{
  "fix": "ALAS2023-2025-1186",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1186",
  "summary": "ALAS2023-2025-1186, released September 10, 2025, fixes 54 CVEs across 22 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2025-09-10T05:43:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-39682, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 54,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03312,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1186.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.150-174.273",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.150-174.273",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.150-174.273.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39682",
      "url": "https://patchblox.com/security/cve/CVE-2025-39682",
      "title": "tls: fix handling of zero-length records on the rx_list",
      "priority": "Patch now",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.03312,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37750",
      "url": "https://patchblox.com/security/cve/CVE-2025-37750",
      "title": "smb: client: fix UAF in decryption with multichannel",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39702",
      "url": "https://patchblox.com/security/cve/CVE-2025-39702",
      "title": "ipv6: sr: Fix MAC comparison to be constant-time",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38676",
      "url": "https://patchblox.com/security/cve/CVE-2025-38676",
      "title": "iommu/amd: Avoid stack buffer overflow from kernel cmdline",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38724",
      "url": "https://patchblox.com/security/cve/CVE-2025-38724",
      "title": "nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38708",
      "url": "https://patchblox.com/security/cve/CVE-2025-38708",
      "title": "drbd: add missing kref_get in handle_write_conflicts",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38728",
      "url": "https://patchblox.com/security/cve/CVE-2025-38728",
      "title": "smb3: fix for slab out of bounds on mount to ksmbd",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00356,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38552",
      "url": "https://patchblox.com/security/cve/CVE-2025-38552",
      "title": "mptcp: plug races between subflow fail and subflow creation",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00346,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58240",
      "url": "https://patchblox.com/security/cve/CVE-2024-58240",
      "title": "tls: separate no-async decryption request handling from async",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00342,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39673",
      "url": "https://patchblox.com/security/cve/CVE-2025-39673",
      "title": "ppp: fix race conditions in ppp_fill_forward_path",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39798",
      "url": "https://patchblox.com/security/cve/CVE-2025-39798",
      "title": "NFS: Fix the setting of capabilities when automounting a new filesystem",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38491",
      "url": "https://patchblox.com/security/cve/CVE-2025-38491",
      "title": "mptcp: make fallback action and fallback decision atomic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39806",
      "url": "https://patchblox.com/security/cve/CVE-2025-39806",
      "title": "kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: H...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38702",
      "url": "https://patchblox.com/security/cve/CVE-2025-38702",
      "title": "fbdev: fix potential buffer overflow in do_register_framebuffer()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38614",
      "url": "https://patchblox.com/security/cve/CVE-2025-38614",
      "title": "eventpoll: Fix semi-unbounded recursion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39691",
      "url": "https://patchblox.com/security/cve/CVE-2025-39691",
      "title": "fs/buffer: fix use-after-free when call bh_read() helper",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39689",
      "url": "https://patchblox.com/security/cve/CVE-2025-39689",
      "title": "ftrace: Also allocate and copy hash for reading of filter files",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39683",
      "url": "https://patchblox.com/security/cve/CVE-2025-39683",
      "title": "tracing: Limit access to parser-\u003Ebuffer when trace_get_user failed",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38701",
      "url": "https://patchblox.com/security/cve/CVE-2025-38701",
      "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38685",
      "url": "https://patchblox.com/security/cve/CVE-2025-38685",
      "title": "fbdev: Fix vmalloc out-of-bounds write in fast_imageblit",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39766",
      "url": "https://patchblox.com/security/cve/CVE-2025-39766",
      "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38684",
      "url": "https://patchblox.com/security/cve/CVE-2025-38684",
      "title": "net/sched: ets: use old \u0027nbands\u0027 while purging unused classes",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38700",
      "url": "https://patchblox.com/security/cve/CVE-2025-38700",
      "title": "scsi: libiscsi: Initialize iscsi_conn-\u003Edd_data only if memory is allocated",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38732",
      "url": "https://patchblox.com/security/cve/CVE-2025-38732",
      "title": "netfilter: nf_reject: don\u0027t leak dst refcount for loopback packets",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39823",
      "url": "https://patchblox.com/security/cve/CVE-2025-39823",
      "title": "KVM: x86: use array_index_nospec with indices that come from guest",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38707",
      "url": "https://patchblox.com/security/cve/CVE-2025-38707",
      "title": "fs/ntfs3: Add sanity check for file name",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39760",
      "url": "https://patchblox.com/security/cve/CVE-2025-39760",
      "title": "usb: core: config: Prevent OOB read in SS endpoint companion parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39738",
      "url": "https://patchblox.com/security/cve/CVE-2025-39738",
      "title": "btrfs: do not allow relocation of partially dropped subvolumes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39749",
      "url": "https://patchblox.com/security/cve/CVE-2025-39749",
      "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39835",
      "url": "https://patchblox.com/security/cve/CVE-2025-39835",
      "title": "xfs: do not propagate ENODATA disk errors into xattr code",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39718",
      "url": "https://patchblox.com/security/cve/CVE-2025-39718",
      "title": "vsock/virtio: Validate length in packet header before skb_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39783",
      "url": "https://patchblox.com/security/cve/CVE-2025-39783",
      "title": "PCI: endpoint: Fix configfs group list head handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39824",
      "url": "https://patchblox.com/security/cve/CVE-2025-39824",
      "title": "HID: asus: fix UAF via HID_CLAIMED_INPUT validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39817",
      "url": "https://patchblox.com/security/cve/CVE-2025-39817",
      "title": "efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38670",
      "url": "https://patchblox.com/security/cve/CVE-2025-38670",
      "title": "arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39697",
      "url": "https://patchblox.com/security/cve/CVE-2025-39697",
      "title": "NFS: Fix a race when updating an existing write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39819",
      "url": "https://patchblox.com/security/cve/CVE-2025-39819",
      "title": "fs/smb: Fix inconsistent refcnt update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39825",
      "url": "https://patchblox.com/security/cve/CVE-2025-39825",
      "title": "smb: client: fix race with concurrent opens in rename(2)",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39759",
      "url": "https://patchblox.com/security/cve/CVE-2025-39759",
      "title": "btrfs: qgroup: fix race between quota disable and quota rescan ioctl",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39770",
      "url": "https://patchblox.com/security/cve/CVE-2025-39770",
      "title": "net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.7,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38691",
      "url": "https://patchblox.com/security/cve/CVE-2025-38691",
      "title": "pNFS: Fix uninited ptr deref in block/scsi layout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.2,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38683",
      "url": "https://patchblox.com/security/cve/CVE-2025-38683",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nhv_netvsc: Fix panic during namespace deletion wi...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39681",
      "url": "https://patchblox.com/security/cve/CVE-2025-39681",
      "title": "x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39756",
      "url": "https://patchblox.com/security/cve/CVE-2025-39756",
      "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39724",
      "url": "https://patchblox.com/security/cve/CVE-2025-39724",
      "title": "serial: 8250: fix panic due to PSLVERR",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38721",
      "url": "https://patchblox.com/security/cve/CVE-2025-38721",
      "title": "netfilter: ctnetlink: fix refcount leak on table dump",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39812",
      "url": "https://patchblox.com/security/cve/CVE-2025-39812",
      "title": "sctp: initialize more fields in sctp_v6_from_sk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39795",
      "url": "https://patchblox.com/security/cve/CVE-2025-39795",
      "title": "block: avoid possible overflow for chunk_sectors check in blk_stack_limits()",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39800",
      "url": "https://patchblox.com/security/cve/CVE-2025-39800",
      "title": "btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38681",
      "url": "https://patchblox.com/security/cve/CVE-2025-38681",
      "title": "mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39736",
      "url": "https://patchblox.com/security/cve/CVE-2025-39736",
      "title": "mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39782",
      "url": "https://patchblox.com/security/cve/CVE-2025-39782",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: prevent softlockup in jbd2_log_do_checkpoi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39773",
      "url": "https://patchblox.com/security/cve/CVE-2025-39773",
      "title": "net: bridge: fix soft lockup in br_multicast_query_expired()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39813",
      "url": "https://patchblox.com/security/cve/CVE-2025-39813",
      "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}