# ALAS2023-2025-1080: Security update for 22 packages

ALAS2023-2025-1080, released July 3, 2025, fixes 90 CVEs across 22 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-1080
- Platform: Linux
- Released: Jul 3, 2025
- Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV))
- CVEs: 90, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-1080.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel-libbpf-debuginfo.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-livepatch-6.12.35-55.103](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.35-55.103.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |
| [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 6.12.35-55.103.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV |
| [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 |  |
| [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 |  |
| [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 |  |
| [CVE-2025-38001](https://patchblox.com/security/data/cve/CVE-2025-38001.md) | High | net_sched: hfsc: Address reentrant enqueue adding class to eltree twice | 7.8 | 0.0056 |  |
| [CVE-2025-38146](https://patchblox.com/security/data/cve/CVE-2025-38146.md) | High | net: openvswitch: Fix the dead loop of MPLS parse | 7.8 | 0.0049 |  |
| [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0047 |  |
| [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 |  |
| [CVE-2025-38201](https://patchblox.com/security/data/cve/CVE-2025-38201.md) | High | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX | 7.8 | 0.0024 |  |
| [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 |  |
| [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 |  |
| [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 |  |
| [CVE-2025-38298](https://patchblox.com/security/data/cve/CVE-2025-38298.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/skx_common: Fix general protection fault  A... | 7.8 | 0.0023 |  |
| [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 |  |
| [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 |  |
| [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 |  |
| [CVE-2025-38324](https://patchblox.com/security/data/cve/CVE-2025-38324.md) | High | mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). | 7.0 | 0.0022 |  |
| [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 |  |
| [CVE-2025-38100](https://patchblox.com/security/data/cve/CVE-2025-38100.md) | High | x86/iopl: Cure TIF_IO_BITMAP inconsistencies | 7.0 | 0.0022 |  |
| [CVE-2025-38280](https://patchblox.com/security/data/cve/CVE-2025-38280.md) | High | bpf: Avoid __bpf_prog_ret0_warn when jit fails | 7.8 | 0.0021 |  |
| [CVE-2025-38267](https://patchblox.com/security/data/cve/CVE-2025-38267.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 |  |
| [CVE-2025-38320](https://patchblox.com/security/data/cve/CVE-2025-38320.md) | High | arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() | 7.1 | 0.0021 |  |
| [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 |  |
| [CVE-2025-22112](https://patchblox.com/security/data/cve/CVE-2025-22112.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.   The following security bu... | 7.1 | 0.0021 |  |
| [CVE-2025-38285](https://patchblox.com/security/data/cve/CVE-2025-38285.md) | High | bpf: Fix WARN() in get_bpf_raw_tp_regs | 7.1 | 0.0021 |  |
| [CVE-2025-38192](https://patchblox.com/security/data/cve/CVE-2025-38192.md) | High | net: clear the dst when changing skb protocol | 7.0 | 0.0021 |  |
| [CVE-2025-38101](https://patchblox.com/security/data/cve/CVE-2025-38101.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Fix buffer locking in ring_buffer_s... | 7.8 | 0.0020 |  |
| [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 |  |
| [CVE-2025-38346](https://patchblox.com/security/data/cve/CVE-2025-38346.md) | High | ftrace: Fix UAF when lookup kallsym after ftrace disabled | 7.8 | 0.0020 |  |
| [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 |  |
| [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 |  |
| [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 |  |
| [CVE-2025-38270](https://patchblox.com/security/data/cve/CVE-2025-38270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: drv: netdevsim: don't napi_complete() from... | 7.8 | 0.0020 |  |
| [CVE-2025-38141](https://patchblox.com/security/data/cve/CVE-2025-38141.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.8 | 0.0020 |  |
| [CVE-2025-38288](https://patchblox.com/security/data/cve/CVE-2025-38288.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.8 | 0.0020 |  |
| [CVE-2025-38106](https://patchblox.com/security/data/cve/CVE-2025-38106.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 |  |
| [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 |  |
| [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 |  |
| [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 |  |
| [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 |  |
| [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.8 | 0.0019 |  |
| [CVE-2025-38134](https://patchblox.com/security/data/cve/CVE-2025-38134.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: acpi: Prevent null pointer dereference in u... | 7.0 | 0.0019 |  |
| [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 |  |
| [CVE-2025-38427](https://patchblox.com/security/data/cve/CVE-2025-38427.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.0 | 0.0019 |  |
| [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 |  |
| [CVE-2025-38162](https://patchblox.com/security/data/cve/CVE-2025-38162.md) | High | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 7.0 | 0.0019 |  |
| [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 |  |
| [CVE-2025-38208](https://patchblox.com/security/data/cve/CVE-2025-38208.md) | High | smb: client: add NULL check in automount_fullpath | 7.0 | 0.0018 |  |
| [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 |  |
| [CVE-2025-38210](https://patchblox.com/security/data/cve/CVE-2025-38210.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.0 | 0.0018 |  |
| [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 |  |
| [CVE-2025-38082](https://patchblox.com/security/data/cve/CVE-2025-38082.md) | High | gpio: virtuser: fix potential out-of-bound write | 7.8 | 0.0018 |  |
| [CVE-2025-38172](https://patchblox.com/security/data/cve/CVE-2025-38172.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2025-38216](https://patchblox.com/security/data/cve/CVE-2025-38216.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.   The following security bu... | 7.8 | 0.0018 |  |
| [CVE-2025-38169](https://patchblox.com/security/data/cve/CVE-2025-38169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64/fpsimd: Avoid clobbering kernel FPSIMD sta... | 7.0 | 0.0018 |  |
| [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 |  |
| [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 |  |
| [CVE-2025-38170](https://patchblox.com/security/data/cve/CVE-2025-38170.md) | High | arm64/fpsimd: Discard stale CPU state when handling SME traps | 7.0 | 0.0017 |  |
| [CVE-2025-38310](https://patchblox.com/security/data/cve/CVE-2025-38310.md) | High | seg6: Fix validation of nexthop addresses | 7.1 | 0.0017 |  |
| [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 |  |
| [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 |  |
| [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 |  |
| [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 |  |
| [CVE-2025-38083](https://patchblox.com/security/data/cve/CVE-2025-38083.md) | High | net_sched: prio: fix a race in prio_tune() | 7.0 | 0.0016 |  |
| [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 |  |
| [CVE-2025-38302](https://patchblox.com/security/data/cve/CVE-2025-38302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  block: don't use submit_bio_noacct_nocheck in bl... | 7.0 | 0.0015 |  |
| [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0052 |  |
| [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 |  |
| [CVE-2025-38166](https://patchblox.com/security/data/cve/CVE-2025-38166.md) | Routine | bpf: fix ktls panic with sockmap | 5.5 | 0.0020 |  |
| [CVE-2025-38321](https://patchblox.com/security/data/cve/CVE-2025-38321.md) | Routine | smb: Log an error when close_all_cached_dirs fails | 5.5 | 0.0020 |  |
| [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 |  |
| [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 |  |
| [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 |  |
| [CVE-2025-22119](https://patchblox.com/security/data/cve/CVE-2025-22119.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 5.5 | 0.0019 |  |
| [CVE-2025-23137](https://patchblox.com/security/data/cve/CVE-2025-23137.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:  The following security issues we... | 5.5 | 0.0019 |  |
| [CVE-2025-38282](https://patchblox.com/security/data/cve/CVE-2025-38282.md) | Routine | kernfs: Relax constraint in draining guard | 5.5 | 0.0019 |  |
| [CVE-2025-22128](https://patchblox.com/security/data/cve/CVE-2025-22128.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.   The following security bu... | 5.5 | 0.0019 |  |
| [CVE-2025-38265](https://patchblox.com/security/data/cve/CVE-2025-38265.md) | Routine | serial: jsm: fix NPE during jsm_uart_port_init | 5.5 | 0.0019 |  |
| [CVE-2025-22122](https://patchblox.com/security/data/cve/CVE-2025-22122.md) | Routine | kernel-uki-virt-addons: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: v... | 5.5 | 0.0019 |  |
| [CVE-2025-38269](https://patchblox.com/security/data/cve/CVE-2025-38269.md) | Routine | btrfs: exit after state insertion failure at btrfs_convert_extent_bit() | 5.5 | 0.0019 |  |
| [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 |  |
| [CVE-2025-38202](https://patchblox.com/security/data/cve/CVE-2025-38202.md) | Routine | bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() | 5.5 | 0.0018 |  |
| [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0018 |  |
| [CVE-2025-38297](https://patchblox.com/security/data/cve/CVE-2025-38297.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  PM: EM: Fix potential division-by-zero error in... | 5.5 | 0.0017 |  |
| [CVE-2025-38232](https://patchblox.com/security/data/cve/CVE-2025-38232.md) | Routine | NFSD: fix race between nfsd registration and exports_proc | 4.7 | 0.0017 |  |
| [CVE-2025-38167](https://patchblox.com/security/data/cve/CVE-2025-38167.md) | Routine | fs/ntfs3: handle hdr_first_de() return value | 5.5 | 0.0017 |  |
| [CVE-2025-38223](https://patchblox.com/security/data/cve/CVE-2025-38223.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: avoid kernel BUG for encrypted inode with... | 5.5 | 0.0011 |  |
| [CVE-2025-38213](https://patchblox.com/security/data/cve/CVE-2025-38213.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |

---

Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.