{ "cveId": "CVE-2025-38260", "url": "https://patchblox.com/security/cve/CVE-2025-38260", "summary": "CVE-2025-38260 is fixed in 80 products on 1 platform, first by DEBIAN-CVE-2025-38260, released July 9, 2025. It is not reported as exploited. Patch Radar priority: Routine.", "title": "btrfs: handle csum tree error with rescue=ibadroots correctly", "description": "In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly [BUG] There is syzbot based reproducer that can crash the kernel, with the following call trace: (With some debug output added) DEBUG: rescue=ibadroots parsed BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by repro (1010) BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm BTRFS info (device loop0): using free-space-tree BTRFS warning (device loop0): checksum verify failed on logical 5312512 mirror 1 wanted 0xb043382657aede36608fd3386d6b001692ff406164733d94e2d9a180412c6003 found 0x810ceb2bacb7f0f9eb2bf3b2b15c02af867cb35ad450898169f3b1f0bd818651 level 0 DEBUG: read tree root path failed for tree csum, ret=-5 BTRFS warning (device loop0): checksum verify failed on logical 5328896 mirror 1 wanted 0x51be4e8b303da58e6340226815b70e3a93592dac3f30dd510c7517454de8567a found 0x51be4e8b303da58e634022a315b70e3a93592dac3f30dd510c7517454de8567a level 0 BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0x1924ccd683be9efc2fa98582ef58760e3848e9043db8649ee382681e220cdee4 found 0x0cb6184f6e8799d9f8cb335dccd1d1832da1071d12290dab3b85b587ecacca6e level 0 process \u0027repro\u0027 launched \u0027./file2\u0027 with NULL argv: empty string added DEBUG: no csum root, idatacsums=0 ibadroots=134217728 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000041: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000208-0x000000000000020f] CPU: 5 UID: 0 PID: 1010 Comm: repro Tainted: G OE 6.15.0-custom\u002B #249 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS unknown 02/02/2022 RIP: 0010:btrfs_lookup_csum\u002B0x93/0x3d0 [btrfs] Call Trace: \u003CTASK\u003E btrfs_lookup_bio_sums\u002B0x47a/0xdf0 [btrfs] btrfs_submit_bbio\u002B0x43e/0x1a80 [btrfs] submit_one_bio\u002B0xde/0x160 [btrfs] btrfs_readahead\u002B0x498/0x6a0 [btrfs] read_pages\u002B0x1c3/0xb20 page_cache_ra_order\u002B0x4b5/0xc20 filemap_get_pages\u002B0x2d3/0x19e0 filemap_read\u002B0x314/0xde0 __kernel_read\u002B0x35b/0x900 bprm_execve\u002B0x62e/0x1140 do_execveat_common.isra.0\u002B0x3fc/0x520 __x64_sys_execveat\u002B0xdc/0x130 do_syscall_64\u002B0x54/0x1d0 entry_SYSCALL_64_after_hwframe\u002B0x76/0x7e ---[ end trace 0000000000000000 ]--- [CAUSE] Firstly the fs has a corrupted csum tree root, thus to mount the fs we have to go \u0022ro,rescue=ibadroots\u0022 mount option. Normally with that mount option, a bad csum tree root should set BTRFS_FS_STATE_NO_DATA_CSUMS flag, so that any future data read will ignore csum search. But in this particular case, we have the following call trace that caused NULL csum root, but not setting BTRFS_FS_STATE_NO_DATA_CSUMS: load_global_roots_objectid(): \t\tret = btrfs_search_slot(); \t\t/* Succeeded */ \t\tbtrfs_item_key_to_cpu() \t\tfound = true; \t\t/* We found the root item for csum tree. */ \t\troot = read_tree_root_path(); \t\tif (IS_ERR(root)) { \t\t\tif (!btrfs_test_opt(fs_info, IGNOREBADROOTS)) \t\t\t/* \t\t\t * Since we have rescue=ibadroots mount option, \t\t\t * @ret is still 0. \t\t\t */ \t\t\tbreak; \tif (!found || ret) { \t\t/* @found is true, @ret is 0, error handling for csum \t\t * tree is skipped. \t\t */ \t} This means we completely skipped to set BTRFS_FS_STATE_NO_DATA_CSUMS if the csum tree is corrupted, which results unexpected later csum lookup. [FIX] If read_tree_root_path() failed, always populate @ret to the error number. As at the end of the function, we need @ret to determine if we need to do the extra error handling for csum tree.", "published": "2025-07-09T11:15:28Z", "severity": "medium", "cvss": 5.5, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "epss": 0.00166, "epssPercentile": 0.05922, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-38260", "fixes": [ { "platform": "linux", "product": "bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.1.144-170.251", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.12.37-61.105", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "released": "2025-09-08T00:00:00Z" }, { "platform": "linux", "product": "kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.147-1", "fix": "DEBIAN-CVE-2025-38260", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38260", "released": "2025-07-09T11:15:28Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.37-1", "fix": "DEBIAN-CVE-2025-38260", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38260", "released": "2025-07-09T11:15:28Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.12.37-1", "fix": "DEBIAN-CVE-2025-38260", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-38260", "released": "2025-07-09T11:15:28Z" }, { "platform": "linux", "product": "perf", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.144-170.251.amzn2023", "fix": "ALAS2023-2025-1111", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1111", "released": "2025-07-21T23:13:00Z" }, { "platform": "linux", "product": "python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" }, { "platform": "linux", "product": "python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.37-61.105.amzn2023", "fix": "ALAS2023-2025-1130", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1130", "released": "2025-07-29T23:15:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T19:12:23Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }