ELSA-2025-20471: Security update for 8 packages

ELSA-2025-20471, released July 14, 2025, fixes 53 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.4

Base score, 0 to 10

Highest EPSS

0.0056

46th percentile

Priority of the 53 CVEs

Patch now 0
                                Urgent 0
                                High 25
                                Routine 28

Fixed package versions

Product	Release	Fixed in
kernel-uek	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-container	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-container-debug	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-debug	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-debug-devel	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-devel	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-doc	ol 8	0:5.4.17-2136.345.5.3.el7uek
kernel-uek-tools	ol 8	0:5.4.17-2136.345.5.3.el7uek

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-50154	python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.0	0.0056	None reported
High	CVE-2025-37749	net: ppp: Add bound checking for skb data on ppp_sync_txmung	7.8	0.0041	None reported
High	CVE-2025-37839	jbd2: remove wrong sb->s_sequence check	7.8	0.0033	None reported
High	CVE-2025-37840	mtd: rawnand: brcmnand: fix PM resume warning	7.8	0.0033	None reported
High	CVE-2025-37858	fs/jfs: Prevent integer overflow in AG size calculation	7.8	0.0031	None reported
High	CVE-2025-37785	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...	7.1	0.0031	None reported
High	CVE-2021-47352	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0027	None reported
High	CVE-2025-37803	udmabuf: fix a buf size overflow issue during udmabuf creation	7.8	0.0025	None reported
High	CVE-2025-37810	usb: dwc3: gadget: check that event count does not exceed event buffer length	7.8	0.0025	None reported
High	CVE-2025-37838	linux: In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerabil...	7.8	0.0025	None reported
High	CVE-2025-23150	ext4: fix off-by-one error in do_split	8.4	0.0023	None reported
High	CVE-2025-37823	net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too	7.8	0.0023	None reported
High	CVE-2025-23142	sctp: detect and prevent references to a freed transport in sendmsg	7.8	0.0023	None reported
High	CVE-2025-37797	net_sched: hfsc: Fix a UAF vulnerability in class handling	7.8	0.0023	None reported
High	CVE-2025-23158	media: venus: hfi: add check to handle incorrect queue size	7.8	0.0022	None reported
High	CVE-2025-23157	media: venus: hfi_parser: add check to avoid out of bound access	7.1	0.0022	None reported
High	CVE-2025-37789	net: openvswitch: fix nested key length validation in the set() action	7.8	0.0022	None reported
High	CVE-2025-37738	ext4: ignore xattrs past end	7.8	0.0022	None reported
High	CVE-2025-37817	mcb: fix a double free bug in chameleon_parse_gdd()	7.8	0.0022	None reported
High	CVE-2025-37780	isofs: Prevent the use of too small fid	7.1	0.0022	None reported
High	CVE-2025-37892	mtd: inftlcore: Add error check for inftl_read_oob()	7.8	0.0021	None reported
High	CVE-2025-37796	wifi: at76c50x: fix use after free access in at76_disconnect	7.8	0.0020	None reported
High	CVE-2025-37989	net: phy: leds: fix memory leak	7.0	0.0020	None reported
High	CVE-2025-37982	wifi: wl1251: fix memory leak in wl1251_tx_work	7.0	0.0019	None reported
High	CVE-2025-37940	ftrace: Add cond_resched() to ftrace_graph_set_hash()	7.0	0.0016	None reported

Also fixes CVE-2024-50154

SUSE-SU-2025:0289-1
kernel-coco, kernel-coco_debug, kernel-source-coco and 1 more on sles 15.6
SUSE-SU-2024:4318-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2024:4314-1
kernel-livepatch-SLE15-SP6-RT_Update_6, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:0154-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:0153-1
kernel-livepatch-SLE15-SP6-RT_Update_7, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:0117-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6
ELSA-2024-12887
bpftool, kernel-uek, kernel-uek-container and 11 more on ol 8, ol 9
ALAS2023-2025-794
bpftool, bpftool-debuginfo, kernel and 18 more on amzn 2023

Vendor advisory

https://linux.oracle.com/errata/ELSA-2025-20471.html

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/elsa-2025-20471">ELSA-2025-20471 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.