# ELSA-2025-20470: Security update for 19 packages ELSA-2025-20470, released July 14, 2025, fixes 144 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20470 - Platform: Linux - Released: Jul 14, 2025 - Priority: High (Closes CVE-2024-38541, high severity) - CVEs: 144, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20470.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 8 | 0:5.15.0-310.184.5.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:5.15.0-310.184.5.2.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-38541](https://patchblox.com/security/data/cve/CVE-2024-38541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 | | | [CVE-2024-26952](https://patchblox.com/security/data/cve/CVE-2024-26952.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer o... | 7.8 | 0.0073 | | | [CVE-2024-50047](https://patchblox.com/security/data/cve/CVE-2024-50047.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0052 | | | [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 | | | [CVE-2024-50125](https://patchblox.com/security/data/cve/CVE-2024-50125.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 7.8 | 0.0034 | | | [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 | | | [CVE-2025-37840](https://patchblox.com/security/data/cve/CVE-2025-37840.md) | High | mtd: rawnand: brcmnand: fix PM resume warning | 7.8 | 0.0033 | | | [CVE-2025-37885](https://patchblox.com/security/data/cve/CVE-2025-37885.md) | High | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 | | | [CVE-2025-37858](https://patchblox.com/security/data/cve/CVE-2025-37858.md) | High | fs/jfs: Prevent integer overflow in AG size calculation | 7.8 | 0.0031 | | | [CVE-2025-37927](https://patchblox.com/security/data/cve/CVE-2025-37927.md) | High | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 | | | [CVE-2024-49960](https://patchblox.com/security/data/cve/CVE-2024-49960.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0029 | | | [CVE-2024-26739](https://patchblox.com/security/data/cve/CVE-2024-26739.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0028 | | | [CVE-2024-53203](https://patchblox.com/security/data/cve/CVE-2024-53203.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0027 | | | [CVE-2024-35867](https://patchblox.com/security/data/cve/CVE-2024-35867.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0027 | | | [CVE-2024-46774](https://patchblox.com/security/data/cve/CVE-2024-46774.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construc... | 7.1 | 0.0027 | | | [CVE-2024-54458](https://patchblox.com/security/data/cve/CVE-2024-54458.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | | | [CVE-2024-49989](https://patchblox.com/security/data/cve/CVE-2024-49989.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during am... | 7.8 | 0.0026 | | | [CVE-2024-50280](https://patchblox.com/security/data/cve/CVE-2024-50280.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_wor... | 7.8 | 0.0025 | | | [CVE-2025-37803](https://patchblox.com/security/data/cve/CVE-2025-37803.md) | High | udmabuf: fix a buf size overflow issue during udmabuf creation | 7.8 | 0.0025 | | | [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2025-37810](https://patchblox.com/security/data/cve/CVE-2025-37810.md) | High | usb: dwc3: gadget: check that event count does not exceed event buffer length | 7.8 | 0.0025 | | | [CVE-2025-37838](https://patchblox.com/security/data/cve/CVE-2025-37838.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerabil... | 7.8 | 0.0025 | | | [CVE-2025-37923](https://patchblox.com/security/data/cve/CVE-2025-37923.md) | High | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 | | | [CVE-2024-35866](https://patchblox.com/security/data/cve/CVE-2024-35866.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0024 | | | [CVE-2023-52621](https://patchblox.com/security/data/cve/CVE-2023-52621.md) | High | kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... | 7.8 | 0.0024 | | | [CVE-2024-56551](https://patchblox.com/security/data/cve/CVE-2024-56551.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2025-37911](https://patchblox.com/security/data/cve/CVE-2025-37911.md) | High | bnxt_en: Fix out-of-bound memcpy() during ethtool -w | 7.0 | 0.0024 | | | [CVE-2024-42160](https://patchblox.com/security/data/cve/CVE-2024-42160.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_bu... | 7.8 | 0.0024 | | | [CVE-2025-37913](https://patchblox.com/security/data/cve/CVE-2025-37913.md) | High | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 | | | [CVE-2024-56658](https://patchblox.com/security/data/cve/CVE-2024-56658.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dism... | 7.8 | 0.0024 | | | [CVE-2023-52572](https://patchblox.com/security/data/cve/CVE-2023-52572.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() Ther... | 7.8 | 0.0023 | | | [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 | | | [CVE-2025-37914](https://patchblox.com/security/data/cve/CVE-2025-37914.md) | High | net_sched: ets: Fix double list add in class with netem as child qdisc | 7.8 | 0.0023 | | | [CVE-2025-37930](https://patchblox.com/security/data/cve/CVE-2025-37930.md) | High | drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | 7.0 | 0.0023 | | | [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-38023](https://patchblox.com/security/data/cve/CVE-2025-38023.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0023 | | | [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 | | | [CVE-2025-38024](https://patchblox.com/security/data/cve/CVE-2025-38024.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0023 | | | [CVE-2024-42322](https://patchblox.com/security/data/cve/CVE-2024-42322.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.0 | 0.0023 | | | [CVE-2025-37991](https://patchblox.com/security/data/cve/CVE-2025-37991.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed th... | 7.8 | 0.0023 | | | [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 | | | [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 | | | [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 | | | [CVE-2025-37915](https://patchblox.com/security/data/cve/CVE-2025-37915.md) | High | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 | | | [CVE-2025-23158](https://patchblox.com/security/data/cve/CVE-2025-23158.md) | High | media: venus: hfi: add check to handle incorrect queue size | 7.8 | 0.0022 | | | [CVE-2025-23156](https://patchblox.com/security/data/cve/CVE-2025-23156.md) | High | media: venus: hfi_parser: refactor hfi packet parsing logic | 7.1 | 0.0022 | | | [CVE-2025-23157](https://patchblox.com/security/data/cve/CVE-2025-23157.md) | High | media: venus: hfi_parser: add check to avoid out of bound access | 7.1 | 0.0022 | | | [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 | | | [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 | | | [CVE-2025-37890](https://patchblox.com/security/data/cve/CVE-2025-37890.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 | | | [CVE-2025-37995](https://patchblox.com/security/data/cve/CVE-2025-37995.md) | High | module: ensure that kobject_put() is safe for module type kobjects | 7.0 | 0.0022 | | | [CVE-2025-37817](https://patchblox.com/security/data/cve/CVE-2025-37817.md) | High | mcb: fix a double free bug in chameleon_parse_gdd() | 7.8 | 0.0022 | | | [CVE-2025-38005](https://patchblox.com/security/data/cve/CVE-2025-38005.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0022 | | | [CVE-2025-37738](https://patchblox.com/security/data/cve/CVE-2025-37738.md) | High | ext4: ignore xattrs past end | 7.8 | 0.0022 | | | [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 | | | [CVE-2025-37905](https://patchblox.com/security/data/cve/CVE-2025-37905.md) | High | firmware: arm_scmi: Balance device refcount when destroying devices | 7.0 | 0.0021 | | | [CVE-2025-37892](https://patchblox.com/security/data/cve/CVE-2025-37892.md) | High | mtd: inftlcore: Add error check for inftl_read_oob() | 7.8 | 0.0021 | | | [CVE-2025-37929](https://patchblox.com/security/data/cve/CVE-2025-37929.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0020 | | | [CVE-2025-37796](https://patchblox.com/security/data/cve/CVE-2025-37796.md) | High | wifi: at76c50x: fix use after free access in at76_disconnect | 7.8 | 0.0020 | | | [CVE-2025-37739](https://patchblox.com/security/data/cve/CVE-2025-37739.md) | High | f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() | 7.1 | 0.0020 | | | [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 | | | [CVE-2025-37982](https://patchblox.com/security/data/cve/CVE-2025-37982.md) | High | wifi: wl1251: fix memory leak in wl1251_tx_work | 7.0 | 0.0020 | | | [CVE-2023-52757](https://patchblox.com/security/data/cve/CVE-2023-52757.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0019 | | | [CVE-2025-37969](https://patchblox.com/security/data/cve/CVE-2025-37969.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | 7.0 | 0.0018 | | | [CVE-2025-37970](https://patchblox.com/security/data/cve/CVE-2025-37970.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo | 7.0 | 0.0018 | | | [CVE-2025-37997](https://patchblox.com/security/data/cve/CVE-2025-37997.md) | High | netfilter: ipset: fix region locking in hash types | 7.0 | 0.0018 | | | [CVE-2025-37940](https://patchblox.com/security/data/cve/CVE-2025-37940.md) | High | ftrace: Add cond_resched() to ftrace_graph_set_hash() | 7.0 | 0.0016 | | | [CVE-2025-23145](https://patchblox.com/security/data/cve/CVE-2025-23145.md) | Routine | mptcp: fix NULL pointer in can_accept_new_subflow | 5.5 | 0.0059 | | | [CVE-2024-53185](https://patchblox.com/security/data/cve/CVE-2024-53185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_s... | 5.5 | 0.0048 | | | [CVE-2025-37757](https://patchblox.com/security/data/cve/CVE-2025-37757.md) | Routine | tipc: fix memory leak in tipc_link_xmit | 6.1 | 0.0045 | | | [CVE-2025-37836](https://patchblox.com/security/data/cve/CVE-2025-37836.md) | Routine | PCI: Fix reference leak in pci_register_host_bridge() | 5.5 | 0.0031 | | | [CVE-2025-37857](https://patchblox.com/security/data/cve/CVE-2025-37857.md) | Routine | scsi: st: Fix array overflow in st_setup() | 5.5 | 0.0031 | | | [CVE-2025-37859](https://patchblox.com/security/data/cve/CVE-2025-37859.md) | Routine | page_pool: avoid infinite loop to schedule delayed worker | 5.5 | 0.0031 | | | [CVE-2025-37862](https://patchblox.com/security/data/cve/CVE-2025-37862.md) | Routine | HID: pidff: Fix null pointer dereference in pidff_find_fields | 5.5 | 0.0031 | | | [CVE-2025-37881](https://patchblox.com/security/data/cve/CVE-2025-37881.md) | Routine | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | 5.5 | 0.0031 | | | [CVE-2025-37867](https://patchblox.com/security/data/cve/CVE-2025-37867.md) | Routine | RDMA/core: Silence oversized kvmalloc() warning | 5.5 | 0.0031 | | | [CVE-2025-37756](https://patchblox.com/security/data/cve/CVE-2025-37756.md) | Routine | net: tls: explicitly disallow disconnect | 5.5 | 0.0030 | | | [CVE-2025-37841](https://patchblox.com/security/data/cve/CVE-2025-37841.md) | Routine | pm: cpupower: bench: Prevent NULL dereference on malloc failure | 5.5 | 0.0030 | | | [CVE-2025-37844](https://patchblox.com/security/data/cve/CVE-2025-37844.md) | Routine | cifs: avoid NULL pointer dereference in dbg call | 5.5 | 0.0030 | | | [CVE-2025-37850](https://patchblox.com/security/data/cve/CVE-2025-37850.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0030 | | | [CVE-2025-22062](https://patchblox.com/security/data/cve/CVE-2025-22062.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0030 | | | [CVE-2025-37875](https://patchblox.com/security/data/cve/CVE-2025-37875.md) | Routine | igc: fix PTM cycle trigger logic | 5.5 | 0.0029 | | | [CVE-2025-37883](https://patchblox.com/security/data/cve/CVE-2025-37883.md) | Routine | s390/sclp: Add check for get_zeroed_page() | 5.5 | 0.0029 | | | [CVE-2024-50272](https://patchblox.com/security/data/cve/CVE-2024-50272.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0027 | | | [CVE-2025-37998](https://patchblox.com/security/data/cve/CVE-2025-37998.md) | Routine | openvswitch: Fix unsafe attribute parsing in output_userspace() | 5.5 | 0.0027 | | | [CVE-2024-46816](https://patchblox.com/security/data/cve/CVE-2024-46816.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when... | 5.5 | 0.0027 | | | [CVE-2024-46742](https://patchblox.com/security/data/cve/CVE-2024-46742.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of leas... | 5.5 | 0.0026 | | | [CVE-2024-46751](https://patchblox.com/security/data/cve/CVE-2024-46751.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at... | 5.5 | 0.0026 | | | [CVE-2024-36908](https://patchblox.com/security/data/cve/CVE-2024-36908.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0025 | | | [CVE-2024-38540](https://patchblox.com/security/data/cve/CVE-2024-38540.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 4.4 | 0.0025 | | | [CVE-2025-37790](https://patchblox.com/security/data/cve/CVE-2025-37790.md) | Routine | net: mctp: Set SOCK_RCU_FREE | 5.5 | 0.0024 | | | [CVE-2025-37949](https://patchblox.com/security/data/cve/CVE-2025-37949.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0024 | | | [CVE-2024-35943](https://patchblox.com/security/data/cve/CVE-2024-35943.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0024 | | | [CVE-2025-37990](https://patchblox.com/security/data/cve/CVE-2025-37990.md) | Routine | wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() | 5.5 | 0.0024 | | | [CVE-2024-56599](https://patchblox.com/security/data/cve/CVE-2024-56599.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: avoid NULL pointer error during sd... | 5.5 | 0.0024 | | | [CVE-2025-37909](https://patchblox.com/security/data/cve/CVE-2025-37909.md) | Routine | net: lan743x: Fix memleak issue when GSO enabled | 5.5 | 0.0023 | | | [CVE-2024-53128](https://patchblox.com/security/data/cve/CVE-2024-53128.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/task_stack: fix object_is_on_stack() for K... | 5.5 | 0.0023 | | | [CVE-2024-35790](https://patchblox.com/security/data/cve/CVE-2024-35790.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0023 | | | [CVE-2025-23159](https://patchblox.com/security/data/cve/CVE-2025-23159.md) | Routine | media: venus: hfi: add a check to handle OOB in sfr region | 5.5 | 0.0023 | | | [CVE-2024-56655](https://patchblox.com/security/data/cve/CVE-2024-56655.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not defer rule destruct... | 5.5 | 0.0023 | | | [CVE-2024-44938](https://patchblox.com/security/data/cve/CVE-2024-44938.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG Whe... | 5.5 | 0.0022 | | | [CVE-2025-23144](https://patchblox.com/security/data/cve/CVE-2025-23144.md) | Routine | backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() | 5.5 | 0.0022 | | | [CVE-2025-37765](https://patchblox.com/security/data/cve/CVE-2025-37765.md) | Routine | drm/nouveau: prime: fix ttm_bo_delayed_delete oops | 5.5 | 0.0022 | | | [CVE-2025-23140](https://patchblox.com/security/data/cve/CVE-2025-23140.md) | Routine | misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | 5.5 | 0.0022 | | | [CVE-2024-27402](https://patchblox.com/security/data/cve/CVE-2024-27402.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.8 | 0.0022 | | | [CVE-2024-56751](https://patchblox.com/security/data/cve/CVE-2024-56751.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 6.4 | 0.0022 | | | [CVE-2024-46784](https://patchblox.com/security/data/cve/CVE-2024-46784.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq... | 5.5 | 0.0022 | | | [CVE-2024-50258](https://patchblox.com/security/data/cve/CVE-2024-50258.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gso_max_size/gs... | 5.5 | 0.0022 | | | [CVE-2025-37992](https://patchblox.com/security/data/cve/CVE-2025-37992.md) | Routine | net_sched: Flush gso_skb list too during ->change() | 5.5 | 0.0022 | | | [CVE-2025-21681](https://patchblox.com/security/data/cve/CVE-2025-21681.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering n... | 5.5 | 0.0022 | | | [CVE-2025-23146](https://patchblox.com/security/data/cve/CVE-2025-23146.md) | Routine | mfd: ene-kb3930: Fix a potential NULL pointer dereference | 5.5 | 0.0022 | | | [CVE-2025-23147](https://patchblox.com/security/data/cve/CVE-2025-23147.md) | Routine | i3c: Add NULL pointer check in i3c_master_queue_ibi() | 5.5 | 0.0022 | | | [CVE-2025-23148](https://patchblox.com/security/data/cve/CVE-2025-23148.md) | Routine | soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | 5.5 | 0.0021 | | | [CVE-2025-37766](https://patchblox.com/security/data/cve/CVE-2025-37766.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37808](https://patchblox.com/security/data/cve/CVE-2025-37808.md) | Routine | crypto: null - Use spin lock instead of mutex | 5.5 | 0.0021 | | | [CVE-2025-38009](https://patchblox.com/security/data/cve/CVE-2025-38009.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0021 | | | [CVE-2025-38031](https://patchblox.com/security/data/cve/CVE-2025-38031.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0021 | | | [CVE-2024-26686](https://patchblox.com/security/data/cve/CVE-2024-26686.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... | 5.5 | 0.0021 | | | [CVE-2025-37768](https://patchblox.com/security/data/cve/CVE-2025-37768.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37770](https://patchblox.com/security/data/cve/CVE-2025-37770.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37781](https://patchblox.com/security/data/cve/CVE-2025-37781.md) | Routine | i2c: cros-ec-tunnel: defer probe if parent EC is not present | 5.5 | 0.0021 | | | [CVE-2025-37824](https://patchblox.com/security/data/cve/CVE-2025-37824.md) | Routine | tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | 5.5 | 0.0021 | | | [CVE-2025-37829](https://patchblox.com/security/data/cve/CVE-2025-37829.md) | Routine | cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | 5.5 | 0.0021 | | | [CVE-2025-37767](https://patchblox.com/security/data/cve/CVE-2025-37767.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37771](https://patchblox.com/security/data/cve/CVE-2025-37771.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 | | | [CVE-2025-37805](https://patchblox.com/security/data/cve/CVE-2025-37805.md) | Routine | sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | 5.5 | 0.0020 | | | [CVE-2025-37788](https://patchblox.com/security/data/cve/CVE-2025-37788.md) | Routine | cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path | 5.5 | 0.0020 | | | [CVE-2025-37792](https://patchblox.com/security/data/cve/CVE-2025-37792.md) | Routine | Bluetooth: btrtl: Prevent potential NULL dereference | 5.5 | 0.0020 | | | [CVE-2025-37794](https://patchblox.com/security/data/cve/CVE-2025-37794.md) | Routine | wifi: mac80211: Purge vif txq in ieee80211_do_stop() | 5.5 | 0.0020 | | | [CVE-2025-37740](https://patchblox.com/security/data/cve/CVE-2025-37740.md) | Routine | jfs: add sanity check for agwidth in dbMount | 5.5 | 0.0020 | | | [CVE-2025-37758](https://patchblox.com/security/data/cve/CVE-2025-37758.md) | Routine | ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | 5.5 | 0.0020 | | | [CVE-2025-37773](https://patchblox.com/security/data/cve/CVE-2025-37773.md) | Routine | virtiofs: add filesystem context source name check | 5.5 | 0.0020 | | | [CVE-2025-37983](https://patchblox.com/security/data/cve/CVE-2025-37983.md) | Routine | qibfs: fix _another_ leak | 5.5 | 0.0019 | | | [CVE-2025-37742](https://patchblox.com/security/data/cve/CVE-2025-37742.md) | Routine | jfs: Fix uninit-value access of imap allocated in the diMount() function | 5.5 | 0.0019 | | | [CVE-2025-37830](https://patchblox.com/security/data/cve/CVE-2025-37830.md) | Routine | cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() | 5.5 | 0.0019 | | | [CVE-2025-37787](https://patchblox.com/security/data/cve/CVE-2025-37787.md) | Routine | net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | 5.5 | 0.0019 | | | [CVE-2025-22027](https://patchblox.com/security/data/cve/CVE-2025-22027.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 4.7 | 0.0017 | | | [CVE-2025-37741](https://patchblox.com/security/data/cve/CVE-2025-37741.md) | Routine | jfs: Prevent copying of nlink with value 0 from disk inode | 5.5 | 0.0016 | | | [CVE-2025-37812](https://patchblox.com/security/data/cve/CVE-2025-37812.md) | Routine | usb: cdns3: Fix deadlock when using NCM gadget | 5.5 | 0.0016 | | | [CVE-2025-37967](https://patchblox.com/security/data/cve/CVE-2025-37967.md) | Routine | usb: typec: ucsi: displayport: Fix deadlock | 5.5 | 0.0016 | | | [CVE-2025-23163](https://patchblox.com/security/data/cve/CVE-2025-23163.md) | Routine | net: vlan: don't propagate flags on open | 5.5 | 0.0016 | | | [CVE-2025-23151](https://patchblox.com/security/data/cve/CVE-2025-23151.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 4.7 | 0.0016 | | | [CVE-2025-23161](https://patchblox.com/security/data/cve/CVE-2025-23161.md) | Routine | PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | 5.5 | 0.0015 | | | [CVE-2025-37985](https://patchblox.com/security/data/cve/CVE-2025-37985.md) | Routine | USB: wdm: close race between wdm_open and wdm_wwan_port_stop | 4.7 | 0.0014 | | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.