{
  "fix": "ALAS2023-2025-1254",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1254",
  "summary": "ALAS2023-2025-1254, released October 27, 2025, fixes 48 CVEs across 22 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2025-10-27T14:26:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-39964, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 48,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.10258,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1254.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.53-69.119",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.53-69.119",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.53-69.119.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39964",
      "url": "https://patchblox.com/security/cve/CVE-2025-39964",
      "title": "crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01607,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39975",
      "url": "https://patchblox.com/security/cve/CVE-2025-39975",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix wrong index reference in smb2_c...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39967",
      "url": "https://patchblox.com/security/cve/CVE-2025-39967",
      "title": "fbcon: fix integer overflow in fbcon_do_set_font",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39946",
      "url": "https://patchblox.com/security/cve/CVE-2025-39946",
      "title": "tls: make sure to abort the stream if headers are bogus",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.10258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40048",
      "url": "https://patchblox.com/security/cve/CVE-2025-40048",
      "title": "uio_hv_generic: Let userspace take care of interrupt mask",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40129",
      "url": "https://patchblox.com/security/cve/CVE-2025-40129",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00566,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40057",
      "url": "https://patchblox.com/security/cve/CVE-2025-40057",
      "title": "ptp: Add a upper bound on max_vclocks",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40009",
      "url": "https://patchblox.com/security/cve/CVE-2025-40009",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc/task_mmu: check p-\u003Evec_buf for NULL  Whe...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39980",
      "url": "https://patchblox.com/security/cve/CVE-2025-39980",
      "title": "nexthop: Forbid FDB status change while nexthop is in a group",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40035",
      "url": "https://patchblox.com/security/cve/CVE-2025-40035",
      "title": "Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40052",
      "url": "https://patchblox.com/security/cve/CVE-2025-40052",
      "title": "smb: client: fix crypto buffers in non-linear memory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40006",
      "url": "https://patchblox.com/security/cve/CVE-2025-40006",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix folio is still mapped when delet...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39965",
      "url": "https://patchblox.com/security/cve/CVE-2025-39965",
      "title": "xfrm: xfrm_alloc_spi shouldn\u0027t use 0 as SPI",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39992",
      "url": "https://patchblox.com/security/cve/CVE-2025-39992",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: swap: check for stable address space before...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39990",
      "url": "https://patchblox.com/security/cve/CVE-2025-39990",
      "title": "bpf: Check the helper function is valid in get_helper_proto",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39984",
      "url": "https://patchblox.com/security/cve/CVE-2025-39984",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40068",
      "url": "https://patchblox.com/security/cve/CVE-2025-40068",
      "title": "fs: ntfs3: Fix integer overflow in run_unpack()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39998",
      "url": "https://patchblox.com/security/cve/CVE-2025-39998",
      "title": "scsi: target: target_core_configfs: Add length check to avoid buffer overflow",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40044",
      "url": "https://patchblox.com/security/cve/CVE-2025-40044",
      "title": "fs: udf: fix OOB read in lengthAllocDescs handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39931",
      "url": "https://patchblox.com/security/cve/CVE-2025-39931",
      "title": "crypto: af_alg - Set merge to zero early in af_alg_sendmsg",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40123",
      "url": "https://patchblox.com/security/cve/CVE-2025-40123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Enforce expected_attach_type for tailcall c...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39955",
      "url": "https://patchblox.com/security/cve/CVE-2025-39955",
      "title": "tcp: Clear tcp_sk(sk)-\u003Efastopen_rsk in tcp_disconnect().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40067",
      "url": "https://patchblox.com/security/cve/CVE-2025-40067",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: reject index allocation if $BITMAP is...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40058",
      "url": "https://patchblox.com/security/cve/CVE-2025-40058",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Disallow dirty tracking if incoheren...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40047",
      "url": "https://patchblox.com/security/cve/CVE-2025-40047",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39963",
      "url": "https://patchblox.com/security/cve/CVE-2025-39963",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring: fix incorrect io_kiocb reference in io...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39977",
      "url": "https://patchblox.com/security/cve/CVE-2025-39977",
      "title": "futex: Prevent use-after-free during requeue-PI",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40024",
      "url": "https://patchblox.com/security/cve/CVE-2025-40024",
      "title": "vhost: Take a reference on the task in struct vhost_task.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40081",
      "url": "https://patchblox.com/security/cve/CVE-2025-40081",
      "title": "perf: arm_spe: Prevent overflow in PERF_IDX2OFF()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40169",
      "url": "https://patchblox.com/security/cve/CVE-2025-40169",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40018",
      "url": "https://patchblox.com/security/cve/CVE-2025-40018",
      "title": "ipvs: Defer ip_vs_ftp unregister during netns cleanup",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40078",
      "url": "https://patchblox.com/security/cve/CVE-2025-40078",
      "title": "bpf: Explicitly check accesses to bpf_sock_addr",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40070",
      "url": "https://patchblox.com/security/cve/CVE-2025-40070",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pps: fix warning in pps_register_cdev when regis...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40115",
      "url": "https://patchblox.com/security/cve/CVE-2025-40115",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix crash in transport port remov...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40030",
      "url": "https://patchblox.com/security/cve/CVE-2025-40030",
      "title": "pinctrl: check the return value of pinmux_ops::get_function_name()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40134",
      "url": "https://patchblox.com/security/cve/CVE-2025-40134",
      "title": "kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 4.7,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40049",
      "url": "https://patchblox.com/security/cve/CVE-2025-40049",
      "title": "Squashfs: fix uninit-value in squashfs_get_parent",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40109",
      "url": "https://patchblox.com/security/cve/CVE-2025-40109",
      "title": "crypto: rng - Ensure set_ent is always present",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40125",
      "url": "https://patchblox.com/security/cve/CVE-2025-40125",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  blk-mq: check kobject state_in_sysfs before dele...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40153",
      "url": "https://patchblox.com/security/cve/CVE-2025-40153",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: hugetlb: avoid soft lockup when mprotect to...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40080",
      "url": "https://patchblox.com/security/cve/CVE-2025-40080",
      "title": "nbd: restrict sockets to TCP and UDP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40021",
      "url": "https://patchblox.com/security/cve/CVE-2025-40021",
      "title": "tracing: dynevent: Add a missing lockdown check on dynevent",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39940",
      "url": "https://patchblox.com/security/cve/CVE-2025-39940",
      "title": "dm-stripe: fix a possible integer overflow",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39956",
      "url": "https://patchblox.com/security/cve/CVE-2025-39956",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  igc: don\u0027t fail igc_probe() on LED setup error...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39953",
      "url": "https://patchblox.com/security/cve/CVE-2025-39953",
      "title": "cgroup: split cgroup_destroy_wq into 3 workqueues",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39816",
      "url": "https://patchblox.com/security/cve/CVE-2025-39816",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: always use READ_ONCE() to read ri...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39947",
      "url": "https://patchblox.com/security/cve/CVE-2025-39947",
      "title": "net/mlx5e: Harden uplink netdev access against device unbind",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39961",
      "url": "https://patchblox.com/security/cve/CVE-2025-39961",
      "title": "iommu/amd/pgtbl: Fix possible race while increase page table level",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}