{
  "cveId": "CVE-2025-40016",
  "url": "https://patchblox.com/security/cve/CVE-2025-40016",
  "summary": "CVE-2025-40016 is fixed in 24 products on 1 platform, first by DEBIAN-CVE-2025-40016, released October 20, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID  Per UVC 1.1\u002B specification 3.7.2, units and terminals must have a non-zero unique ID.  \u0060\u0060\u0060 Each Unit and Terminal within the video function is assigned a unique identification number, the Unit ID (UID) or Terminal ID (TID), contained in the bUnitID or bTerminalID field of the descriptor. The value 0x00 is reserved for undefined ID, \u0060\u0060\u0060  If we add a new entity with id 0 or a duplicated ID, it will be marked as UVC_INVALID_ENTITY_ID.  In a previous attempt commit 3dd075fe8ebb (\u0022media: uvcvideo: Require entities to have a non-zero unique ID\u0022), we ignored all the invalid units, this broke a lot of non-compatible cameras. Hopefully we are more lucky this time.  This also prevents some syzkaller reproducers from triggering warnings due to a chain of entities referring to themselves. In one particular case, an Output Unit is connected to an Input Unit, both with the same ID of 1. But when looking up for the source ID of the Output Unit, that same entity is found instead of the input entity, which leads to such warnings.  In another case, a backward chain was considered finished as the source ID was 0. Later on, that entity was found, but its pads were not valid.  Here is a sample stack trace for one of those cases.  [   20.650953] usb 1-1: new high-speed USB device number 2 using dummy_hcd [   20.830206] usb 1-1: Using ep0 maxpacket: 8 [   20.833501] usb 1-1: config 0 descriptor?? [   21.038518] usb 1-1: string descriptor 0 read error: -71 [   21.038893] usb 1-1: Found UVC 0.00 device \u003Cunnamed\u003E (2833:0201) [   21.039299] uvcvideo 1-1:0.0: Entity type for entity Output 1 was not initialized! [   21.041583] uvcvideo 1-1:0.0: Entity type for entity Input 1 was not initialized! [   21.042218] ------------[ cut here ]------------ [   21.042536] WARNING: CPU: 0 PID: 9 at drivers/media/mc/mc-entity.c:1147 media_create_pad_link\u002B0x2c4/0x2e0 [   21.043195] Modules linked in: [   21.043535] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc7-00030-g3480e43aeccf #444 [   21.044101] Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS 1.15.0-1 04/01/2014 [   21.044639] Workqueue: usb_hub_wq hub_event [   21.045100] RIP: 0010:media_create_pad_link\u002B0x2c4/0x2e0 [   21.045508] Code: fe e8 20 01 00 00 b8 f4 ff ff ff 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 0f 0b eb e9 0f 0b eb 0a 0f 0b eb 06 \u003C0f\u003E 0b eb 02 0f 0b b8 ea ff ff ff eb d4 66 2e 0f 1f 84 00 00 00 00 [   21.046801] RSP: 0018:ffffc9000004b318 EFLAGS: 00010246 [   21.047227] RAX: ffff888004e5d458 RBX: 0000000000000000 RCX: ffffffff818fccf1 [   21.047719] RDX: 000000000000007b RSI: 0000000000000000 RDI: ffff888004313290 [   21.048241] RBP: ffff888004313290 R08: 0001ffffffffffff R09: 0000000000000000 [   21.048701] R10: 0000000000000013 R11: 0001888004313290 R12: 0000000000000003 [   21.049138] R13: ffff888004313080 R14: ffff888004313080 R15: 0000000000000000 [   21.049648] FS:  0000000000000000(0000) GS:ffff88803ec00000(0000) knlGS:0000000000000000 [   21.050271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [   21.050688] CR2: 0000592cc27635b0 CR3: 000000000431c000 CR4: 0000000000750ef0 [   21.051136] PKRU: 55555554 [   21.051331] Call Trace: [   21.051480]  \u003CTASK\u003E [   21.051611]  ? __warn\u002B0xc4/0x210 [   21.051861]  ? media_create_pad_link\u002B0x2c4/0x2e0 [   21.052252]  ? report_bug\u002B0x11b/0x1a0 [   21.052540]  ? trace_hardirqs_on\u002B0x31/0x40 [   21.052901]  ? handle_bug\u002B0x3d/0x70 [   21.053197]  ? exc_invalid_op\u002B0x1a/0x50 [   21.053511]  ? asm_exc_invalid_op\u002B0x1a/0x20 [   21.053924]  ? media_create_pad_link\u002B0x91/0x2e0 [   21.054364]  ? media_create_pad_link\u002B0x2c4/0x2e0 [   21.054834]  ? media_create_pad_link\u002B0x91/0x2e0 [   21.055131]  ? _raw_spin_unlock\u002B0x1e/0x40 [   21.055441]  ? __v4l2_device_register_subdev\u002B0x202/0x210 [   21.055837]  uvc_mc_register_entities\u002B0x358/0x400 [   21.056144]  uvc_register_chains\u002B0x1 ---truncated---",
  "published": "2025-10-20T16:15:38Z",
  "severity": "Moderate",
  "cvss": 6.2,
  "epss": 0.00253,
  "epssPercentile": 0.16866,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40016",
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.55.1",
      "fix": "SUSE-SU-2025:4128-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4128-1",
      "released": "2025-11-18T13:51:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.55.1",
      "fix": "SUSE-SU-2025:4128-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4128-1",
      "released": "2025-11-18T13:51:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1.150600.12.34.2",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1.150600.12.34.2",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1.150700.17.15.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_17",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.3.1",
      "fix": "SUSE-SU-2025:4301-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4301-1",
      "released": "2025-11-28T12:59:04Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_17",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.5.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_6",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "fix": "SUSE-SU-2025:4141-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4141-1",
      "released": "2025-11-19T14:06:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_6",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.58.1",
      "fix": "SUSE-SU-2025:4301-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4301-1",
      "released": "2025-11-28T12:59:04Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.58.1",
      "fix": "SUSE-SU-2025:4301-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4301-1",
      "released": "2025-11-28T12:59:04Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.55.1",
      "fix": "SUSE-SU-2025:4128-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4128-1",
      "released": "2025-11-18T13:51:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.55.1",
      "fix": "SUSE-SU-2025:4128-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4128-1",
      "released": "2025-11-18T13:51:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.58.1",
      "fix": "SUSE-SU-2025:4301-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4301-1",
      "released": "2025-11-28T12:59:04Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.55.1",
      "fix": "SUSE-SU-2025:4128-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4128-1",
      "released": "2025-11-18T13:51:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.55.1",
      "fix": "SUSE-SU-2025:4128-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4128-1",
      "released": "2025-11-18T13:51:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.58.1",
      "fix": "SUSE-SU-2025:4301-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4301-1",
      "released": "2025-11-28T12:59:04Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.78.1",
      "fix": "SUSE-SU-2025:4140-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1",
      "released": "2025-11-19T13:15:27Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.170-1",
      "fix": "DEBIAN-CVE-2025-40016",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40016",
      "released": "2025-10-20T16:15:38Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.57-1",
      "fix": "DEBIAN-CVE-2025-40016",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40016",
      "released": "2025-10-20T16:15:38Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.16.11-1",
      "fix": "DEBIAN-CVE-2025-40016",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40016",
      "released": "2025-10-20T16:15:38Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}