# ELSA-2025-20095-0: Security update for 30 packages ELSA-2025-20095-0, released November 25, 2025, fixes 88 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20095-0 - Platform: Linux - Released: Nov 25, 2025 - Priority: Urgent (Closes CVE-2024-36350, rated Critical) - CVEs: 88, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20095-0.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-modules-extra-matched](https://patchblox.com/security/data/product/linux/kernel-modules-extra-matched.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | | [rv](https://patchblox.com/security/data/product/linux/rv.md) | ol 10 | 0:6.12.0-124.8.1.el10_1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-36350](https://patchblox.com/security/data/cve/CVE-2024-36350.md) | Urgent | AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue | 7.8 | 0.0049 | | | [CVE-2024-36357](https://patchblox.com/security/data/cve/CVE-2024-36357.md) | Urgent | AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue | 7.8 | 0.0036 | | | [CVE-2025-21796](https://patchblox.com/security/data/cve/CVE-2025-21796.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0067 | | | [CVE-2025-21795](https://patchblox.com/security/data/cve/CVE-2025-21795.md) | High | kernel: kernel: NFSD: fix hang in nfsd4_shutdown_callback | 7.8 | 0.0067 | | | [CVE-2025-21844](https://patchblox.com/security/data/cve/CVE-2025-21844.md) | High | kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512). | 7.8 | 0.0062 | | | [CVE-2025-21765](https://patchblox.com/security/data/cve/CVE-2025-21765.md) | High | kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906). | 7.8 | 0.0061 | | | [CVE-2024-56662](https://patchblox.com/security/data/cve/CVE-2024-56662.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0061 | | | [CVE-2025-21855](https://patchblox.com/security/data/cve/CVE-2025-21855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0044 | | | [CVE-2024-28956](https://patchblox.com/security/data/cve/CVE-2024-28956.md) | High | kernel-64kb: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). | 7.8 | 0.0043 | | | [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 | | | [CVE-2024-57995](https://patchblox.com/security/data/cve/CVE-2024-57995.md) | High | kernel-rt-64k-devel: kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() | 7.8 | 0.0036 | | | [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525). | 7.8 | 0.0033 | | | [CVE-2024-57986](https://patchblox.com/security/data/cve/CVE-2024-57986.md) | High | kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections | 7.8 | 0.0032 | | | [CVE-2024-53241](https://patchblox.com/security/data/cve/CVE-2024-53241.md) | High | kernel-64kb: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). | 7.8 | 0.0031 | | | [CVE-2024-58006](https://patchblox.com/security/data/cve/CVE-2024-58006.md) | High | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() | 7.8 | 0.0031 | | | [CVE-2025-21647](https://patchblox.com/security/data/cve/CVE-2025-21647.md) | High | kernel-64kb: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133). | 7.8 | 0.0028 | | | [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312). | 7.8 | 0.0028 | | | [CVE-2025-21864](https://patchblox.com/security/data/cve/CVE-2025-21864.md) | High | kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482). | 7.8 | 0.0028 | | | [CVE-2025-21785](https://patchblox.com/security/data/cve/CVE-2025-21785.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-57901](https://patchblox.com/security/data/cve/CVE-2024-57901.md) | High | kernel-devel-matched: kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK | 7.8 | 0.0027 | | | [CVE-2024-57902](https://patchblox.com/security/data/cve/CVE-2024-57902.md) | High | kernel-devel: kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK | 7.8 | 0.0027 | | | [CVE-2024-57981](https://patchblox.com/security/data/cve/CVE-2024-57981.md) | High | kernel-64k-modules-extra: kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts | 7.8 | 0.0027 | | | [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel-64kb: io_uring: prevent opcode speculation (bsc#1239475). | 7.8 | 0.0027 | | | [CVE-2025-21791](https://patchblox.com/security/data/cve/CVE-2025-21791.md) | High | kernel-rt: kernel: vrf: use RCU protection in l3mdev_l3_out() | 7.8 | 0.0027 | | | [CVE-2024-58020](https://patchblox.com/security/data/cve/CVE-2024-58020.md) | High | kernel-rt-debug-core: kernel: HID: multitouch: Add NULL check in mt_input_configured | 7.8 | 0.0026 | | | [CVE-2025-21696](https://patchblox.com/security/data/cve/CVE-2025-21696.md) | High | mm: clear uffd-wp PTE/PMD state on mremap() | 7.8 | 0.0026 | | | [CVE-2025-21761](https://patchblox.com/security/data/cve/CVE-2025-21761.md) | High | kernel-64kb: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775). | 7.8 | 0.0026 | | | [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2025-21976](https://patchblox.com/security/data/cve/CVE-2025-21976.md) | High | fbdev: hyperv_fb: Allow graceful removal of framebuffer | 7.8 | 0.0026 | | | [CVE-2024-58012](https://patchblox.com/security/data/cve/CVE-2024-58012.md) | High | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | 7.8 | 0.0026 | | | [CVE-2025-21655](https://patchblox.com/security/data/cve/CVE-2025-21655.md) | High | kernel-64kb: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163). | 7.8 | 0.0025 | | | [CVE-2024-53147](https://patchblox.com/security/data/cve/CVE-2024-53147.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0025 | | | [CVE-2024-58005](https://patchblox.com/security/data/cve/CVE-2024-58005.md) | High | kernel-64k-debug-modules-extra: kernel: tpm: Change to kvalloc() in eventlog/acpi.c | 7.8 | 0.0025 | | | [CVE-2025-21846](https://patchblox.com/security/data/cve/CVE-2025-21846.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-58013](https://patchblox.com/security/data/cve/CVE-2024-58013.md) | High | kernel-debug-devel-matched: kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync | 7.8 | 0.0024 | | | [CVE-2025-21861](https://patchblox.com/security/data/cve/CVE-2025-21861.md) | High | kernel-64kb: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize() (bsc#1239483). | 7.8 | 0.0024 | | | [CVE-2025-21726](https://patchblox.com/security/data/cve/CVE-2025-21726.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-58069](https://patchblox.com/security/data/cve/CVE-2024-58069.md) | High | kernel-tools: kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read | 7.8 | 0.0023 | | | [CVE-2025-21786](https://patchblox.com/security/data/cve/CVE-2025-21786.md) | High | workqueue: Put the pwq after detaching the rescuer from the pool | 7.8 | 0.0023 | | | [CVE-2024-57984](https://patchblox.com/security/data/cve/CVE-2024-57984.md) | High | kernel: kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition | 7.8 | 0.0023 | | | [CVE-2025-21790](https://patchblox.com/security/data/cve/CVE-2025-21790.md) | High | kernel-modules-core: kernel: vxlan: check vxlan_vnigroup_init() return value | 7.8 | 0.0023 | | | [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-64kb: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555). | 7.8 | 0.0023 | | | [CVE-2024-54456](https://patchblox.com/security/data/cve/CVE-2024-54456.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0023 | | | [CVE-2025-21680](https://patchblox.com/security/data/cve/CVE-2025-21680.md) | High | kernel-64kb: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700). | 7.8 | 0.0023 | | | [CVE-2024-49570](https://patchblox.com/security/data/cve/CVE-2024-49570.md) | High | kernel-64kb: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782). | 7.8 | 0.0023 | | | [CVE-2025-21738](https://patchblox.com/security/data/cve/CVE-2025-21738.md) | High | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 7.8 | 0.0022 | | | [CVE-2024-53222](https://patchblox.com/security/data/cve/CVE-2024-53222.md) | High | kernel-64kb: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974). | 7.8 | 0.0022 | | | [CVE-2024-58014](https://patchblox.com/security/data/cve/CVE-2024-58014.md) | High | kernel-64k-core: kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() | 7.8 | 0.0022 | | | [CVE-2025-21828](https://patchblox.com/security/data/cve/CVE-2025-21828.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 | | | [CVE-2024-53216](https://patchblox.com/security/data/cve/CVE-2024-53216.md) | High | kernel-coco_debug: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003). | 7.8 | 0.0022 | | | [CVE-2025-21741](https://patchblox.com/security/data/cve/CVE-2025-21741.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21742](https://patchblox.com/security/data/cve/CVE-2025-21742.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-57987](https://patchblox.com/security/data/cve/CVE-2024-57987.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-57988](https://patchblox.com/security/data/cve/CVE-2024-57988.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-57989](https://patchblox.com/security/data/cve/CVE-2024-57989.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0022 | | | [CVE-2025-21847](https://patchblox.com/security/data/cve/CVE-2025-21847.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21671](https://patchblox.com/security/data/cve/CVE-2025-21671.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21743](https://patchblox.com/security/data/cve/CVE-2025-21743.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21857](https://patchblox.com/security/data/cve/CVE-2025-21857.md) | High | kernel-64kb: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478). | 7.8 | 0.0022 | | | [CVE-2024-58072](https://patchblox.com/security/data/cve/CVE-2024-58072.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-21652](https://patchblox.com/security/data/cve/CVE-2025-21652.md) | High | kernel-64k: kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). | 7.8 | 0.0021 | | | [CVE-2025-21750](https://patchblox.com/security/data/cve/CVE-2025-21750.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-21691](https://patchblox.com/security/data/cve/CVE-2025-21691.md) | High | kernel-debug-devel: kernel: cachestat: fix page cache statistics permission checking | 7.8 | 0.0020 | | | [CVE-2024-57977](https://patchblox.com/security/data/cve/CVE-2024-57977.md) | High | kernel-64k-modules-core: kernel: memcg: fix soft lockup in the OOM process | 7.8 | 0.0020 | | | [CVE-2025-21693](https://patchblox.com/security/data/cve/CVE-2025-21693.md) | High | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 7.8 | 0.0020 | | | [CVE-2025-21771](https://patchblox.com/security/data/cve/CVE-2025-21771.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0020 | | | [CVE-2025-21777](https://patchblox.com/security/data/cve/CVE-2025-21777.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0020 | | | [CVE-2024-58004](https://patchblox.com/security/data/cve/CVE-2024-58004.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-21826](https://patchblox.com/security/data/cve/CVE-2025-21826.md) | High | kernel-64k-debug: kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length | 7.8 | 0.0020 | | | [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 | | | [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 | | | [CVE-2024-58061](https://patchblox.com/security/data/cve/CVE-2024-58061.md) | High | kernel-rt-modules: kernel: wifi: mac80211: prohibit deactivating all links | 7.8 | 0.0019 | | | [CVE-2024-58075](https://patchblox.com/security/data/cve/CVE-2024-58075.md) | High | kernel-64k-devel-matched: kernel: crypto: tegra - do not transfer req when tegra init fails | 7.8 | 0.0019 | | | [CVE-2025-38116](https://patchblox.com/security/data/cve/CVE-2025-38116.md) | High | kernel: ELSA-2025-20518-0: kernel security update (MODERATE) | 7.8 | 0.0019 | | | [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel-rt-64k-modules: kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY | 7.8 | 0.0019 | | | [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 | | | [CVE-2024-58077](https://patchblox.com/security/data/cve/CVE-2024-58077.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2024-58088](https://patchblox.com/security/data/cve/CVE-2024-58088.md) | High | kernel-64kb: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). | 7.8 | 0.0018 | | | [CVE-2024-58057](https://patchblox.com/security/data/cve/CVE-2024-58057.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2024-58015](https://patchblox.com/security/data/cve/CVE-2024-58015.md) | High | kernel-64k-debug-modules-core: kernel: wifi: ath12k: Fix for out-of bound access error | 7.8 | 0.0018 | | | [CVE-2024-57942](https://patchblox.com/security/data/cve/CVE-2024-57942.md) | High | kernel-64k-debug-modules-core: kernel: netfs: Fix ceph copy to cache on write-begin | 7.8 | 0.0018 | | | [CVE-2025-21851](https://patchblox.com/security/data/cve/CVE-2025-21851.md) | High | kernel-64k-core: kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel | 7.8 | 0.0018 | | | [CVE-2024-57941](https://patchblox.com/security/data/cve/CVE-2024-57941.md) | High | kernel-core: kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled | 7.8 | 0.0018 | | | [CVE-2025-21732](https://patchblox.com/security/data/cve/CVE-2025-21732.md) | High | RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error | 7.8 | 0.0014 | | | [CVE-2025-21633](https://patchblox.com/security/data/cve/CVE-2025-21633.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a | | | [CVE-2025-21837](https://patchblox.com/security/data/cve/CVE-2025-21837.md) | High | kernel-64kb: io_uring/uring_cmd: unconditionally copy SQEs at prep time (bsc#1239064). | 7.8 | n/a | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.