Linux · Oracle Linux · Security advisory · July 17, 2025

ELSA-2025-20480: Security update for 35 packages

ELSA-2025-20480, released July 17, 2025, fixes 1,343 CVEs across 35 products. 3 of them are being exploited (CVE-2024-53197); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV
CVEs closed
1,343
2 rated Critical
Exploited
3
CVE-2024-53197
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.6876
99th percentile

Priority of the 1,343 CVEs

Patch now 3 Urgent 2 High 524 Routine 814

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-101.33.4.3.el9uek
kernel-uekol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-coreol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-coreol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debugol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debugol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-coreol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-coreol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-develol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-develol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modulesol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modulesol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-develol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-develol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-docol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-docol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modulesol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modulesol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-coreol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-coreol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-desktopol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-desktopol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-extraol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-extraol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-usbol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-usbol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-101.33.4.3.el9uek
kernel-uek-toolsol 100:6.12.0-101.33.4.3.el9uek
kernel-uek-toolsol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64kol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64kol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-coreol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-coreol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-develol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-develol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modulesol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modulesol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-101.33.4.3.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-101.33.4.3.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2024-53197 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H...7.8 0.0412 KEVExploited
Patch now CVE-2024-53104 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m...7.8 0.0340 KEVExploited
Patch now CVE-2024-53150 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...7.1 0.0135 KEVExploited
Urgent CVE-2024-53177 linux: In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_d...9.8 0.0055 None reported
Urgent CVE-2025-22088 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_acce...9.8 0.0055 None reported
High CVE-2025-22037 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_pre...7.5 0.6876 None reported
High CVE-2025-21760 linux: In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb()...8.1 0.3800 None reported
High CVE-2025-37924 ksmbd: fix use-after-free in kerberos authentication7.8 0.2455 None reported
High CVE-2025-21759 kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0780 None reported
High CVE-2016-5244 kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2....7.5 0.0552 None reported
High CVE-2019-11815 kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2....8.1 0.0444 None reported
High CVE-2022-28733 grub-efi-amd64: Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in gru...8.1 0.0127 None reported
High CVE-2025-37778 ksmbd: Fix dangling pointer in krb_authenticate7.8 0.0116 None reported
High CVE-2022-28734 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable...8.1 0.0112 None reported
High CVE-2012-3430 kernel-uek64k-devel: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2....n/a 0.0095 None reported
High CVE-2025-21756 perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.8 0.0089 None reported
High CVE-2025-37899 ksmbd: fix use-after-free in session logoff7.8 0.0088 None reported
High CVE-2025-22039 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check...7.1 0.0080 None reported
High CVE-2024-57791 linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when...7.5 0.0077 None reported
High CVE-2025-37928 dm-bufio: don't schedule in atomic context7.8 0.0074 None reported
High CVE-2025-37879 9p/net: fix improper handling of bogus negative read/write replies7.1 0.0073 None reported
High CVE-2025-22040 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichanne...8.8 0.0072 None reported
High CVE-2025-22041 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_dere...8.8 0.0072 None reported
High CVE-2024-56644 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...7.1 0.0071 None reported
High CVE-2024-56626 linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stre...7.8 0.0070 None reported
Showing 1 to 25 of 1,343 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.