Linux · Oracle Linux · Security advisory · October 14, 2025

ELSA-2025-20716: Security update for 19 packages

ELSA-2025-20716, released October 14, 2025, fixes 30 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
30
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0058
48th percentile

Priority of the 30 CVEs

Patch now 0 Urgent 0 High 15 Routine 15

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-313.189.5.1.el9uek
bpftoolol 90:5.15.0-313.189.5.1.el9uek
kernel-uekol 80:5.15.0-313.189.5.1.el9uek
kernel-uekol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-containerol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-containerol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-container-debugol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-container-debugol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-coreol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-coreol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debugol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debugol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-coreol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-coreol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-develol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-develol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modulesol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modulesol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-develol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-develol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-docol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-docol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-modulesol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-modulesol 90:5.15.0-313.189.5.1.el9uek
kernel-uek-modules-extraol 80:5.15.0-313.189.5.1.el9uek
kernel-uek-modules-extraol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64kol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64kol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-coreol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-coreol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-develol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-develol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modulesol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modulesol 90:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modules-extraol 80:5.15.0-313.189.5.1.el9uek
kernel-uek64k-modules-extraol 90:5.15.0-313.189.5.1.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-38439 bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT7.8 0.0058 None reported
High CVE-2025-39866 fs: writeback: fix use-after-free in __mark_inode_dirty()7.8 0.0031 None reported
High CVE-2025-38236 af_unix: Don't leave consecutive consumed OOB skbs.7.8 0.0030 None reported
High CVE-2025-38466 perf: Revert to requiring CAP_SYS_ADMIN for uprobes7.8 0.0023 None reported
High CVE-2025-38464 tipc: Fix use-after-free in tipc_conn_close().7.8 0.0022 None reported
High CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size7.8 0.0021 None reported
High CVE-2025-38459 atm: clip: Fix infinite recursive call of clip_push().7.8 0.0021 None reported
High CVE-2025-38465 netlink: Fix wraparounds of sk->sk_rmem_alloc.7.8 0.0020 None reported
High CVE-2025-38445 md/raid1: Fix stack memory use after return in raid1_reshape7.1 0.0020 None reported
High CVE-2025-38457 net/sched: Abort __tc_modify_qdisc if parent class does not exist7.1 0.0020 None reported
High CVE-2025-38458 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()7.0 0.0020 None reported
High CVE-2025-38569 linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes...7.0 0.0019 None reported
High CVE-2025-38443 nbd: fix uaf in nbd_genl_connect() error path7.8 0.0018 None reported
High CVE-2025-38461 vsock: Fix transport_* TOCTOU7.8 0.0015 None reported
High CVE-2025-38462 vsock: Fix transport_{g2h,h2g} TOCTOU7.0 0.0014 None reported
Routine CVE-2025-38067 rseq: Fix segfault on registration when rseq_cs is non-zero5.5 0.0058 None reported
Routine CVE-2025-38165 bpf, sockmap: Fix panic when calling skb_linearize5.5 0.0036 None reported
Routine CVE-2022-48703 kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...5.5 0.0024 None reported
Routine CVE-2025-38460 atm: clip: Fix potential null-ptr-deref in to_atmarpd().5.5 0.0020 None reported
Routine CVE-2025-38467 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling5.5 0.0020 None reported
Routine CVE-2025-38441 kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system5.5 0.0019 None reported
Routine CVE-2024-26775 aoe: avoid potential deadlock at set_capacity5.5 0.0018 None reported
Routine CVE-2025-38513 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()5.5 0.0018 None reported
Routine CVE-2025-38516 pinctrl: qcom: msm: mark certain pins as invalid for interrupts5.5 0.0018 None reported
Routine CVE-2025-38540 HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras5.5 0.0018 None reported
Showing 1 to 25 of 30 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.