Linux · Security advisory · November 27, 2025

RLSA-2025:20095: kernel security update

RLSA-2025:20095, released November 27, 2025, fixes 88 CVEs in kernel (version 0:6.12.0-124.8.1.el10_1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

2 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0067

52nd percentile

Priority of the 88 CVEs

Patch now 0
                                Urgent 2
                                High 86
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	rocky 10	0:6.12.0-124.8.1.el10_1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2024-36350	AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue	7.8	0.0049	Exploitation Less Likely
Urgent	CVE-2024-36357	AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue	7.8	0.0036	Exploitation Less Likely
High	CVE-2025-21796	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0067	None reported
High	CVE-2025-21795	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0067	None reported
High	CVE-2025-21844	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0062	None reported
High	CVE-2025-21765	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0061	None reported
High	CVE-2024-56662	kernel: In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nf...	7.8	0.0061	None reported
High	CVE-2025-21855	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0044	None reported
High	CVE-2024-28956	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0043	None reported
High	CVE-2025-37749	net: ppp: Add bound checking for skb data on ppp_sync_txmung	7.8	0.0041	None reported
High	CVE-2024-57995	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0036	None reported
High	CVE-2025-22056	kernel-64k-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0032	None reported
High	CVE-2024-57986	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0032	None reported
High	CVE-2024-53241	kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...	7.8	0.0031	None reported
High	CVE-2024-58006	PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()	7.8	0.0031	None reported
High	CVE-2025-21647	kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0028	None reported
High	CVE-2025-21702	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0028	None reported
High	CVE-2025-21864	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0028	None reported
High	CVE-2025-21785	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2024-57901	kernel-64k-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2024-57902	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2024-57981	kernel-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2025-21863	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2025-21791	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2024-58020	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0026	None reported

Also fixes CVE-2024-36350

SUSE-SU-2025:02923-1
kernel-coco, kernel-coco_debug, kernel-source-coco and 1 more on sles 15.6
SUSE-SU-2025:02997-1
kernel-64kb, kernel-default, kernel-default-base and 6 more on sles 15.7
SUSE-SU-2025:03011-1
kernel-azure, kernel-source-azure, kernel-syms-azure on sles 15.7
SUSE-SU-2025:02853-1
kernel-livepatch-SLE15-SP7-RT_Update_3 on sles 15.7
SUSE-SU-2025:02996-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:02969-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:03023-1
kernel-livepatch-SLE15-SP6-RT_Update_14, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
KB5062553
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more

Vendor advisory

https://errata.rockylinux.org/RLSA-2025:20095

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo