{
  "fix": "ALAS2023-2025-1350",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1350",
  "summary": "ALAS2023-2025-1350, released January 7, 2026, fixes 54 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2026-01-07T18:41:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-68284, high severity",
  "supported": true,
  "cveCount": 54,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00588,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2025-1350.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.159-181.297",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.159-181.297",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.159-181.297.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-68284",
      "url": "https://patchblox.com/security/cve/CVE-2025-68284",
      "title": "libceph: prevent potential out-of-bounds writes in handle_auth_session_key()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00588,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68285",
      "url": "https://patchblox.com/security/cve/CVE-2025-68285",
      "title": "libceph: fix potential use-after-free in have_mon_and_osd_map()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68283",
      "url": "https://patchblox.com/security/cve/CVE-2025-68283",
      "title": "libceph: replace BUG_ON with bounds check for map-\u003Emax_osd",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40257",
      "url": "https://patchblox.com/security/cve/CVE-2025-40257",
      "title": "mptcp: fix a race in mptcp_pm_del_add_timer()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40258",
      "url": "https://patchblox.com/security/cve/CVE-2025-40258",
      "title": "mptcp: fix race condition in mptcp_schedule_work()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40271",
      "url": "https://patchblox.com/security/cve/CVE-2025-40271",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc: fix uaf in proc_readdir_de()  Pde is er...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40324",
      "url": "https://patchblox.com/security/cve/CVE-2025-40324",
      "title": "NFSD: Fix crash in nfsd4_read_release()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68241",
      "url": "https://patchblox.com/security/cve/CVE-2025-68241",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00466,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40273",
      "url": "https://patchblox.com/security/cve/CVE-2025-40273",
      "title": "NFSD: free copynotify stateid in nfs4_free_ol_stateid()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00456,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68321",
      "url": "https://patchblox.com/security/cve/CVE-2025-68321",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  page_pool: always add GFP_NOWARN for ATOMIC allo...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38678",
      "url": "https://patchblox.com/security/cve/CVE-2025-38678",
      "title": "netfilter: nf_tables: reject duplicate device on updates",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40277",
      "url": "https://patchblox.com/security/cve/CVE-2025-40277",
      "title": "drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40281",
      "url": "https://patchblox.com/security/cve/CVE-2025-40281",
      "title": "sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68287",
      "url": "https://patchblox.com/security/cve/CVE-2025-68287",
      "title": "usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68227",
      "url": "https://patchblox.com/security/cve/CVE-2025-68227",
      "title": "mptcp: Fix proto fallback detection with BPF",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40259",
      "url": "https://patchblox.com/security/cve/CVE-2025-40259",
      "title": "scsi: sg: Do not sleep in atomic context",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40293",
      "url": "https://patchblox.com/security/cve/CVE-2025-40293",
      "title": "iommufd: Don\u0027t overflow during division for dirty tracking",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68177",
      "url": "https://patchblox.com/security/cve/CVE-2025-68177",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cpufreq/longhaul: handle NULL policy in longhaul...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40211",
      "url": "https://patchblox.com/security/cve/CVE-2025-40211",
      "title": "ACPI: video: Fix use-after-free in acpi_video_switch_brightness()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40331",
      "url": "https://patchblox.com/security/cve/CVE-2025-40331",
      "title": "sctp: Prevent TOCTOU out-of-bounds write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40214",
      "url": "https://patchblox.com/security/cve/CVE-2025-40214",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Initialise scc_index in unix_add_edge()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68231",
      "url": "https://patchblox.com/security/cve/CVE-2025-68231",
      "title": "mm/mempool: fix poisoning order\u003E0 pages with HIGHMEM",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40292",
      "url": "https://patchblox.com/security/cve/CVE-2025-40292",
      "title": "virtio-net: fix received length check in big packets",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38556",
      "url": "https://patchblox.com/security/cve/CVE-2025-38556",
      "title": "HID: core: Harden s32ton() against conversion to 0 bits",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40297",
      "url": "https://patchblox.com/security/cve/CVE-2025-40297",
      "title": "net: bridge: fix use-after-free due to MST port state bypass",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40248",
      "url": "https://patchblox.com/security/cve/CVE-2025-40248",
      "title": "vsock: Ignore signal/timeout on connect() if already established",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40304",
      "url": "https://patchblox.com/security/cve/CVE-2025-40304",
      "title": "fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40319",
      "url": "https://patchblox.com/security/cve/CVE-2025-40319",
      "title": "bpf: Sync pending IRQ work before freeing ring buffer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68171",
      "url": "https://patchblox.com/security/cve/CVE-2025-68171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/fpu: Ensure XFD state on signal delivery  Se...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40322",
      "url": "https://patchblox.com/security/cve/CVE-2025-40322",
      "title": "fbdev: bitblit: bound-check glyph index in bit_putcs*",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40272",
      "url": "https://patchblox.com/security/cve/CVE-2025-40272",
      "title": "mm/secretmem: fix use-after-free race in fault handler",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40323",
      "url": "https://patchblox.com/security/cve/CVE-2025-40323",
      "title": "fbcon: Set fb_display[i]-\u003Emode to NULL when the mode is released",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68224",
      "url": "https://patchblox.com/security/cve/CVE-2025-68224",
      "title": "scsi: core: Fix a regression triggered by scsi_host_busy()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38073",
      "url": "https://patchblox.com/security/cve/CVE-2025-38073",
      "title": "block: fix race between set_blocksize and read paths",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40254",
      "url": "https://patchblox.com/security/cve/CVE-2025-40254",
      "title": "net: openvswitch: remove never-working support for setting nsh fields",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40341",
      "url": "https://patchblox.com/security/cve/CVE-2025-40341",
      "title": "futex: Don\u0027t leak robust_list pointer on exec race",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40264",
      "url": "https://patchblox.com/security/cve/CVE-2025-40264",
      "title": "be2net: pass wrb_params in case of OS2BMC",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40363",
      "url": "https://patchblox.com/security/cve/CVE-2025-40363",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipv6: fix field-spanning memcpy warning in...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40279",
      "url": "https://patchblox.com/security/cve/CVE-2025-40279",
      "title": "net: sched: act_connmark: initialize struct tc_ife to fix kernel leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68185",
      "url": "https://patchblox.com/security/cve/CVE-2025-68185",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfs4_setup_readdir(): insufficient locking for -...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68331",
      "url": "https://patchblox.com/security/cve/CVE-2025-68331",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: uas: fix urb unmapping issue when the uas d...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40360",
      "url": "https://patchblox.com/security/cve/CVE-2025-40360",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/sysfb: Do not dereference NULL pointer in pl...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68200",
      "url": "https://patchblox.com/security/cve/CVE-2025-68200",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Add bpf_prog_run_data_pointers()  syzbot fo...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68295",
      "url": "https://patchblox.com/security/cve/CVE-2025-68295",
      "title": "smb: client: fix memory leak in cifs_construct_tcon()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40083",
      "url": "https://patchblox.com/security/cve/CVE-2025-40083",
      "title": "net/sched: sch_qfq: Fix null-deref in agg_dequeue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40313",
      "url": "https://patchblox.com/security/cve/CVE-2025-40313",
      "title": "ntfs3: pretend $Extend records as regular files",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68288",
      "url": "https://patchblox.com/security/cve/CVE-2025-68288",
      "title": "usb: storage: Fix memory leak in USB bulk transport",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68191",
      "url": "https://patchblox.com/security/cve/CVE-2025-68191",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  udp_tunnel: use netdev_warn() instead of netdev_...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 3.3,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68229",
      "url": "https://patchblox.com/security/cve/CVE-2025-68229",
      "title": "scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68173",
      "url": "https://patchblox.com/security/cve/CVE-2025-68173",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ftrace: Fix softlockup in ftrace_module_enable...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68244",
      "url": "https://patchblox.com/security/cve/CVE-2025-68244",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/i915: Avoid lock inversion when pinning to G...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53292",
      "url": "https://patchblox.com/security/cve/CVE-2023-53292",
      "title": "blk-mq: fix NULL dereference on q-\u003Eelevator in blk_mq_elv_switch_none",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68214",
      "url": "https://patchblox.com/security/cve/CVE-2025-68214",
      "title": "timers: Fix NULL function pointer race in timer_shutdown_sync()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40361",
      "url": "https://patchblox.com/security/cve/CVE-2025-40361",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}