{
  "cveId": "CVE-2025-39703",
  "url": "https://patchblox.com/security/cve/CVE-2025-39703",
  "summary": "CVE-2025-39703 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2025-39703, released September 5, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "net, hsr: reject HSR frame if skb can\u0027t hold tag",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net, hsr: reject HSR frame if skb can\u0027t hold tag  Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash (kernel BUG):  [   45.390915] skbuff: skb_under_panic: text:ffffffff86f32cac len:26 put:14 head:ffff888042418000 data:ffff888042417ff4 tail:0xe end:0x180 dev:bridge_slave_1 [   45.392559] ------------[ cut here ]------------ [   45.392912] kernel BUG at net/core/skbuff.c:211! [   45.393276] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [   45.393809] CPU: 1 UID: 0 PID: 2496 Comm: reproducer Not tainted 6.15.0 #12 PREEMPT(undef) [   45.394433] Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [   45.395273] RIP: 0010:skb_panic\u002B0x15b/0x1d0  \u003Csnip registers, remove unreliable trace\u003E  [   45.402911] Call Trace: [   45.403105]  \u003CIRQ\u003E [   45.404470]  skb_push\u002B0xcd/0xf0 [   45.404726]  br_dev_queue_push_xmit\u002B0x7c/0x6c0 [   45.406513]  br_forward_finish\u002B0x128/0x260 [   45.408483]  __br_forward\u002B0x42d/0x590 [   45.409464]  maybe_deliver\u002B0x2eb/0x420 [   45.409763]  br_flood\u002B0x174/0x4a0 [   45.410030]  br_handle_frame_finish\u002B0xc7c/0x1bc0 [   45.411618]  br_handle_frame\u002B0xac3/0x1230 [   45.413674]  __netif_receive_skb_core.constprop.0\u002B0x808/0x3df0 [   45.422966]  __netif_receive_skb_one_core\u002B0xb4/0x1f0 [   45.424478]  __netif_receive_skb\u002B0x22/0x170 [   45.424806]  process_backlog\u002B0x242/0x6d0 [   45.425116]  __napi_poll\u002B0xbb/0x630 [   45.425394]  net_rx_action\u002B0x4d1/0xcc0 [   45.427613]  handle_softirqs\u002B0x1a4/0x580 [   45.427926]  do_softirq\u002B0x74/0x90 [   45.428196]  \u003C/IRQ\u003E  This issue was found by syzkaller.  The panic happens in br_dev_queue_push_xmit() once it receives a corrupted skb with ETH header already pushed in linear data. When it attempts the skb_push() call, there\u0027s not enough headroom and skb_push() panics.  The corrupted skb is put on the queue by HSR layer, which makes a sequence of unintended transformations when it receives a specific corrupted HSR frame (with incomplete TAG).  Fix it by dropping and consuming frames that are not long enough to contain both ethernet and hsr headers.  Alternative fix would be to check for enough headroom before skb_push() in br_dev_queue_push_xmit().  In the reproducer, this is injected via AF_PACKET, but I don\u0027t easily see why it couldn\u0027t be sent over the wire from adjacent network.  Further Details:  In the reproducer, the following network interface chain is set up:  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510   \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u2502 veth0_to_hsr   \u251C\u2500\u2500\u2500\u2524  hsr_slave0    \u253C\u2500\u2500\u2500\u2510 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518   \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518   \u2502                                           \u2502 \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2510                                           \u251C\u2500\u2524 hsr0 \u251C\u2500\u2500\u2500\u2510                                           \u2502 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2518   \u2502 \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510   \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510   \u2502            \u2502\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u2502 veth1_to_hsr   \u253C\u2500\u2500\u2500\u2524  hsr_slave1    \u251C\u2500\u2500\u2500\u2518            \u2514\u2524        \u2502 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518   \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518                \u250C\u253C bridge \u2502                                                        \u2502\u2502        \u2502                                                        \u2502\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518                                                        \u2502                                         \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510      \u2502                                         \u2502  ...  \u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2518                                         \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518  To trigger the events leading up to crash, reproducer sends a corrupted HSR fr ---truncated---",
  "published": "2025-09-05T18:15:47Z",
  "severity": "medium",
  "cvss": 7,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00391,
  "epssPercentile": 0.33469,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-39703",
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.52.1",
      "fix": "SUSE-SU-2025:03634-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03634-1",
      "released": "2025-10-17T14:32:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.52.1",
      "fix": "SUSE-SU-2025:03634-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03634-1",
      "released": "2025-10-17T14:32:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.15.2",
      "fix": "SUSE-SU-2025:03633-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03633-1",
      "released": "2025-10-17T14:32:41Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.32.coco15sp6.1",
      "fix": "SUSE-SU-2025:03602-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03602-1",
      "released": "2025-10-15T12:57:25Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco_debug",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.32.coco15sp6.1",
      "fix": "SUSE-SU-2025:03602-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03602-1",
      "released": "2025-10-15T12:57:25Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1.150600.12.32.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1.150600.12.32.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1.150700.17.13.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_16",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.3.1",
      "fix": "SUSE-SU-2025:3751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3751-1",
      "released": "2025-10-23T10:25:37Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_16",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_5",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "fix": "SUSE-SU-2025:3725-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3725-1",
      "released": "2025-10-22T11:48:19Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_5",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.55.1",
      "fix": "SUSE-SU-2025:3751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3751-1",
      "released": "2025-10-23T10:25:37Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.55.1",
      "fix": "SUSE-SU-2025:3751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3751-1",
      "released": "2025-10-23T10:25:37Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.52.1",
      "fix": "SUSE-SU-2025:03634-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03634-1",
      "released": "2025-10-17T14:32:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.52.1",
      "fix": "SUSE-SU-2025:03634-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03634-1",
      "released": "2025-10-17T14:32:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.15.2",
      "fix": "SUSE-SU-2025:03633-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03633-1",
      "released": "2025-10-17T14:32:41Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.32.coco15sp6.1",
      "fix": "SUSE-SU-2025:03602-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03602-1",
      "released": "2025-10-15T12:57:25Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.55.1",
      "fix": "SUSE-SU-2025:3751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3751-1",
      "released": "2025-10-23T10:25:37Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.52.1",
      "fix": "SUSE-SU-2025:03634-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03634-1",
      "released": "2025-10-17T14:32:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.52.1",
      "fix": "SUSE-SU-2025:03634-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03634-1",
      "released": "2025-10-17T14:32:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.15.1",
      "fix": "SUSE-SU-2025:03633-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03633-1",
      "released": "2025-10-17T14:32:41Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.32.coco15sp6.1",
      "fix": "SUSE-SU-2025:03602-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03602-1",
      "released": "2025-10-15T12:57:25Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.55.1",
      "fix": "SUSE-SU-2025:3751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3751-1",
      "released": "2025-10-23T10:25:37Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "fix": "ELSA-2025-25757",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
      "released": "2025-11-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "OPENSUSE-SU-2025:20081-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1",
      "released": "2025-11-25T07:35:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.73.1",
      "fix": "SUSE-SU-2025:03600-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03600-1",
      "released": "2025-10-15T12:54:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.19.1",
      "fix": "SUSE-SU-2025:03601-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03601-1",
      "released": "2025-10-15T12:57:01Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1",
      "fix": "SUSE-SU-2025:21139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21139-1",
      "released": "2025-11-25T07:34:57Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.153-1",
      "fix": "DEBIAN-CVE-2025-39703",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-39703",
      "released": "2025-09-05T18:15:47Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.48-1",
      "fix": "DEBIAN-CVE-2025-39703",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-39703",
      "released": "2025-09-05T18:15:47Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.16.5-1",
      "fix": "DEBIAN-CVE-2025-39703",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-39703",
      "released": "2025-09-05T18:15:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}