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-coreol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-develol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-develol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-modulesol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-modulesol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-develol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-develol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-docol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-docol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-modulesol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-modulesol 90:5.15.0-315.196.5.2.el9uek
kernel-uek-modules-extraol 80:5.15.0-315.196.5.2.el9uek
kernel-uek-modules-extraol 90:5.15.0-315.196.5.2.el9uek
kernel-uek64kol 80:5.15.0-315.196.5.2.el9uek
kernel-uek64kol 90:5.15.0-315.196.5.2.el9uek
kernel-uek64k-coreol 80:5.15.0-315.196.5.2.el9uek
kernel-uek64k-coreol 90:5.15.0-315.196.5.2.el9uek
kernel-uek64k-develol 80:5.15.0-315.196.5.2.el9uek
kernel-uek64k-develol 90:5.15.0-315.196.5.2.el9uek
kernel-uek64k-modulesol 80:5.15.0-315.196.5.2.el9uek
kernel-uek64k-modulesol 90:5.15.0-315.196.5.2.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-315.196.5.2.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-315.196.5.2.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-40271 linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... 7.8 0.0049 None reported
High CVE-2025-40248 vsock: Ignore signal/timeout on connect() if already established 7.8 0.0017 None reported
High CVE-2025-40280 tipc: Fix use-after-free in tipc_mon_reinit_self(). 7.8 0.0016 None reported
Showing 1 to 3 of 3 1