# ELSA-2025-28040: Security update for 35 packages ELSA-2025-28040, released December 10, 2025, fixes 39 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-28040 - Platform: Linux - Released: Dec 10, 2025 - Priority: High (Closes CVE-2025-40048, high severity) - CVEs: 39, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-28040.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-106.55.4.1.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-106.55.4.1.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-40048](https://patchblox.com/security/data/cve/CVE-2025-40048.md) | High | uio_hv_generic: Let userspace take care of interrupt mask | 8.4 | 0.0064 | | | [CVE-2025-40053](https://patchblox.com/security/data/cve/CVE-2025-40053.md) | High | net: dlink: handle copy_thresh allocation failure | 7.5 | 0.0063 | | | [CVE-2025-40087](https://patchblox.com/security/data/cve/CVE-2025-40087.md) | High | NFSD: Define a proc_layoutcommit for the FlexFiles layout type | 7.5 | 0.0050 | | | [CVE-2025-40099](https://patchblox.com/security/data/cve/CVE-2025-40099.md) | High | cifs: parse_dfs_referrals: prevent oob on malformed input | 9.4 | 0.0041 | | | [CVE-2025-40001](https://patchblox.com/security/data/cve/CVE-2025-40001.md) | High | scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | 7.8 | 0.0026 | | | [CVE-2025-40057](https://patchblox.com/security/data/cve/CVE-2025-40057.md) | High | ptp: Add a upper bound on max_vclocks | 7.1 | 0.0025 | | | [CVE-2025-40035](https://patchblox.com/security/data/cve/CVE-2025-40035.md) | High | Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak | 7.1 | 0.0023 | | | [CVE-2025-40055](https://patchblox.com/security/data/cve/CVE-2025-40055.md) | High | ocfs2: fix double free in user_cluster_connect() | 7.8 | 0.0023 | | | [CVE-2025-40052](https://patchblox.com/security/data/cve/CVE-2025-40052.md) | High | smb: client: fix crypto buffers in non-linear memory | 7.1 | 0.0021 | | | [CVE-2025-40103](https://patchblox.com/security/data/cve/CVE-2025-40103.md) | High | smb: client: Fix refcount leak for cifs_sb_tlink | 7.1 | 0.0021 | | | [CVE-2025-38105](https://patchblox.com/security/data/cve/CVE-2025-38105.md) | High | ALSA: usb-audio: Kill timer properly at removal | 7.0 | 0.0020 | | | [CVE-2025-40101](https://patchblox.com/security/data/cve/CVE-2025-40101.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SIN... | n/a | 0.0020 | | | [CVE-2025-40038](https://patchblox.com/security/data/cve/CVE-2025-40038.md) | High | KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid | 7.1 | 0.0018 | | | [CVE-2025-40044](https://patchblox.com/security/data/cve/CVE-2025-40044.md) | High | fs: udf: fix OOB read in lengthAllocDescs handling | 7.8 | 0.0017 | | | [CVE-2025-40026](https://patchblox.com/security/data/cve/CVE-2025-40026.md) | High | KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O | 7.9 | 0.0017 | | | [CVE-2025-40105](https://patchblox.com/security/data/cve/CVE-2025-40105.md) | High | vfs: Don't leak disconnected dentries on umount | 7.8 | 0.0017 | | | [CVE-2025-40051](https://patchblox.com/security/data/cve/CVE-2025-40051.md) | High | vhost: vringh: Modify the return value check | 7.8 | 0.0017 | | | [CVE-2025-40058](https://patchblox.com/security/data/cve/CVE-2025-40058.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoheren... | 8.8 | 0.0016 | | | [CVE-2025-40047](https://patchblox.com/security/data/cve/CVE-2025-40047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 | | | [CVE-2025-40027](https://patchblox.com/security/data/cve/CVE-2025-40027.md) | High | net/9p: fix double req put in p9_fd_cancelled | 7.8 | 0.0016 | | | [CVE-2025-40081](https://patchblox.com/security/data/cve/CVE-2025-40081.md) | High | perf: arm_spe: Prevent overflow in PERF_IDX2OFF() | 7.8 | 0.0015 | | | [CVE-2025-40096](https://patchblox.com/security/data/cve/CVE-2025-40096.md) | High | drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies | 7.8 | 0.0015 | | | [CVE-2025-40104](https://patchblox.com/security/data/cve/CVE-2025-40104.md) | High | ixgbevf: fix mailbox API compatibility by negotiating supported features | 7.8 | 0.0015 | | | [CVE-2025-40018](https://patchblox.com/security/data/cve/CVE-2025-40018.md) | High | ipvs: Defer ip_vs_ftp unregister during netns cleanup | 7.8 | 0.0015 | | | [CVE-2025-40061](https://patchblox.com/security/data/cve/CVE-2025-40061.md) | High | RDMA/rxe: Fix race in do_task() when draining | 7.8 | 0.0015 | | | [CVE-2025-40040](https://patchblox.com/security/data/cve/CVE-2025-40040.md) | Routine | mm/ksm: fix flag-dropping behavior in ksm_madvise | 5.8 | 0.0038 | | | [CVE-2025-40078](https://patchblox.com/security/data/cve/CVE-2025-40078.md) | Routine | bpf: Explicitly check accesses to bpf_sock_addr | 5.5 | 0.0025 | | | [CVE-2025-40070](https://patchblox.com/security/data/cve/CVE-2025-40070.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when regis... | 5.5 | 0.0024 | | | [CVE-2025-40030](https://patchblox.com/security/data/cve/CVE-2025-40030.md) | Routine | pinctrl: check the return value of pinmux_ops::get_function_name() | 5.5 | 0.0023 | | | [CVE-2025-40042](https://patchblox.com/security/data/cve/CVE-2025-40042.md) | Routine | tracing: Fix race condition in kprobe initialization causing NULL pointer dereference | 5.5 | 0.0023 | | | [CVE-2025-40049](https://patchblox.com/security/data/cve/CVE-2025-40049.md) | Routine | Squashfs: fix uninit-value in squashfs_get_parent | 5.5 | 0.0023 | | | [CVE-2025-40056](https://patchblox.com/security/data/cve/CVE-2025-40056.md) | Routine | vhost: vringh: Fix copy_to_iter return value check | 5.5 | 0.0021 | | | [CVE-2025-40031](https://patchblox.com/security/data/cve/CVE-2025-40031.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_... | 5.5 | 0.0021 | | | [CVE-2025-40037](https://patchblox.com/security/data/cve/CVE-2025-40037.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: simplefb: Fix use after free in simplefb_... | 5.5 | 0.0021 | | | [CVE-2025-40080](https://patchblox.com/security/data/cve/CVE-2025-40080.md) | Routine | nbd: restrict sockets to TCP and UDP | 6.1 | 0.0021 | | | [CVE-2025-40085](https://patchblox.com/security/data/cve/CVE-2025-40085.md) | Routine | ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card | 5.8 | 0.0021 | | | [CVE-2025-40071](https://patchblox.com/security/data/cve/CVE-2025-40071.md) | Routine | tty: n_gsm: Don't block input queue by waiting MSC | 6.1 | 0.0020 | | | [CVE-2025-40100](https://patchblox.com/security/data/cve/CVE-2025-40100.md) | Routine | btrfs: do not assert we found block group item when creating free space tree | 5.5 | 0.0020 | | | [CVE-2025-22117](https://patchblox.com/security/data/cve/CVE-2025-22117.md) | Routine | kernel-azure: The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following secur... | 5.5 | 0.0019 | | --- Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.