{
  "fix": "ALAS2023-2025-1208",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1208",
  "summary": "ALAS2023-2025-1208, released September 23, 2025, fixes 122 CVEs across 22 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2025-09-23T23:15:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-39682, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 122,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03312,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1208.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.46-66.121",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.46-66.121",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.46-66.121.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39682",
      "url": "https://patchblox.com/security/cve/CVE-2025-39682",
      "title": "tls: fix handling of zero-length records on the rx_list",
      "priority": "Patch now",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.03312,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39898",
      "url": "https://patchblox.com/security/cve/CVE-2025-39898",
      "title": "e1000e: fix heap overflow in e1000_set_eeprom",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38566",
      "url": "https://patchblox.com/security/cve/CVE-2025-38566",
      "title": "sunrpc: fix handling of server side tls alerts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00672,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39702",
      "url": "https://patchblox.com/security/cve/CVE-2025-39702",
      "title": "ipv6: sr: Fix MAC comparison to be constant-time",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38563",
      "url": "https://patchblox.com/security/cve/CVE-2025-38563",
      "title": "perf/core: Prevent VMA split of buffer mappings",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38608",
      "url": "https://patchblox.com/security/cve/CVE-2025-38608",
      "title": "bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38590",
      "url": "https://patchblox.com/security/cve/CVE-2025-38590",
      "title": "net/mlx5e: Remove skb secpath if xfrm state is not found",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00436,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38676",
      "url": "https://patchblox.com/security/cve/CVE-2025-38676",
      "title": "iommu/amd: Avoid stack buffer overflow from kernel cmdline",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38617",
      "url": "https://patchblox.com/security/cve/CVE-2025-38617",
      "title": "net/packet: fix a race in packet_set_ring() and packet_notifier()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38724",
      "url": "https://patchblox.com/security/cve/CVE-2025-38724",
      "title": "nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38660",
      "url": "https://patchblox.com/security/cve/CVE-2025-38660",
      "title": "[ceph] parse_longname(): strrchr() expects NUL-terminated string",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39851",
      "url": "https://patchblox.com/security/cve/CVE-2025-39851",
      "title": "vxlan: Fix NPD when refreshing an FDB entry with a nexthop object",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38708",
      "url": "https://patchblox.com/security/cve/CVE-2025-38708",
      "title": "drbd: add missing kref_get in handle_write_conflicts",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38737",
      "url": "https://patchblox.com/security/cve/CVE-2025-38737",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncifs: Fix oops due to uninitialised variable\nFix...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38571",
      "url": "https://patchblox.com/security/cve/CVE-2025-38571",
      "title": "sunrpc: fix client side handling of tls alerts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38728",
      "url": "https://patchblox.com/security/cve/CVE-2025-38728",
      "title": "smb3: fix for slab out of bounds on mount to ksmbd",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00356,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39894",
      "url": "https://patchblox.com/security/cve/CVE-2025-39894",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: br_netfilter: do not check confirmed...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39866",
      "url": "https://patchblox.com/security/cve/CVE-2025-39866",
      "title": "fs: writeback: fix use-after-free in __mark_inode_dirty()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39798",
      "url": "https://patchblox.com/security/cve/CVE-2025-39798",
      "title": "NFS: Fix the setting of capabilities when automounting a new filesystem",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22113",
      "url": "https://patchblox.com/security/cve/CVE-2025-22113",
      "title": "ext4: avoid journaling sb update on error if journal is destroying",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39723",
      "url": "https://patchblox.com/security/cve/CVE-2025-39723",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix unbuffered write error handling  If a...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39806",
      "url": "https://patchblox.com/security/cve/CVE-2025-39806",
      "title": "kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: H...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39677",
      "url": "https://patchblox.com/security/cve/CVE-2025-39677",
      "title": "net/sched: Fix backlog accounting in qdisc_dequeue_internal",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38616",
      "url": "https://patchblox.com/security/cve/CVE-2025-38616",
      "title": "tls: handle data disappearing from under the TLS ULP",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39730",
      "url": "https://patchblox.com/security/cve/CVE-2025-39730",
      "title": "NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38565",
      "url": "https://patchblox.com/security/cve/CVE-2025-38565",
      "title": "perf/core: Exit early on perf_mmap() fail",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38572",
      "url": "https://patchblox.com/security/cve/CVE-2025-38572",
      "title": "ipv6: reject malicious packets in ipv6_gso_segment()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39698",
      "url": "https://patchblox.com/security/cve/CVE-2025-39698",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38702",
      "url": "https://patchblox.com/security/cve/CVE-2025-38702",
      "title": "fbdev: fix potential buffer overflow in do_register_framebuffer()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39850",
      "url": "https://patchblox.com/security/cve/CVE-2025-39850",
      "title": "vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38614",
      "url": "https://patchblox.com/security/cve/CVE-2025-38614",
      "title": "eventpoll: Fix semi-unbounded recursion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38615",
      "url": "https://patchblox.com/security/cve/CVE-2025-38615",
      "title": "fs/ntfs3: cancle set bad inode after removing name fails",
      "priority": "High",
      "severity": "medium",
      "cvss": 9.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39691",
      "url": "https://patchblox.com/security/cve/CVE-2025-39691",
      "title": "fs/buffer: fix use-after-free when call bh_read() helper",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39689",
      "url": "https://patchblox.com/security/cve/CVE-2025-39689",
      "title": "ftrace: Also allocate and copy hash for reading of filter files",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39683",
      "url": "https://patchblox.com/security/cve/CVE-2025-39683",
      "title": "tracing: Limit access to parser-\u003Ebuffer when trace_get_user failed",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38701",
      "url": "https://patchblox.com/security/cve/CVE-2025-38701",
      "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38704",
      "url": "https://patchblox.com/security/cve/CVE-2025-38704",
      "title": "rcu/nocb: Fix possible invalid rdp\u0027s-\u003Enocb_cb_kthread pointer access",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38453",
      "url": "https://patchblox.com/security/cve/CVE-2025-38453",
      "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38568",
      "url": "https://patchblox.com/security/cve/CVE-2025-38568",
      "title": "net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38502",
      "url": "https://patchblox.com/security/cve/CVE-2025-38502",
      "title": "bpf: Fix oob access in cgroup local storage",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38685",
      "url": "https://patchblox.com/security/cve/CVE-2025-38685",
      "title": "fbdev: Fix vmalloc out-of-bounds write in fast_imageblit",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39766",
      "url": "https://patchblox.com/security/cve/CVE-2025-39766",
      "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38618",
      "url": "https://patchblox.com/security/cve/CVE-2025-38618",
      "title": "vsock: Do not allow binding to VMADDR_PORT_ANY",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39727",
      "url": "https://patchblox.com/security/cve/CVE-2025-39727",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nmm: swap: fix potential buffer overflow in setup_...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38700",
      "url": "https://patchblox.com/security/cve/CVE-2025-38700",
      "title": "scsi: libiscsi: Initialize iscsi_conn-\u003Edd_data only if memory is allocated",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38732",
      "url": "https://patchblox.com/security/cve/CVE-2025-38732",
      "title": "netfilter: nf_reject: don\u0027t leak dst refcount for loopback packets",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38556",
      "url": "https://patchblox.com/security/cve/CVE-2025-38556",
      "title": "HID: core: Harden s32ton() against conversion to 0 bits",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39823",
      "url": "https://patchblox.com/security/cve/CVE-2025-39823",
      "title": "KVM: x86: use array_index_nospec with indices that come from guest",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38707",
      "url": "https://patchblox.com/security/cve/CVE-2025-38707",
      "title": "fs/ntfs3: Add sanity check for file name",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39760",
      "url": "https://patchblox.com/security/cve/CVE-2025-39760",
      "title": "usb: core: config: Prevent OOB read in SS endpoint companion parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38500",
      "url": "https://patchblox.com/security/cve/CVE-2025-38500",
      "title": "xfrm: interface: fix use-after-free after changing collect_md xfrm interface",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38587",
      "url": "https://patchblox.com/security/cve/CVE-2025-38587",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38653",
      "url": "https://patchblox.com/security/cve/CVE-2025-38653",
      "title": "proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39738",
      "url": "https://patchblox.com/security/cve/CVE-2025-39738",
      "title": "btrfs: do not allow relocation of partially dropped subvolumes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39749",
      "url": "https://patchblox.com/security/cve/CVE-2025-39749",
      "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38730",
      "url": "https://patchblox.com/security/cve/CVE-2025-38730",
      "title": "io_uring/net: commit partial buffers on retry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39835",
      "url": "https://patchblox.com/security/cve/CVE-2025-39835",
      "title": "xfs: do not propagate ENODATA disk errors into xattr code",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38718",
      "url": "https://patchblox.com/security/cve/CVE-2025-38718",
      "title": "sctp: linearize cloned gso packets in sctp_rcv",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39718",
      "url": "https://patchblox.com/security/cve/CVE-2025-39718",
      "title": "vsock/virtio: Validate length in packet header before skb_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39783",
      "url": "https://patchblox.com/security/cve/CVE-2025-39783",
      "title": "PCI: endpoint: Fix configfs group list head handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39824",
      "url": "https://patchblox.com/security/cve/CVE-2025-39824",
      "title": "HID: asus: fix UAF via HID_CLAIMED_INPUT validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39902",
      "url": "https://patchblox.com/security/cve/CVE-2025-39902",
      "title": "mm/slub: avoid accessing metadata when pointer is invalid in object_err()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39817",
      "url": "https://patchblox.com/security/cve/CVE-2025-39817",
      "title": "efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38670",
      "url": "https://patchblox.com/security/cve/CVE-2025-38670",
      "title": "arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38692",
      "url": "https://patchblox.com/security/cve/CVE-2025-38692",
      "title": "exfat: add cluster chain loop check for dir",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39744",
      "url": "https://patchblox.com/security/cve/CVE-2025-39744",
      "title": "rcu: Fix rcu_read_unlock() deadloop due to IRQ work",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39797",
      "url": "https://patchblox.com/security/cve/CVE-2025-39797",
      "title": "xfrm: Duplicate SPI Handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39838",
      "url": "https://patchblox.com/security/cve/CVE-2025-39838",
      "title": "cifs: prevent NULL pointer dereference in UTF16 conversion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39697",
      "url": "https://patchblox.com/security/cve/CVE-2025-39697",
      "title": "NFS: Fix a race when updating an existing write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38665",
      "url": "https://patchblox.com/security/cve/CVE-2025-38665",
      "title": "can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38709",
      "url": "https://patchblox.com/security/cve/CVE-2025-38709",
      "title": "loop: Avoid updating block size under exclusive owner",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39725",
      "url": "https://patchblox.com/security/cve/CVE-2025-39725",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/vmscan: fix hwpoisoned large folio handling i...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39819",
      "url": "https://patchblox.com/security/cve/CVE-2025-39819",
      "title": "fs/smb: Fix inconsistent refcnt update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39903",
      "url": "https://patchblox.com/security/cve/CVE-2025-39903",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nof_numa: fix uninitialized memory nodes causing k...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.3,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39900",
      "url": "https://patchblox.com/security/cve/CVE-2025-39900",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39825",
      "url": "https://patchblox.com/security/cve/CVE-2025-39825",
      "title": "smb: client: fix race with concurrent opens in rename(2)",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39759",
      "url": "https://patchblox.com/security/cve/CVE-2025-39759",
      "title": "btrfs: qgroup: fix race between quota disable and quota rescan ioctl",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39843",
      "url": "https://patchblox.com/security/cve/CVE-2025-39843",
      "title": "mm: slub: avoid wake up kswapd in set_track_prepare",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39832",
      "url": "https://patchblox.com/security/cve/CVE-2025-39832",
      "title": "net/mlx5: Fix lockdep assertion on sync reset unload event",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39770",
      "url": "https://patchblox.com/security/cve/CVE-2025-39770",
      "title": "net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.7,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22103",
      "url": "https://patchblox.com/security/cve/CVE-2025-22103",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22124",
      "url": "https://patchblox.com/security/cve/CVE-2025-22124",
      "title": "md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22125",
      "url": "https://patchblox.com/security/cve/CVE-2025-22125",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38691",
      "url": "https://patchblox.com/security/cve/CVE-2025-38691",
      "title": "pNFS: Fix uninited ptr deref in block/scsi layout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.2,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39829",
      "url": "https://patchblox.com/security/cve/CVE-2025-39829",
      "title": "trace/fgraph: Fix the warning caused by missing unregister notifier",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38586",
      "url": "https://patchblox.com/security/cve/CVE-2025-38586",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, arm64: Fix fp initialization for exception...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38639",
      "url": "https://patchblox.com/security/cve/CVE-2025-38639",
      "title": "netfilter: xt_nfacct: don\u0027t assume acct name is null-terminated",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38622",
      "url": "https://patchblox.com/security/cve/CVE-2025-38622",
      "title": "net: drop UFO packets in udp_rcv_segment()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38683",
      "url": "https://patchblox.com/security/cve/CVE-2025-38683",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nhv_netvsc: Fix panic during namespace deletion wi...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39681",
      "url": "https://patchblox.com/security/cve/CVE-2025-39681",
      "title": "x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39756",
      "url": "https://patchblox.com/security/cve/CVE-2025-39756",
      "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39724",
      "url": "https://patchblox.com/security/cve/CVE-2025-39724",
      "title": "serial: 8250: fix panic due to PSLVERR",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38588",
      "url": "https://patchblox.com/security/cve/CVE-2025-38588",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38721",
      "url": "https://patchblox.com/security/cve/CVE-2025-38721",
      "title": "netfilter: ctnetlink: fix refcount leak on table dump",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39812",
      "url": "https://patchblox.com/security/cve/CVE-2025-39812",
      "title": "sctp: initialize more fields in sctp_v6_from_sk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38640",
      "url": "https://patchblox.com/security/cve/CVE-2025-38640",
      "title": "bpf: Disable migration in nf_hook_run_bpf().",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39748",
      "url": "https://patchblox.com/security/cve/CVE-2025-39748",
      "title": "bpf: Forget ranges when refining tnum after JSET",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39795",
      "url": "https://patchblox.com/security/cve/CVE-2025-39795",
      "title": "block: avoid possible overflow for chunk_sectors check in blk_stack_limits()",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38645",
      "url": "https://patchblox.com/security/cve/CVE-2025-38645",
      "title": "net/mlx5: Check device memory pointer before usage",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38686",
      "url": "https://patchblox.com/security/cve/CVE-2025-38686",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  userfaultfd: fix a crash in UFFDIO_MOVE when PMD...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39700",
      "url": "https://patchblox.com/security/cve/CVE-2025-39700",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/ops-common: ignore migration request to...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39763",
      "url": "https://patchblox.com/security/cve/CVE-2025-39763",
      "title": "ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39792",
      "url": "https://patchblox.com/security/cve/CVE-2025-39792",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm: Always split write BIOs to zoned device limi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39800",
      "url": "https://patchblox.com/security/cve/CVE-2025-39800",
      "title": "btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39845",
      "url": "https://patchblox.com/security/cve/CVE-2025-39845",
      "title": "x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39734",
      "url": "https://patchblox.com/security/cve/CVE-2025-39734",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Revert \u0022fs/ntfs3: Replace inode_trylock with ino...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39779",
      "url": "https://patchblox.com/security/cve/CVE-2025-39779",
      "title": "btrfs: subpage: keep TOWRITE tag until folio is cleaned",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39780",
      "url": "https://patchblox.com/security/cve/CVE-2025-39780",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched/ext: Fix invalid task state transitions on...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39844",
      "url": "https://patchblox.com/security/cve/CVE-2025-39844",
      "title": "mm: move page table sync declarations to linux/pgtable.h",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39895",
      "url": "https://patchblox.com/security/cve/CVE-2025-39895",
      "title": "sched: Fix sched_numa_find_nth_cpu() if mask offline",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39852",
      "url": "https://patchblox.com/security/cve/CVE-2025-39852",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp: Fix socket memory leak in TCP-AO failur...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39899",
      "url": "https://patchblox.com/security/cve/CVE-2025-39899",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/userfaultfd: fix kmap_local LIFO ordering for...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38632",
      "url": "https://patchblox.com/security/cve/CVE-2025-38632",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39754",
      "url": "https://patchblox.com/security/cve/CVE-2025-39754",
      "title": "mm/smaps: fix race between smaps_hugetlb_range and migration",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38681",
      "url": "https://patchblox.com/security/cve/CVE-2025-38681",
      "title": "mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39782",
      "url": "https://patchblox.com/security/cve/CVE-2025-39782",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: prevent softlockup in jbd2_log_do_checkpoi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39791",
      "url": "https://patchblox.com/security/cve/CVE-2025-39791",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm: dm-crypt: Do not partially accept write BIOs...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38675",
      "url": "https://patchblox.com/security/cve/CVE-2025-38675",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: state: initialize state_ptrs earlier in xf...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.9,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39773",
      "url": "https://patchblox.com/security/cve/CVE-2025-39773",
      "title": "net: bridge: fix soft lockup in br_multicast_query_expired()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38717",
      "url": "https://patchblox.com/security/cve/CVE-2025-38717",
      "title": "net: kcm: Fix race condition in kcm_unattach()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39813",
      "url": "https://patchblox.com/security/cve/CVE-2025-39813",
      "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38553",
      "url": "https://patchblox.com/security/cve/CVE-2025-38553",
      "title": "net/sched: Restrict conditions for adding duplicating netems to qdisc tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}