# ALSA-2025:20095: Security update for 75 packages

ALSA-2025:20095, released November 11, 2025, fixes 88 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alsa-2025-20095
- Platform: Linux
- Released: Nov 11, 2025
- Priority: Urgent (Closes CVE-2024-36350, rated Critical)
- CVEs: 88, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2025:20095

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-modules-extra-matched](https://patchblox.com/security/data/product/linux/kernel-modules-extra-matched.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k](https://patchblox.com/security/data/product/linux/kernel-rt-64k.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-debug](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |
| [rv](https://patchblox.com/security/data/product/linux/rv.md) | almalinux 10 | 6.12.0-124.8.1.el10_1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-36350](https://patchblox.com/security/data/cve/CVE-2024-36350.md) | Urgent | AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue | 7.8 | 0.0049 |  |
| [CVE-2024-36357](https://patchblox.com/security/data/cve/CVE-2024-36357.md) | Urgent | AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue | 7.8 | 0.0036 |  |
| [CVE-2025-21796](https://patchblox.com/security/data/cve/CVE-2025-21796.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0067 |  |
| [CVE-2025-21795](https://patchblox.com/security/data/cve/CVE-2025-21795.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0067 |  |
| [CVE-2025-21844](https://patchblox.com/security/data/cve/CVE-2025-21844.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0062 |  |
| [CVE-2025-21765](https://patchblox.com/security/data/cve/CVE-2025-21765.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0061 |  |
| [CVE-2024-56662](https://patchblox.com/security/data/cve/CVE-2024-56662.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nf... | 7.8 | 0.0061 |  |
| [CVE-2025-21855](https://patchblox.com/security/data/cve/CVE-2025-21855.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0044 |  |
| [CVE-2024-28956](https://patchblox.com/security/data/cve/CVE-2024-28956.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 7.8 | 0.0043 |  |
| [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 |  |
| [CVE-2024-57995](https://patchblox.com/security/data/cve/CVE-2024-57995.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0036 |  |
| [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64k-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0032 |  |
| [CVE-2024-57986](https://patchblox.com/security/data/cve/CVE-2024-57986.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0032 |  |
| [CVE-2024-53241](https://patchblox.com/security/data/cve/CVE-2024-53241.md) | High | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: x... | 7.8 | 0.0031 |  |
| [CVE-2024-58006](https://patchblox.com/security/data/cve/CVE-2024-58006.md) | High | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() | 7.8 | 0.0031 |  |
| [CVE-2025-21647](https://patchblox.com/security/data/cve/CVE-2025-21647.md) | High | kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 |  |
| [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 |  |
| [CVE-2025-21864](https://patchblox.com/security/data/cve/CVE-2025-21864.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 |  |
| [CVE-2025-21785](https://patchblox.com/security/data/cve/CVE-2025-21785.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2024-57901](https://patchblox.com/security/data/cve/CVE-2024-57901.md) | High | kernel-64k-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2024-57902](https://patchblox.com/security/data/cve/CVE-2024-57902.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2024-57981](https://patchblox.com/security/data/cve/CVE-2024-57981.md) | High | kernel-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2025-21791](https://patchblox.com/security/data/cve/CVE-2025-21791.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 |  |
| [CVE-2024-58020](https://patchblox.com/security/data/cve/CVE-2024-58020.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0026 |  |
| [CVE-2025-21696](https://patchblox.com/security/data/cve/CVE-2025-21696.md) | High | mm: clear uffd-wp PTE/PMD state on mremap() | 7.8 | 0.0026 |  |
| [CVE-2025-21761](https://patchblox.com/security/data/cve/CVE-2025-21761.md) | High | kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0026 |  |
| [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 7.8 | 0.0026 |  |
| [CVE-2025-21976](https://patchblox.com/security/data/cve/CVE-2025-21976.md) | High | fbdev: hyperv_fb: Allow graceful removal of framebuffer | 7.8 | 0.0026 |  |
| [CVE-2024-58012](https://patchblox.com/security/data/cve/CVE-2024-58012.md) | High | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | 7.8 | 0.0026 |  |
| [CVE-2025-21655](https://patchblox.com/security/data/cve/CVE-2025-21655.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 |  |
| [CVE-2024-53147](https://patchblox.com/security/data/cve/CVE-2024-53147.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entr... | 7.8 | 0.0025 |  |
| [CVE-2024-58005](https://patchblox.com/security/data/cve/CVE-2024-58005.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 |  |
| [CVE-2025-21846](https://patchblox.com/security/data/cve/CVE-2025-21846.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 |  |
| [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 |  |
| [CVE-2024-58013](https://patchblox.com/security/data/cve/CVE-2024-58013.md) | High | kernel-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 |  |
| [CVE-2025-21861](https://patchblox.com/security/data/cve/CVE-2025-21861.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 |  |
| [CVE-2025-21726](https://patchblox.com/security/data/cve/CVE-2025-21726.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 |  |
| [CVE-2024-58069](https://patchblox.com/security/data/cve/CVE-2024-58069.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 |  |
| [CVE-2025-21786](https://patchblox.com/security/data/cve/CVE-2025-21786.md) | High | workqueue: Put the pwq after detaching the rescuer from the pool | 7.8 | 0.0023 |  |
| [CVE-2024-57984](https://patchblox.com/security/data/cve/CVE-2024-57984.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 |  |
| [CVE-2025-21790](https://patchblox.com/security/data/cve/CVE-2025-21790.md) | High | kernel-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 |  |
| [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 |  |
| [CVE-2024-54456](https://patchblox.com/security/data/cve/CVE-2024-54456.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 7.8 | 0.0023 |  |
| [CVE-2024-49570](https://patchblox.com/security/data/cve/CVE-2024-49570.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.   The following security bu... | 7.8 | 0.0023 |  |
| [CVE-2025-21680](https://patchblox.com/security/data/cve/CVE-2025-21680.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21738](https://patchblox.com/security/data/cve/CVE-2025-21738.md) | High | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 7.8 | 0.0022 |  |
| [CVE-2024-53222](https://patchblox.com/security/data/cve/CVE-2024-53222.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: d... | 7.8 | 0.0022 |  |
| [CVE-2024-58014](https://patchblox.com/security/data/cve/CVE-2024-58014.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21828](https://patchblox.com/security/data/cve/CVE-2025-21828.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 |  |
| [CVE-2024-53216](https://patchblox.com/security/data/cve/CVE-2024-53216.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work... | 7.8 | 0.0022 |  |
| [CVE-2025-21741](https://patchblox.com/security/data/cve/CVE-2025-21741.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21742](https://patchblox.com/security/data/cve/CVE-2025-21742.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2024-57987](https://patchblox.com/security/data/cve/CVE-2024-57987.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2024-57988](https://patchblox.com/security/data/cve/CVE-2024-57988.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2024-57989](https://patchblox.com/security/data/cve/CVE-2024-57989.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21847](https://patchblox.com/security/data/cve/CVE-2025-21847.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21671](https://patchblox.com/security/data/cve/CVE-2025-21671.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21743](https://patchblox.com/security/data/cve/CVE-2025-21743.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2025-21857](https://patchblox.com/security/data/cve/CVE-2025-21857.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 |  |
| [CVE-2024-58072](https://patchblox.com/security/data/cve/CVE-2024-58072.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 |  |
| [CVE-2025-21652](https://patchblox.com/security/data/cve/CVE-2025-21652.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 |  |
| [CVE-2025-21750](https://patchblox.com/security/data/cve/CVE-2025-21750.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 |  |
| [CVE-2025-21691](https://patchblox.com/security/data/cve/CVE-2025-21691.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2024-57977](https://patchblox.com/security/data/cve/CVE-2024-57977.md) | High | kernel-64k-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2025-21693](https://patchblox.com/security/data/cve/CVE-2025-21693.md) | High | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 7.8 | 0.0020 |  |
| [CVE-2025-21771](https://patchblox.com/security/data/cve/CVE-2025-21771.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2025-21777](https://patchblox.com/security/data/cve/CVE-2025-21777.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2024-58004](https://patchblox.com/security/data/cve/CVE-2024-58004.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2025-21826](https://patchblox.com/security/data/cve/CVE-2025-21826.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 |  |
| [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 |  |
| [CVE-2024-58061](https://patchblox.com/security/data/cve/CVE-2024-58061.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 |  |
| [CVE-2024-58075](https://patchblox.com/security/data/cve/CVE-2024-58075.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 |  |
| [CVE-2025-38116](https://patchblox.com/security/data/cve/CVE-2025-38116.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 |  |
| [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 |  |
| [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 |  |
| [CVE-2024-58077](https://patchblox.com/security/data/cve/CVE-2024-58077.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2024-58088](https://patchblox.com/security/data/cve/CVE-2024-58088.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2024-58057](https://patchblox.com/security/data/cve/CVE-2024-58057.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2024-58015](https://patchblox.com/security/data/cve/CVE-2024-58015.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2024-57942](https://patchblox.com/security/data/cve/CVE-2024-57942.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2025-21851](https://patchblox.com/security/data/cve/CVE-2025-21851.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2024-57941](https://patchblox.com/security/data/cve/CVE-2024-57941.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 |  |
| [CVE-2025-21732](https://patchblox.com/security/data/cve/CVE-2025-21732.md) | High | RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error | 7.8 | 0.0014 |  |
| [CVE-2025-21633](https://patchblox.com/security/data/cve/CVE-2025-21633.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a |  |
| [CVE-2025-21837](https://patchblox.com/security/data/cve/CVE-2025-21837.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | n/a |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
