Linux · Oracle Linux · Security advisory · November 25, 2025

ELSA-2025-20095-0: Security update for 30 packages

ELSA-2025-20095-0, released November 25, 2025, fixes 88 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
88
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0067
52nd percentile

Priority of the 88 CVEs

Patch now 0 Urgent 2 High 86 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelol 100:6.12.0-124.8.1.el10_1
kernel-abi-stablelistsol 100:6.12.0-124.8.1.el10_1
kernel-coreol 100:6.12.0-124.8.1.el10_1
kernel-cross-headersol 100:6.12.0-124.8.1.el10_1
kernel-debugol 100:6.12.0-124.8.1.el10_1
kernel-debug-coreol 100:6.12.0-124.8.1.el10_1
kernel-debug-develol 100:6.12.0-124.8.1.el10_1
kernel-debug-devel-matchedol 100:6.12.0-124.8.1.el10_1
kernel-debug-modulesol 100:6.12.0-124.8.1.el10_1
kernel-debug-modules-coreol 100:6.12.0-124.8.1.el10_1
kernel-debug-modules-extraol 100:6.12.0-124.8.1.el10_1
kernel-debug-uki-virtol 100:6.12.0-124.8.1.el10_1
kernel-develol 100:6.12.0-124.8.1.el10_1
kernel-devel-matchedol 100:6.12.0-124.8.1.el10_1
kernel-docol 100:6.12.0-124.8.1.el10_1
kernel-headersol 100:6.12.0-124.8.1.el10_1
kernel-modulesol 100:6.12.0-124.8.1.el10_1
kernel-modules-coreol 100:6.12.0-124.8.1.el10_1
kernel-modules-extraol 100:6.12.0-124.8.1.el10_1
kernel-modules-extra-matchedol 100:6.12.0-124.8.1.el10_1
kernel-toolsol 100:6.12.0-124.8.1.el10_1
kernel-tools-libsol 100:6.12.0-124.8.1.el10_1
kernel-tools-libs-develol 100:6.12.0-124.8.1.el10_1
kernel-uki-virtol 100:6.12.0-124.8.1.el10_1
kernel-uki-virt-addonsol 100:6.12.0-124.8.1.el10_1
libperfol 100:6.12.0-124.8.1.el10_1
perfol 100:6.12.0-124.8.1.el10_1
python3-perfol 100:6.12.0-124.8.1.el10_1
rtlaol 100:6.12.0-124.8.1.el10_1
rvol 100:6.12.0-124.8.1.el10_1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2024-36350 AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue7.8 0.0049 Exploitation Less Likely
Urgent CVE-2024-36357 AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue7.8 0.0036 Exploitation Less Likely
High CVE-2025-21796 kernel-64kb: Security update for the Linux Kernel9.8 0.0067 None reported
High CVE-2025-21795 kernel: kernel: NFSD: fix hang in nfsd4_shutdown_callback7.8 0.0067 None reported
High CVE-2025-21844 kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).7.8 0.0062 None reported
High CVE-2025-21765 kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).7.8 0.0061 None reported
High CVE-2024-56662 kernel-64kb: Security update for the Linux Kernel7.8 0.0061 None reported
High CVE-2025-21855 kernel-64kb: Security update for the Linux Kernel7.8 0.0044 None reported
High CVE-2024-28956 kernel-64kb: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).7.8 0.0043 None reported
High CVE-2025-37749 net: ppp: Add bound checking for skb data on ppp_sync_txmung7.8 0.0041 None reported
High CVE-2024-57995 kernel-rt-64k-devel: kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()7.8 0.0036 None reported
High CVE-2025-22056 kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).7.8 0.0033 None reported
High CVE-2024-57986 kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections7.8 0.0032 None reported
High CVE-2024-53241 kernel-64kb: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).7.8 0.0031 None reported
High CVE-2024-58006 PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()7.8 0.0031 None reported
High CVE-2025-21647 kernel-64kb: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).7.8 0.0028 None reported
High CVE-2025-21702 kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).7.8 0.0028 None reported
High CVE-2025-21864 kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).7.8 0.0028 None reported
High CVE-2025-21785 kernel-64kb: Security update for the Linux Kernel7.8 0.0027 None reported
High CVE-2024-57901 kernel-devel-matched: kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK7.8 0.0027 None reported
High CVE-2024-57902 kernel-devel: kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK7.8 0.0027 None reported
High CVE-2024-57981 kernel-64k-modules-extra: kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts7.8 0.0027 None reported
High CVE-2025-21863 kernel-64kb: io_uring: prevent opcode speculation (bsc#1239475).7.8 0.0027 None reported
High CVE-2025-21791 kernel-rt: kernel: vrf: use RCU protection in l3mdev_l3_out()7.8 0.0027 None reported
High CVE-2024-58020 kernel-rt-debug-core: kernel: HID: multitouch: Add NULL check in mt_input_configured7.8 0.0026 None reported
Showing 1 to 25 of 88 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.