{
  "fix": "ALAS2023-2025-1080",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1080",
  "summary": "ALAS2023-2025-1080, released July 3, 2025, fixes 90 CVEs across 22 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2025-07-03T20:38:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-38352, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 90,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01357,
  "maxCvss": 7.9,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1080.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.35-55.103",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.35-55.103",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.12.35-55.103.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-38352",
      "url": "https://patchblox.com/security/cve/CVE-2025-38352",
      "title": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01357,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38430",
      "url": "https://patchblox.com/security/cve/CVE-2025-38430",
      "title": "nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00593,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38181",
      "url": "https://patchblox.com/security/cve/CVE-2025-38181",
      "title": "calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38089",
      "url": "https://patchblox.com/security/cve/CVE-2025-38089",
      "title": "sunrpc: handle SVC_GARBAGE during svc auth processing as auth error",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.0056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38001",
      "url": "https://patchblox.com/security/cve/CVE-2025-38001",
      "title": "net_sched: hfsc: Address reentrant enqueue adding class to eltree twice",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00555,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38146",
      "url": "https://patchblox.com/security/cve/CVE-2025-38146",
      "title": "net: openvswitch: Fix the dead loop of MPLS parse",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38124",
      "url": "https://patchblox.com/security/cve/CVE-2025-38124",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 7,
      "epss": 0.0047,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38211",
      "url": "https://patchblox.com/security/cve/CVE-2025-38211",
      "title": "RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38201",
      "url": "https://patchblox.com/security/cve/CVE-2025-38201",
      "title": "netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38115",
      "url": "https://patchblox.com/security/cve/CVE-2025-38115",
      "title": "net_sched: sch_sfq: fix a potential crash on gso_skb handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38103",
      "url": "https://patchblox.com/security/cve/CVE-2025-38103",
      "title": "HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38415",
      "url": "https://patchblox.com/security/cve/CVE-2025-38415",
      "title": "Squashfs: check return result of sb_min_blocksize",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38147",
      "url": "https://patchblox.com/security/cve/CVE-2025-38147",
      "title": "calipso: Don\u0027t call calipso functions for AF_INET sk.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38298",
      "url": "https://patchblox.com/security/cve/CVE-2025-38298",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/skx_common: Fix general protection fault  A...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38111",
      "url": "https://patchblox.com/security/cve/CVE-2025-38111",
      "title": "net/mdiobus: Fix potential out-of-bounds read/write access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38498",
      "url": "https://patchblox.com/security/cve/CVE-2025-38498",
      "title": "do_change_type(): refuse to operate on unmounted/not ours mounts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.9,
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38084",
      "url": "https://patchblox.com/security/cve/CVE-2025-38084",
      "title": "mm/hugetlb: unshare page tables during VMA split, not before",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38324",
      "url": "https://patchblox.com/security/cve/CVE-2025-38324",
      "title": "mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().",
      "priority": "High",
      "severity": "Low",
      "cvss": 7,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38424",
      "url": "https://patchblox.com/security/cve/CVE-2025-38424",
      "title": "perf: Fix sample vs do_exit()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38100",
      "url": "https://patchblox.com/security/cve/CVE-2025-38100",
      "title": "x86/iopl: Cure TIF_IO_BITMAP inconsistencies",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38280",
      "url": "https://patchblox.com/security/cve/CVE-2025-38280",
      "title": "bpf: Avoid __bpf_prog_ret0_warn when jit fails",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38267",
      "url": "https://patchblox.com/security/cve/CVE-2025-38267",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38320",
      "url": "https://patchblox.com/security/cve/CVE-2025-38320",
      "title": "arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38193",
      "url": "https://patchblox.com/security/cve/CVE-2025-38193",
      "title": "net_sched: sch_sfq: reject invalid perturb period",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22112",
      "url": "https://patchblox.com/security/cve/CVE-2025-22112",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38285",
      "url": "https://patchblox.com/security/cve/CVE-2025-38285",
      "title": "bpf: Fix WARN() in get_bpf_raw_tp_regs",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38192",
      "url": "https://patchblox.com/security/cve/CVE-2025-38192",
      "title": "net: clear the dst when changing skb protocol",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38101",
      "url": "https://patchblox.com/security/cve/CVE-2025-38101",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Fix buffer locking in ring_buffer_s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38212",
      "url": "https://patchblox.com/security/cve/CVE-2025-38212",
      "title": "ipc: fix to protect IPCS lookups using RCU",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38346",
      "url": "https://patchblox.com/security/cve/CVE-2025-38346",
      "title": "ftrace: Fix UAF when lookup kallsym after ftrace disabled",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38110",
      "url": "https://patchblox.com/security/cve/CVE-2025-38110",
      "title": "net/mdiobus: Fix potential out-of-bounds clause 45 read/write access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38129",
      "url": "https://patchblox.com/security/cve/CVE-2025-38129",
      "title": "page_pool: Fix use-after-free in page_pool_recycle_in_ring",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38109",
      "url": "https://patchblox.com/security/cve/CVE-2025-38109",
      "title": "net/mlx5: Fix ECVF vports unload on shutdown flow",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38270",
      "url": "https://patchblox.com/security/cve/CVE-2025-38270",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: drv: netdevsim: don\u0027t napi_complete() from...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38141",
      "url": "https://patchblox.com/security/cve/CVE-2025-38141",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38288",
      "url": "https://patchblox.com/security/cve/CVE-2025-38288",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38106",
      "url": "https://patchblox.com/security/cve/CVE-2025-38106",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38161",
      "url": "https://patchblox.com/security/cve/CVE-2025-38161",
      "title": "RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38113",
      "url": "https://patchblox.com/security/cve/CVE-2025-38113",
      "title": "ACPI: CPPC: Fix NULL pointer dereference when nosmp is used",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38198",
      "url": "https://patchblox.com/security/cve/CVE-2025-38198",
      "title": "fbcon: Make sure modelist not set on unregistered console",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38342",
      "url": "https://patchblox.com/security/cve/CVE-2025-38342",
      "title": "software node: Correct a OOB check in software_node_get_reference_args()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38214",
      "url": "https://patchblox.com/security/cve/CVE-2025-38214",
      "title": "fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38154",
      "url": "https://patchblox.com/security/cve/CVE-2025-38154",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38134",
      "url": "https://patchblox.com/security/cve/CVE-2025-38134",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: acpi: Prevent null pointer dereference in u...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38231",
      "url": "https://patchblox.com/security/cve/CVE-2025-38231",
      "title": "nfsd: Initialize ssc before laundromat_work to prevent NULL dereference",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38427",
      "url": "https://patchblox.com/security/cve/CVE-2025-38427",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38312",
      "url": "https://patchblox.com/security/cve/CVE-2025-38312",
      "title": "fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38162",
      "url": "https://patchblox.com/security/cve/CVE-2025-38162",
      "title": "netfilter: nft_set_pipapo: prevent overflow in lookup table allocation",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38338",
      "url": "https://patchblox.com/security/cve/CVE-2025-38338",
      "title": "fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38208",
      "url": "https://patchblox.com/security/cve/CVE-2025-38208",
      "title": "smb: client: add NULL check in automount_fullpath",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38149",
      "url": "https://patchblox.com/security/cve/CVE-2025-38149",
      "title": "net: phy: clear phydev-\u003Edevlink when the link is deleted",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38210",
      "url": "https://patchblox.com/security/cve/CVE-2025-38210",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38305",
      "url": "https://patchblox.com/security/cve/CVE-2025-38305",
      "title": "ptp: remove ptp-\u003En_vclocks check logic in ptp_vclock_in_use()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38082",
      "url": "https://patchblox.com/security/cve/CVE-2025-38082",
      "title": "gpio: virtuser: fix potential out-of-bound write",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38172",
      "url": "https://patchblox.com/security/cve/CVE-2025-38172",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38216",
      "url": "https://patchblox.com/security/cve/CVE-2025-38216",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38169",
      "url": "https://patchblox.com/security/cve/CVE-2025-38169",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64/fpsimd: Avoid clobbering kernel FPSIMD sta...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38215",
      "url": "https://patchblox.com/security/cve/CVE-2025-38215",
      "title": "fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38220",
      "url": "https://patchblox.com/security/cve/CVE-2025-38220",
      "title": "ext4: only dirty folios when data journaling regular files",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38170",
      "url": "https://patchblox.com/security/cve/CVE-2025-38170",
      "title": "arm64/fpsimd: Discard stale CPU state when handling SME traps",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38310",
      "url": "https://patchblox.com/security/cve/CVE-2025-38310",
      "title": "seg6: Fix validation of nexthop addresses",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38102",
      "url": "https://patchblox.com/security/cve/CVE-2025-38102",
      "title": "VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38108",
      "url": "https://patchblox.com/security/cve/CVE-2025-38108",
      "title": "net_sched: red: fix a race in __red_change()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38085",
      "url": "https://patchblox.com/security/cve/CVE-2025-38085",
      "title": "mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38107",
      "url": "https://patchblox.com/security/cve/CVE-2025-38107",
      "title": "net_sched: ets: fix a race in ets_qdisc_change()",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38083",
      "url": "https://patchblox.com/security/cve/CVE-2025-38083",
      "title": "net_sched: prio: fix a race in prio_tune()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38112",
      "url": "https://patchblox.com/security/cve/CVE-2025-38112",
      "title": "net: Fix TOCTOU issue in sk_is_readable()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38302",
      "url": "https://patchblox.com/security/cve/CVE-2025-38302",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  block: don\u0027t use submit_bio_noacct_nocheck in bl...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38120",
      "url": "https://patchblox.com/security/cve/CVE-2025-38120",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38165",
      "url": "https://patchblox.com/security/cve/CVE-2025-38165",
      "title": "bpf, sockmap: Fix panic when calling skb_linearize",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38166",
      "url": "https://patchblox.com/security/cve/CVE-2025-38166",
      "title": "bpf: fix ktls panic with sockmap",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38321",
      "url": "https://patchblox.com/security/cve/CVE-2025-38321",
      "title": "smb: Log an error when close_all_cached_dirs fails",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38345",
      "url": "https://patchblox.com/security/cve/CVE-2025-38345",
      "title": "ACPICA: fix acpi operand cache leak in dswstate.c",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38337",
      "url": "https://patchblox.com/security/cve/CVE-2025-38337",
      "title": "jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.3,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38344",
      "url": "https://patchblox.com/security/cve/CVE-2025-38344",
      "title": "ACPICA: fix acpi parse and parseext cache leaks",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.2,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22119",
      "url": "https://patchblox.com/security/cve/CVE-2025-22119",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: c...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-23137",
      "url": "https://patchblox.com/security/cve/CVE-2025-23137",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues we...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38282",
      "url": "https://patchblox.com/security/cve/CVE-2025-38282",
      "title": "kernfs: Relax constraint in draining guard",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22128",
      "url": "https://patchblox.com/security/cve/CVE-2025-22128",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38265",
      "url": "https://patchblox.com/security/cve/CVE-2025-38265",
      "title": "serial: jsm: fix NPE during jsm_uart_port_init",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22122",
      "url": "https://patchblox.com/security/cve/CVE-2025-22122",
      "title": "kernel-uki-virt-addons: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: v...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38269",
      "url": "https://patchblox.com/security/cve/CVE-2025-38269",
      "title": "btrfs: exit after state insertion failure at btrfs_convert_extent_bit()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38222",
      "url": "https://patchblox.com/security/cve/CVE-2025-38222",
      "title": "ext4: inline: fix len overflow in ext4_prepare_inline_data",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38202",
      "url": "https://patchblox.com/security/cve/CVE-2025-38202",
      "title": "bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38151",
      "url": "https://patchblox.com/security/cve/CVE-2025-38151",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38297",
      "url": "https://patchblox.com/security/cve/CVE-2025-38297",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PM: EM: Fix potential division-by-zero error in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38232",
      "url": "https://patchblox.com/security/cve/CVE-2025-38232",
      "title": "NFSD: fix race between nfsd registration and exports_proc",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38167",
      "url": "https://patchblox.com/security/cve/CVE-2025-38167",
      "title": "fs/ntfs3: handle hdr_first_de() return value",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38223",
      "url": "https://patchblox.com/security/cve/CVE-2025-38223",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: avoid kernel BUG for encrypted inode with...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38213",
      "url": "https://patchblox.com/security/cve/CVE-2025-38213",
      "title": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}