{
  "fix": "ALAS2023-2026-1430",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430",
  "summary": "ALAS2023-2026-1430, released February 16, 2026, fixes 76 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2026-02-16T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-68341, rated Critical",
  "supported": true,
  "cveCount": 76,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00712,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1430.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.63-84.121",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.63-84.121",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.63-84.121.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-68341",
      "url": "https://patchblox.com/security/cve/CVE-2025-68341",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  veth: reduce XDP no_direct return section to fix...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40212",
      "url": "https://patchblox.com/security/cve/CVE-2025-40212",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: fix refcount leak in nfsd_set_fh_dentry()...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.0043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68366",
      "url": "https://patchblox.com/security/cve/CVE-2025-68366",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nbd: defer config unlock in nbd_genl_connect  Th...",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40251",
      "url": "https://patchblox.com/security/cve/CVE-2025-40251",
      "title": "devlink: rate: Unset parent pointer in devl_rate_nodes_destroy",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68349",
      "url": "https://patchblox.com/security/cve/CVE-2025-68349",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00712,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68284",
      "url": "https://patchblox.com/security/cve/CVE-2025-68284",
      "title": "libceph: prevent potential out-of-bounds writes in handle_auth_session_key()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00588,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68285",
      "url": "https://patchblox.com/security/cve/CVE-2025-68285",
      "title": "libceph: fix potential use-after-free in have_mon_and_osd_map()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68261",
      "url": "https://patchblox.com/security/cve/CVE-2025-68261",
      "title": "ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68337",
      "url": "https://patchblox.com/security/cve/CVE-2025-68337",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: avoid bug_on in jbd2_journal_get_create_ac...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68283",
      "url": "https://patchblox.com/security/cve/CVE-2025-68283",
      "title": "libceph: replace BUG_ON with bounds check for map-\u003Emax_osd",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40257",
      "url": "https://patchblox.com/security/cve/CVE-2025-40257",
      "title": "mptcp: fix a race in mptcp_pm_del_add_timer()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40258",
      "url": "https://patchblox.com/security/cve/CVE-2025-40258",
      "title": "mptcp: fix race condition in mptcp_schedule_work()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40075",
      "url": "https://patchblox.com/security/cve/CVE-2025-40075",
      "title": "tcp_metrics: use dst_dev_net_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40271",
      "url": "https://patchblox.com/security/cve/CVE-2025-40271",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc: fix uaf in proc_readdir_de()  Pde is er...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68241",
      "url": "https://patchblox.com/security/cve/CVE-2025-68241",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00466,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40273",
      "url": "https://patchblox.com/security/cve/CVE-2025-40273",
      "title": "NFSD: free copynotify stateid in nfs4_free_ol_stateid()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00456,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68369",
      "url": "https://patchblox.com/security/cve/CVE-2025-68369",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ntfs3: init run lock for extend inode  After set...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00455,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68226",
      "url": "https://patchblox.com/security/cve/CVE-2025-68226",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix incomplete backport in cfids_in...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00351,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38678",
      "url": "https://patchblox.com/security/cve/CVE-2025-38678",
      "title": "netfilter: nf_tables: reject duplicate device on updates",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40277",
      "url": "https://patchblox.com/security/cve/CVE-2025-40277",
      "title": "drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40281",
      "url": "https://patchblox.com/security/cve/CVE-2025-40281",
      "title": "sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68361",
      "url": "https://patchblox.com/security/cve/CVE-2025-68361",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: limit the level of fs stacking for file-b...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68227",
      "url": "https://patchblox.com/security/cve/CVE-2025-68227",
      "title": "mptcp: Fix proto fallback detection with BPF",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40259",
      "url": "https://patchblox.com/security/cve/CVE-2025-40259",
      "title": "scsi: sg: Do not sleep in atomic context",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68297",
      "url": "https://patchblox.com/security/cve/CVE-2025-68297",
      "title": "ceph: fix crash in process_v2_sparse_read() for encrypted directories",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68371",
      "url": "https://patchblox.com/security/cve/CVE-2025-68371",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: smartpqi: Fix device resources accessed af...",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68325",
      "url": "https://patchblox.com/security/cve/CVE-2025-68325",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: sch_cake: Fix incorrect qlen reductio...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68202",
      "url": "https://patchblox.com/security/cve/CVE-2025-68202",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix unsafe locking in the scx_dump_st...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68210",
      "url": "https://patchblox.com/security/cve/CVE-2025-68210",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: avoid infinite loop due to incomplete zst...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68727",
      "url": "https://patchblox.com/security/cve/CVE-2025-68727",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ntfs3: Fix uninit buffer allocated by __getname(...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68728",
      "url": "https://patchblox.com/security/cve/CVE-2025-68728",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ntfs3: fix uninit memory after failed mi_read in...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40214",
      "url": "https://patchblox.com/security/cve/CVE-2025-40214",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Initialise scc_index in unix_add_edge()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68756",
      "url": "https://patchblox.com/security/cve/CVE-2025-68756",
      "title": "block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set-\u003Etag_list_lock",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68237",
      "url": "https://patchblox.com/security/cve/CVE-2025-68237",
      "title": "mtdchar: fix integer overflow in read/write ioctls",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68231",
      "url": "https://patchblox.com/security/cve/CVE-2025-68231",
      "title": "mm/mempool: fix poisoning order\u003E0 pages with HIGHMEM",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40250",
      "url": "https://patchblox.com/security/cve/CVE-2025-40250",
      "title": "net/mlx5: Clean up only new IRQ glue on request_irq() failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40248",
      "url": "https://patchblox.com/security/cve/CVE-2025-40248",
      "title": "vsock: Ignore signal/timeout on connect() if already established",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68764",
      "url": "https://patchblox.com/security/cve/CVE-2025-68764",
      "title": "NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40266",
      "url": "https://patchblox.com/security/cve/CVE-2025-40266",
      "title": "KVM: arm64: Check the untrusted offset in FF-A memory share",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68265",
      "url": "https://patchblox.com/security/cve/CVE-2025-68265",
      "title": "nvme: fix admin request_queue lifetime",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40215",
      "url": "https://patchblox.com/security/cve/CVE-2025-40215",
      "title": "xfrm: delete x-\u003Etunnel as we delete x",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68208",
      "url": "https://patchblox.com/security/cve/CVE-2025-68208",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: account for current allocated stack depth i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40272",
      "url": "https://patchblox.com/security/cve/CVE-2025-40272",
      "title": "mm/secretmem: fix use-after-free race in fault handler",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68340",
      "url": "https://patchblox.com/security/cve/CVE-2025-68340",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  team: Move team device type change at the end of...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40274",
      "url": "https://patchblox.com/security/cve/CVE-2025-40274",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: guest_memfd: Remove bindings on memslot del...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68746",
      "url": "https://patchblox.com/security/cve/CVE-2025-68746",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  spi: tegra210-quad: Fix timeout handling  When t...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68724",
      "url": "https://patchblox.com/security/cve/CVE-2025-68724",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: asymmetric_keys - prevent overflow in as...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40254",
      "url": "https://patchblox.com/security/cve/CVE-2025-40254",
      "title": "net: openvswitch: remove never-working support for setting nsh fields",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68264",
      "url": "https://patchblox.com/security/cve/CVE-2025-68264",
      "title": "ext4: refresh inline data size before write operations",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68378",
      "url": "https://patchblox.com/security/cve/CVE-2025-68378",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix stackmap overflow check in __bpf_get_st...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68374",
      "url": "https://patchblox.com/security/cve/CVE-2025-68374",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: fix rcu protection in md_wakeup_thread  We a...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68742",
      "url": "https://patchblox.com/security/cve/CVE-2025-68742",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix invalid prog-\u003Estats access when update_...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.8,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68363",
      "url": "https://patchblox.com/security/cve/CVE-2025-68363",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Check skb-\u003Etransport_header is set in bpf_s...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40279",
      "url": "https://patchblox.com/security/cve/CVE-2025-40279",
      "title": "net: sched: act_connmark: initialize struct tc_ife to fix kernel leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68331",
      "url": "https://patchblox.com/security/cve/CVE-2025-68331",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: uas: fix urb unmapping issue when the uas d...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68292",
      "url": "https://patchblox.com/security/cve/CVE-2025-68292",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memfd: fix information leak in hugetlb folios...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68200",
      "url": "https://patchblox.com/security/cve/CVE-2025-68200",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Add bpf_prog_run_data_pointers()  syzbot fo...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68295",
      "url": "https://patchblox.com/security/cve/CVE-2025-68295",
      "title": "smb: client: fix memory leak in cifs_construct_tcon()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68740",
      "url": "https://patchblox.com/security/cve/CVE-2025-68740",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ima: Handle error code returned by ima_filter_ru...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68293",
      "url": "https://patchblox.com/security/cve/CVE-2025-68293",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/huge_memory: fix NULL pointer deference when...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68288",
      "url": "https://patchblox.com/security/cve/CVE-2025-68288",
      "title": "usb: storage: Fix memory leak in USB bulk transport",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68296",
      "url": "https://patchblox.com/security/cve/CVE-2025-68296",
      "title": "drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68229",
      "url": "https://patchblox.com/security/cve/CVE-2025-68229",
      "title": "scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68348",
      "url": "https://patchblox.com/security/cve/CVE-2025-68348",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  block: fix memory leak in __blkdev_issue_zero_pa...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40268",
      "url": "https://patchblox.com/security/cve/CVE-2025-40268",
      "title": "cifs: client: fix memory leak in smb3_fs_context_parse_param",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68219",
      "url": "https://patchblox.com/security/cve/CVE-2025-68219",
      "title": "cifs: fix memory leak in smb3_fs_context_parse_param error path",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40287",
      "url": "https://patchblox.com/security/cve/CVE-2025-40287",
      "title": "exfat: fix improper check of dentry.stream.valid_size",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68198",
      "url": "https://patchblox.com/security/cve/CVE-2025-68198",
      "title": "crash: fix crashkernel resource shrink",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68372",
      "url": "https://patchblox.com/security/cve/CVE-2025-68372",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nbd: defer config put in recv_work  There is one...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68199",
      "url": "https://patchblox.com/security/cve/CVE-2025-68199",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  codetag: debug: handle existing CODETAG_EMPTY in...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68259",
      "url": "https://patchblox.com/security/cve/CVE-2025-68259",
      "title": "KVM: SVM: Don\u0027t skip unrelated instruction if INT3/INTO is replaced",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.2,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68244",
      "url": "https://patchblox.com/security/cve/CVE-2025-68244",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/i915: Avoid lock inversion when pinning to G...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68744",
      "url": "https://patchblox.com/security/cve/CVE-2025-68744",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Free special fields when update [lru_,]perc...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68329",
      "url": "https://patchblox.com/security/cve/CVE-2025-68329",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Fix WARN_ON in tracing_buffers_mmap_clo...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68242",
      "url": "https://patchblox.com/security/cve/CVE-2025-68242",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFS: Fix LTP test failures when timestamps are d...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68214",
      "url": "https://patchblox.com/security/cve/CVE-2025-68214",
      "title": "timers: Fix NULL function pointer race in timer_shutdown_sync()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}