Linux · Oracle Linux · Security advisory · December 10, 2025

ELSA-2025-28040: Security update for 35 packages

ELSA-2025-28040, released December 10, 2025, fixes 39 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
39
None rated Critical
Exploited
0
None reported
Highest CVSS
9.4
Base score, 0 to 10
Highest EPSS
0.0064
51st percentile

Priority of the 39 CVEs

Patch now 0 Urgent 0 High 25 Routine 14

Fixed package versions

ProductReleaseFixed in
kernel-uekol 100:6.12.0-106.55.4.1.el9uek
kernel-uekol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debugol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debugol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-develol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-develol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modulesol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modulesol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-deprecatedol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-deprecatedol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-desktopol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-desktopol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extraol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extraol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-extra-netfilterol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-usbol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-usbol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-wirelessol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-debug-modules-wirelessol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-develol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-develol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-docol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-docol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modulesol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modulesol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-deprecatedol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-deprecatedol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-desktopol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-desktopol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extraol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extraol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extra-netfilterol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-extra-netfilterol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-usbol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-usbol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-wirelessol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-modules-wirelessol 90:6.12.0-106.55.4.1.el9uek
kernel-uek-toolsol 100:6.12.0-106.55.4.1.el9uek
kernel-uek-toolsol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64kol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64kol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-develol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-develol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modulesol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modulesol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-coreol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-coreol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-deprecatedol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-deprecatedol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-desktopol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-desktopol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extraol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extraol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extra-netfilterol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-extra-netfilterol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-usbol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-usbol 90:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-wirelessol 100:6.12.0-106.55.4.1.el9uek
kernel-uek64k-modules-wirelessol 90:6.12.0-106.55.4.1.el9uek

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-40048 uio_hv_generic: Let userspace take care of interrupt mask8.4 0.0064 None reported
High CVE-2025-40053 net: dlink: handle copy_thresh allocation failure7.5 0.0063 None reported
High CVE-2025-40087 NFSD: Define a proc_layoutcommit for the FlexFiles layout type7.5 0.0050 None reported
High CVE-2025-40099 cifs: parse_dfs_referrals: prevent oob on malformed input9.4 0.0041 None reported
High CVE-2025-40001 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue7.8 0.0026 None reported
High CVE-2025-40057 ptp: Add a upper bound on max_vclocks7.1 0.0025 None reported
High CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak7.1 0.0023 None reported
High CVE-2025-40055 ocfs2: fix double free in user_cluster_connect()7.8 0.0023 None reported
High CVE-2025-40052 smb: client: fix crypto buffers in non-linear memory7.1 0.0021 None reported
High CVE-2025-40103 smb: client: Fix refcount leak for cifs_sb_tlink7.1 0.0021 None reported
High CVE-2025-38105 ALSA: usb-audio: Kill timer properly at removal7.0 0.0020 None reported
High CVE-2025-40101 linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SIN...n/a 0.0020 None reported
High CVE-2025-40038 KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid7.1 0.0018 None reported
High CVE-2025-40044 fs: udf: fix OOB read in lengthAllocDescs handling7.8 0.0017 None reported
High CVE-2025-40026 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O7.9 0.0017 None reported
High CVE-2025-40105 vfs: Don't leak disconnected dentries on umount7.8 0.0017 None reported
High CVE-2025-40051 vhost: vringh: Modify the return value check7.8 0.0017 None reported
High CVE-2025-40058 linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoheren...8.8 0.0016 None reported
High CVE-2025-40047 linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry i...7.8 0.0016 None reported
High CVE-2025-40027 net/9p: fix double req put in p9_fd_cancelled7.8 0.0016 None reported
High CVE-2025-40081 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()7.8 0.0015 None reported
High CVE-2025-40096 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies7.8 0.0015 None reported
High CVE-2025-40104 ixgbevf: fix mailbox API compatibility by negotiating supported features7.8 0.0015 None reported
High CVE-2025-40018 ipvs: Defer ip_vs_ftp unregister during netns cleanup7.8 0.0015 None reported
High CVE-2025-40061 RDMA/rxe: Fix race in do_task() when draining7.8 0.0015 None reported
Showing 1 to 25 of 39 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.