# ELSA-2025-20480: Security update for 35 packages ELSA-2025-20480, released July 17, 2025, fixes 1,343 CVEs across 35 products. 3 of them are being exploited (CVE-2024-53197); 3 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20480 - Platform: Linux - Released: Jul 17, 2025 - Priority: Patch now (Closes CVE-2024-53197, exploited (CISA KEV)) - CVEs: 1,343, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20480.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-101.33.4.3.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-101.33.4.3.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-53197](https://patchblox.com/security/data/cve/CVE-2024-53197.md) | Patch now | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0412 | CISA KEV | | [CVE-2024-53104](https://patchblox.com/security/data/cve/CVE-2024-53104.md) | Patch now | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0340 | CISA KEV | | [CVE-2024-53150](https://patchblox.com/security/data/cve/CVE-2024-53150.md) | Patch now | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.1 | 0.0135 | CISA KEV | | [CVE-2024-53177](https://patchblox.com/security/data/cve/CVE-2024-53177.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_d... | 9.8 | 0.0055 | | | [CVE-2025-22088](https://patchblox.com/security/data/cve/CVE-2025-22088.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_acce... | 9.8 | 0.0054 | | | [CVE-2025-22037](https://patchblox.com/security/data/cve/CVE-2025-22037.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_pre... | 7.5 | 0.6876 | | | [CVE-2025-21760](https://patchblox.com/security/data/cve/CVE-2025-21760.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb()... | 8.1 | 0.3800 | | | [CVE-2025-37924](https://patchblox.com/security/data/cve/CVE-2025-37924.md) | High | ksmbd: fix use-after-free in kerberos authentication | 7.8 | 0.2455 | | | [CVE-2025-21759](https://patchblox.com/security/data/cve/CVE-2025-21759.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0780 | | | [CVE-2016-5244](https://patchblox.com/security/data/cve/CVE-2016-5244.md) | High | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | 7.5 | 0.0552 | | | [CVE-2019-11815](https://patchblox.com/security/data/cve/CVE-2019-11815.md) | High | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | 8.1 | 0.0444 | | | [CVE-2022-28733](https://patchblox.com/security/data/cve/CVE-2022-28733.md) | High | grub-efi-amd64: Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in gru... | 8.1 | 0.0127 | | | [CVE-2025-37778](https://patchblox.com/security/data/cve/CVE-2025-37778.md) | High | ksmbd: Fix dangling pointer in krb_authenticate | 7.8 | 0.0116 | | | [CVE-2022-28734](https://patchblox.com/security/data/cve/CVE-2022-28734.md) | High | grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... | 8.1 | 0.0112 | | | [CVE-2012-3430](https://patchblox.com/security/data/cve/CVE-2012-3430.md) | High | kernel-uek64k-devel: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | n/a | 0.0095 | | | [CVE-2025-21756](https://patchblox.com/security/data/cve/CVE-2025-21756.md) | High | perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0089 | | | [CVE-2025-37899](https://patchblox.com/security/data/cve/CVE-2025-37899.md) | High | ksmbd: fix use-after-free in session logoff | 7.8 | 0.0088 | | | [CVE-2025-22039](https://patchblox.com/security/data/cve/CVE-2025-22039.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check... | 7.1 | 0.0079 | | | [CVE-2024-57791](https://patchblox.com/security/data/cve/CVE-2024-57791.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when... | 7.5 | 0.0077 | | | [CVE-2025-37928](https://patchblox.com/security/data/cve/CVE-2025-37928.md) | High | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 | | | [CVE-2025-37879](https://patchblox.com/security/data/cve/CVE-2025-37879.md) | High | 9p/net: fix improper handling of bogus negative read/write replies | 7.1 | 0.0072 | | | [CVE-2024-56644](https://patchblox.com/security/data/cve/CVE-2024-56644.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.0071 | | | [CVE-2025-22040](https://patchblox.com/security/data/cve/CVE-2025-22040.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichanne... | 8.8 | 0.0070 | | | [CVE-2025-22041](https://patchblox.com/security/data/cve/CVE-2025-22041.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_dere... | 8.8 | 0.0070 | | | [CVE-2024-56626](https://patchblox.com/security/data/cve/CVE-2024-56626.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stre... | 7.8 | 0.0070 | | | [CVE-2024-56645](https://patchblox.com/security/data/cve/CVE-2024-56645.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0068 | | | [CVE-2025-21796](https://patchblox.com/security/data/cve/CVE-2025-21796.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0067 | | | [CVE-2025-21795](https://patchblox.com/security/data/cve/CVE-2025-21795.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0067 | | | [CVE-2025-21762](https://patchblox.com/security/data/cve/CVE-2025-21762.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit(... | 8.1 | 0.0066 | | | [CVE-2025-37947](https://patchblox.com/security/data/cve/CVE-2025-37947.md) | High | ksmbd: prevent out-of-bounds stream writes by validating *pos | 7.8 | 0.0066 | | | [CVE-2024-53206](https://patchblox.com/security/data/cve/CVE-2024-53206.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_h... | 7.8 | 0.0063 | | | [CVE-2024-56627](https://patchblox.com/security/data/cve/CVE-2024-56627.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_strea... | 7.1 | 0.0063 | | | [CVE-2025-21927](https://patchblox.com/security/data/cve/CVE-2025-21927.md) | High | nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() | 8.0 | 0.0062 | | | [CVE-2025-21844](https://patchblox.com/security/data/cve/CVE-2025-21844.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0062 | | | [CVE-2024-56640](https://patchblox.com/security/data/cve/CVE-2024-56640.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0062 | | | [CVE-2025-21692](https://patchblox.com/security/data/cve/CVE-2025-21692.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Y... | 7.8 | 0.0062 | | | [CVE-2024-53179](https://patchblox.com/security/data/cve/CVE-2024-53179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key... | 7.8 | 0.0062 | | | [CVE-2025-21765](https://patchblox.com/security/data/cve/CVE-2025-21765.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0061 | | | [CVE-2024-56662](https://patchblox.com/security/data/cve/CVE-2024-56662.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nf... | 7.8 | 0.0061 | | | [CVE-2025-22038](https://patchblox.com/security/data/cve/CVE-2025-22038.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth... | 7.1 | 0.0059 | | | [CVE-2025-38035](https://patchblox.com/security/data/cve/CVE-2025-38035.md) | High | nvmet-tcp: don't restore null sk_state_change | 7.5 | 0.0057 | | | [CVE-2025-37926](https://patchblox.com/security/data/cve/CVE-2025-37926.md) | High | ksmbd: fix use-after-free in ksmbd_session_rpc_open | 7.8 | 0.0057 | | | [CVE-2025-37917](https://patchblox.com/security/data/cve/CVE-2025-37917.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0056 | | | [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 | | | [CVE-2025-38001](https://patchblox.com/security/data/cve/CVE-2025-38001.md) | High | net_sched: hfsc: Address reentrant enqueue adding class to eltree twice | 7.8 | 0.0056 | | | [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 | | | [CVE-2025-21945](https://patchblox.com/security/data/cve/CVE-2025-21945.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_l... | 7.8 | 0.0053 | | | [CVE-2015-6937](https://patchblox.com/security/data/cve/CVE-2015-6937.md) | High | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | n/a | 0.0052 | | | [CVE-2024-58087](https://patchblox.com/security/data/cve/CVE-2024-58087.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and ex... | 8.1 | 0.0051 | | | [CVE-2025-37750](https://patchblox.com/security/data/cve/CVE-2025-37750.md) | High | smb: client: fix UAF in decryption with multichannel | 7.8 | 0.0050 | | | [CVE-2025-21946](https://patchblox.com/security/data/cve/CVE-2025-21946.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If... | 7.1 | 0.0050 | | | [CVE-2025-37935](https://patchblox.com/security/data/cve/CVE-2025-37935.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4... | 7.0 | 0.0050 | | | [CVE-2025-37894](https://patchblox.com/security/data/cve/CVE-2025-37894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIM... | 7.0 | 0.0049 | | | [CVE-2021-3696](https://patchblox.com/security/data/cve/CVE-2021-3696.md) | High | grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... | 8.1 | 0.0048 | | | [CVE-2025-38018](https://patchblox.com/security/data/cve/CVE-2025-38018.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0048 | | | [CVE-2021-3695](https://patchblox.com/security/data/cve/CVE-2021-3695.md) | High | grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... | 8.1 | 0.0048 | | | [CVE-2021-3697](https://patchblox.com/security/data/cve/CVE-2021-3697.md) | High | grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... | 8.1 | 0.0047 | | | [CVE-2025-38075](https://patchblox.com/security/data/cve/CVE-2025-38075.md) | High | scsi: target: iscsi: Fix timeout on deleted connection | 7.0 | 0.0046 | | | [CVE-2024-53186](https://patchblox.com/security/data/cve/CVE-2024-53186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handlin... | 7.0 | 0.0046 | | | [CVE-2024-28956](https://patchblox.com/security/data/cve/CVE-2024-28956.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0043 | | | [CVE-2025-21829](https://patchblox.com/security/data/cve/CVE-2025-21829.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0041 | | | [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 | | | [CVE-2024-53141](https://patchblox.com/security/data/cve/CVE-2024-53141.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: h... | 7.8 | 0.0040 | | | [CVE-2025-21967](https://patchblox.com/security/data/cve/CVE-2025-21967.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_str... | 7.8 | 0.0038 | | | [CVE-2025-21735](https://patchblox.com/security/data/cve/CVE-2025-21735.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_... | 7.8 | 0.0038 | | | [CVE-2025-22077](https://patchblox.com/security/data/cve/CVE-2025-22077.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock aft... | 7.1 | 0.0038 | | | [CVE-2025-37777](https://patchblox.com/security/data/cve/CVE-2025-37777.md) | High | ksmbd: fix use-after-free in __smb2_lease_break_noti() | 7.8 | 0.0038 | | | [CVE-2025-37952](https://patchblox.com/security/data/cve/CVE-2025-37952.md) | High | ksmbd: Fix UAF in __close_file_table_ids | 7.8 | 0.0037 | | | [CVE-2025-21704](https://patchblox.com/security/data/cve/CVE-2025-21704.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size... | 7.8 | 0.0037 | | | [CVE-2025-37954](https://patchblox.com/security/data/cve/CVE-2025-37954.md) | High | smb: client: Avoid race in open_cached_dir with lease breaks | 7.0 | 0.0037 | | | [CVE-2025-37799](https://patchblox.com/security/data/cve/CVE-2025-37799.md) | High | kpatch-patch-5_14_0-570_17_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 9.4 | 0.0037 | | | [CVE-2025-22004](https://patchblox.com/security/data/cve/CVE-2025-22004.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The... | 8.6 | 0.0036 | | | [CVE-2025-37776](https://patchblox.com/security/data/cve/CVE-2025-37776.md) | High | ksmbd: fix use-after-free in smb_break_all_levII_oplock() | 7.0 | 0.0036 | | | [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 | | | [CVE-2025-37840](https://patchblox.com/security/data/cve/CVE-2025-37840.md) | High | mtd: rawnand: brcmnand: fix PM resume warning | 7.8 | 0.0033 | | | [CVE-2024-56651](https://patchblox.com/security/data/cve/CVE-2024-56651.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use... | 7.8 | 0.0033 | | | [CVE-2025-37861](https://patchblox.com/security/data/cve/CVE-2025-37861.md) | High | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | 7.8 | 0.0033 | | | [CVE-2024-53171](https://patchblox.com/security/data/cve/CVE-2024-53171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubi... | 7.8 | 0.0032 | | | [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64k-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0032 | | | [CVE-2024-57899](https://patchblox.com/security/data/cve/CVE-2024-57899.md) | High | wifi: mac80211: fix mbss changed flags corruption on 32 bit systems | 7.8 | 0.0032 | | | [CVE-2024-53237](https://patchblox.com/security/data/cve/CVE-2024-53237.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0032 | | | [CVE-2022-28735](https://patchblox.com/security/data/cve/CVE-2022-28735.md) | High | grub-efi-arm64: The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems | 8.1 | 0.0032 | | | [CVE-2025-37885](https://patchblox.com/security/data/cve/CVE-2025-37885.md) | High | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 | | | [CVE-2024-57986](https://patchblox.com/security/data/cve/CVE-2024-57986.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0032 | | | [CVE-2025-37858](https://patchblox.com/security/data/cve/CVE-2025-37858.md) | High | fs/jfs: Prevent integer overflow in AG size calculation | 7.8 | 0.0031 | | | [CVE-2025-37785](https://patchblox.com/security/data/cve/CVE-2025-37785.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.0031 | | | [CVE-2024-53241](https://patchblox.com/security/data/cve/CVE-2024-53241.md) | High | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.8 | 0.0031 | | | [CVE-2024-56653](https://patchblox.com/security/data/cve/CVE-2024-56653.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0031 | | | [CVE-2024-58006](https://patchblox.com/security/data/cve/CVE-2024-58006.md) | High | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() | 7.8 | 0.0031 | | | [CVE-2025-21703](https://patchblox.com/security/data/cve/CVE-2025-21703.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | | | [CVE-2025-37752](https://patchblox.com/security/data/cve/CVE-2025-37752.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | | | [CVE-2025-37882](https://patchblox.com/security/data/cve/CVE-2025-37882.md) | High | usb: xhci: Fix isochronous Ring Underrun/Overrun event handling | 7.8 | 0.0030 | | | [CVE-2025-22035](https://patchblox.com/security/data/cve/CVE-2025-22035.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | | | [CVE-2025-22063](https://patchblox.com/security/data/cve/CVE-2025-22063.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | | | [CVE-2025-38003](https://patchblox.com/security/data/cve/CVE-2025-38003.md) | High | can: bcm: add missing rcu read protection for procfs content | 7.0 | 0.0030 | | | [CVE-2025-39735](https://patchblox.com/security/data/cve/CVE-2025-39735.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() Du... | 7.1 | 0.0030 | | | [CVE-2025-37927](https://patchblox.com/security/data/cve/CVE-2025-37927.md) | High | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 | | | [CVE-2024-53239](https://patchblox.com/security/data/cve/CVE-2024-53239.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release... | 7.8 | 0.0029 | | | [CVE-2024-56631](https://patchblox.com/security/data/cve/CVE-2024-56631.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0029 | | | [CVE-2025-37846](https://patchblox.com/security/data/cve/CVE-2025-37846.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a se... | 7.1 | 0.0029 | | | [CVE-2022-28736](https://patchblox.com/security/data/cve/CVE-2022-28736.md) | High | grub-efi-arm64: There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up... | 8.1 | 0.0029 | | | [CVE-2025-21782](https://patchblox.com/security/data/cve/CVE-2025-21782.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0029 | | | [CVE-2025-21647](https://patchblox.com/security/data/cve/CVE-2025-21647.md) | High | kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 | | | [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 | | | [CVE-2024-56633](https://patchblox.com/security/data/cve/CVE-2024-56633.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bp... | 7.8 | 0.0028 | | | [CVE-2025-37863](https://patchblox.com/security/data/cve/CVE-2025-37863.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlay... | 7.0 | 0.0028 | | | [CVE-2025-21864](https://patchblox.com/security/data/cve/CVE-2025-21864.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0028 | | | [CVE-2025-37869](https://patchblox.com/security/data/cve/CVE-2025-37869.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migra... | 7.8 | 0.0028 | | | [CVE-2025-38479](https://patchblox.com/security/data/cve/CVE-2025-38479.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remov... | 7.8 | 0.0028 | | | [CVE-2025-38004](https://patchblox.com/security/data/cve/CVE-2025-38004.md) | High | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 | | | [CVE-2025-37878](https://patchblox.com/security/data/cve/CVE-2025-37878.md) | High | perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init | 7.0 | 0.0028 | | | [CVE-2024-53203](https://patchblox.com/security/data/cve/CVE-2024-53203.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0027 | | | [CVE-2025-37822](https://patchblox.com/security/data/cve/CVE-2025-37822.md) | High | riscv: uprobes: Add missing fence.i after building the XOL buffer | 7.8 | 0.0027 | | | [CVE-2024-57980](https://patchblox.com/security/data/cve/CVE-2024-57980.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0027 | | | [CVE-2025-21785](https://patchblox.com/security/data/cve/CVE-2025-21785.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 | | | [CVE-2024-57996](https://patchblox.com/security/data/cve/CVE-2024-57996.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit... | 7.0 | 0.0027 | | | [CVE-2024-56672](https://patchblox.com/security/data/cve/CVE-2024-56672.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0027 | | | [CVE-2025-21722](https://patchblox.com/security/data/cve/CVE-2025-21722.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is re... | 7.8 | 0.0027 | | | [CVE-2025-21787](https://patchblox.com/security/data/cve/CVE-2025-21787.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0027 | | | [CVE-2025-37845](https://patchblox.com/security/data/cve/CVE-2025-37845.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modu... | 7.8 | 0.0027 | | | [CVE-2024-56709](https://patchblox.com/security/data/cve/CVE-2024-56709.md) | High | io_uring: check if iowq is killed before queuing | 7.8 | 0.0027 | | | [CVE-2024-57901](https://patchblox.com/security/data/cve/CVE-2024-57901.md) | High | kernel-64k-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2024-57902](https://patchblox.com/security/data/cve/CVE-2024-57902.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2025-21764](https://patchblox.com/security/data/cve/CVE-2025-21764.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: U... | 7.8 | 0.0027 | | | [CVE-2024-56650](https://patchblox.com/security/data/cve/CVE-2024-56650.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_... | 7.1 | 0.0027 | | | [CVE-2024-56538](https://patchblox.com/security/data/cve/CVE-2024-56538.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_kms: Unplug DRM device before remova... | 7.8 | 0.0027 | | | [CVE-2024-57979](https://patchblox.com/security/data/cve/CVE-2024-57979.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0027 | | | [CVE-2024-57981](https://patchblox.com/security/data/cve/CVE-2024-57981.md) | High | kernel-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2025-21791](https://patchblox.com/security/data/cve/CVE-2025-21791.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2025-21745](https://patchblox.com/security/data/cve/CVE-2025-21745.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0027 | | | [CVE-2025-37854](https://patchblox.com/security/data/cve/CVE-2025-37854.md) | High | drm/amdkfd: Fix mode1 reset crash issue | 7.8 | 0.0027 | | | [CVE-2024-53173](https://patchblox.com/security/data/cve/CVE-2024-53173.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0027 | | | [CVE-2024-53227](https://patchblox.com/security/data/cve/CVE-2024-53227.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfad_im_module_... | 7.8 | 0.0027 | | | [CVE-2024-57857](https://patchblox.com/security/data/cve/CVE-2024-57857.md) | High | RDMA/siw: Remove direct link to net_device | 7.8 | 0.0027 | | | [CVE-2024-58020](https://patchblox.com/security/data/cve/CVE-2024-58020.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0026 | | | [CVE-2024-57911](https://patchblox.com/security/data/cve/CVE-2024-57911.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix informa... | 7.1 | 0.0026 | | | [CVE-2024-57912](https://patchblox.com/security/data/cve/CVE-2024-57912.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in... | 7.1 | 0.0026 | | | [CVE-2024-57951](https://patchblox.com/security/data/cve/CVE-2024-57951.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug... | 7.8 | 0.0026 | | | [CVE-2024-58055](https://patchblox.com/security/data/cve/CVE-2024-58055.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediate... | 7.8 | 0.0026 | | | [CVE-2025-21780](https://patchblox.com/security/data/cve/CVE-2025-21780.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_... | 7.8 | 0.0026 | | | [CVE-2025-37943](https://patchblox.com/security/data/cve/CVE-2025-37943.md) | High | wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi | 8.0 | 0.0026 | | | [CVE-2024-57792](https://patchblox.com/security/data/cve/CVE-2024-57792.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge curr... | 7.8 | 0.0026 | | | [CVE-2025-21696](https://patchblox.com/security/data/cve/CVE-2025-21696.md) | High | mm: clear uffd-wp PTE/PMD state on mremap() | 7.8 | 0.0026 | | | [CVE-2025-21761](https://patchblox.com/security/data/cve/CVE-2025-21761.md) | High | kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0026 | | | [CVE-2025-21763](https://patchblox.com/security/data/cve/CVE-2025-21763.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | | | [CVE-2025-37944](https://patchblox.com/security/data/cve/CVE-2025-37944.md) | High | wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process | 7.8 | 0.0026 | | | [CVE-2025-21753](https://patchblox.com/security/data/cve/CVE-2025-21753.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | | | [CVE-2024-53165](https://patchblox.com/security/data/cve/CVE-2024-53165.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_int... | 7.8 | 0.0026 | | | [CVE-2024-54458](https://patchblox.com/security/data/cve/CVE-2024-54458.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | | | [CVE-2024-56596](https://patchblox.com/security/data/cve/CVE-2024-56596.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfs_readdi... | 7.8 | 0.0026 | | | [CVE-2024-56598](https://patchblox.com/security/data/cve/CVE-2024-56598.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirs... | 7.8 | 0.0026 | | | [CVE-2024-57900](https://patchblox.com/security/data/cve/CVE-2024-57900.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | | | [CVE-2024-50051](https://patchblox.com/security/data/cve/CVE-2024-50051.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module... | 7.8 | 0.0026 | | | [CVE-2024-56608](https://patchblox.com/security/data/cve/CVE-2024-56608.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dc... | 7.8 | 0.0026 | | | [CVE-2025-21969](https://patchblox.com/security/data/cve/CVE-2025-21969.md) | High | Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd | 7.8 | 0.0026 | | | [CVE-2025-40114](https://patchblox.com/security/data/cve/CVE-2025-40114.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml60... | 7.8 | 0.0026 | | | [CVE-2024-53162](https://patchblox.com/security/data/cve/CVE-2024-53162.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get... | 7.1 | 0.0026 | | | [CVE-2024-57929](https://patchblox.com/security/data/cve/CVE-2024-57929.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0026 | | | [CVE-2024-53166](https://patchblox.com/security/data/cve/CVE-2024-53166.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0026 | | | [CVE-2024-53174](https://patchblox.com/security/data/cve/CVE-2024-53174.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0026 | | | [CVE-2024-53214](https://patchblox.com/security/data/cve/CVE-2024-53214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe exten... | 7.8 | 0.0026 | | | [CVE-2024-56615](https://patchblox.com/security/data/cve/CVE-2024-56615.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting element... | 7.8 | 0.0026 | | | [CVE-2024-58002](https://patchblox.com/security/data/cve/CVE-2024-58002.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0026 | | | [CVE-2024-41090](https://patchblox.com/security/data/cve/CVE-2024-41090.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0026 | | | [CVE-2024-41091](https://patchblox.com/security/data/cve/CVE-2024-41091.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0026 | | | [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0026 | | | [CVE-2024-57850](https://patchblox.com/security/data/cve/CVE-2024-57850.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruptio... | 7.8 | 0.0026 | | | [CVE-2025-21976](https://patchblox.com/security/data/cve/CVE-2025-21976.md) | High | fbdev: hyperv_fb: Allow graceful removal of framebuffer | 7.8 | 0.0026 | | | [CVE-2024-58012](https://patchblox.com/security/data/cve/CVE-2024-58012.md) | High | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | 7.8 | 0.0026 | | | [CVE-2025-21811](https://patchblox.com/security/data/cve/CVE-2025-21811.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active... | 7.8 | 0.0026 | | | [CVE-2025-21848](https://patchblox.com/security/data/cve/CVE-2025-21848.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0025 | | | [CVE-2024-57982](https://patchblox.com/security/data/cve/CVE-2024-57982.md) | High | xfrm: state: fix out-of-bounds read during lookup | 7.1 | 0.0025 | | | [CVE-2024-56614](https://patchblox.com/security/data/cve/CVE-2024-56614.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2025-21655](https://patchblox.com/security/data/cve/CVE-2025-21655.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2025-21914](https://patchblox.com/security/data/cve/CVE-2025-21914.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2024-53147](https://patchblox.com/security/data/cve/CVE-2024-53147.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entr... | 7.8 | 0.0025 | | | [CVE-2024-56557](https://patchblox.com/security/data/cve/CVE-2024-56557.md) | High | iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer | 7.8 | 0.0025 | | | [CVE-2024-58005](https://patchblox.com/security/data/cve/CVE-2024-58005.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2025-21650](https://patchblox.com/security/data/cve/CVE-2025-21650.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclge_fetch_pf_reg accesses bar... | 7.8 | 0.0025 | | | [CVE-2025-21846](https://patchblox.com/security/data/cve/CVE-2025-21846.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2025-22055](https://patchblox.com/security/data/cve/CVE-2025-22055.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.0025 | | | [CVE-2024-53168](https://patchblox.com/security/data/cve/CVE-2024-53168.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kerne... | 7.8 | 0.0025 | | | [CVE-2024-56708](https://patchblox.com/security/data/cve/CVE-2024-56708.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module u... | 7.8 | 0.0025 | | | [CVE-2024-57926](https://patchblox.com/security/data/cve/CVE-2024-57926.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->d... | 7.8 | 0.0025 | | | [CVE-2025-39778](https://patchblox.com/security/data/cve/CVE-2025-39778.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access i... | 7.1 | 0.0025 | | | [CVE-2025-21858](https://patchblox.com/security/data/cve/CVE-2025-21858.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 8.8 | 0.0025 | | | [CVE-2024-58007](https://patchblox.com/security/data/cve/CVE-2024-58007.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2025-22079](https://patchblox.com/security/data/cve/CVE-2025-22079.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bou... | 7.1 | 0.0025 | | | [CVE-2025-21812](https://patchblox.com/security/data/cve/CVE-2025-21812.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2024-56595](https://patchblox.com/security/data/cve/CVE-2024-56595.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-b... | 7.8 | 0.0025 | | | [CVE-2024-56600](https://patchblox.com/security/data/cve/CVE-2024-56600.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-56601](https://patchblox.com/security/data/cve/CVE-2024-56601.md) | High | kernel-64k-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-56606](https://patchblox.com/security/data/cve/CVE-2024-56606.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_da... | 7.8 | 0.0025 | | | [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0025 | | | [CVE-2025-37810](https://patchblox.com/security/data/cve/CVE-2025-37810.md) | High | usb: dwc3: gadget: check that event count does not exceed event buffer length | 7.8 | 0.0025 | | | [CVE-2025-37838](https://patchblox.com/security/data/cve/CVE-2025-37838.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerabil... | 7.8 | 0.0025 | | | [CVE-2025-37807](https://patchblox.com/security/data/cve/CVE-2025-37807.md) | High | bpf: Fix kmemleak warning for percpu hashmap | 7.0 | 0.0025 | | | [CVE-2024-53142](https://patchblox.com/security/data/cve/CVE-2024-53142.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2025-21934](https://patchblox.com/security/data/cve/CVE-2025-21934.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2025-37923](https://patchblox.com/security/data/cve/CVE-2025-37923.md) | High | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 | | | [CVE-2025-37891](https://patchblox.com/security/data/cve/CVE-2025-37891.md) | High | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | 7.8 | 0.0025 | | | [CVE-2024-56570](https://patchblox.com/security/data/cve/CVE-2024-56570.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56693](https://patchblox.com/security/data/cve/CVE-2024-56693.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-53191](https://patchblox.com/security/data/cve/CVE-2024-53191.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If the... | 7.8 | 0.0024 | | | [CVE-2024-56558](https://patchblox.com/security/data/cve/CVE-2024-56558.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56642](https://patchblox.com/security/data/cve/CVE-2024-56642.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56704](https://patchblox.com/security/data/cve/CVE-2024-56704.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate... | 7.8 | 0.0024 | | | [CVE-2025-38060](https://patchblox.com/security/data/cve/CVE-2025-38060.md) | High | bpf: copy_verifier_state() should copy 'loop_entry' field | 7.8 | 0.0024 | | | [CVE-2025-21926](https://patchblox.com/security/data/cve/CVE-2025-21926.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0024 | | | [CVE-2025-38016](https://patchblox.com/security/data/cve/CVE-2025-38016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: abort dispatch if device destroyed Th... | 7.0 | 0.0024 | | | [CVE-2024-53192](https://patchblox.com/security/data/cve/CVE-2024-53192.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflo... | 7.8 | 0.0024 | | | [CVE-2024-56605](https://patchblox.com/security/data/cve/CVE-2024-56605.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-57998](https://patchblox.com/security/data/cve/CVE-2024-57998.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0024 | | | [CVE-2025-21714](https://patchblox.com/security/data/cve/CVE-2025-21714.md) | High | RDMA/mlx5: Fix implicit ODP use after free | 7.8 | 0.0024 | | | [CVE-2025-21772](https://patchblox.com/security/data/cve/CVE-2025-21772.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0024 | | | [CVE-2025-38000](https://patchblox.com/security/data/cve/CVE-2025-38000.md) | High | sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() | 7.8 | 0.0024 | | | [CVE-2024-53170](https://patchblox.com/security/data/cve/CVE-2024-53170.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0024 | | | [CVE-2024-58013](https://patchblox.com/security/data/cve/CVE-2024-58013.md) | High | kernel-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 | | | [CVE-2025-21715](https://patchblox.com/security/data/cve/CVE-2025-21715.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm i... | 7.8 | 0.0024 | | | [CVE-2025-21731](https://patchblox.com/security/data/cve/CVE-2025-21731.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Fol... | 7.8 | 0.0024 | | | [CVE-2025-21905](https://patchblox.com/security/data/cve/CVE-2025-21905.md) | High | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: w... | 7.1 | 0.0024 | | | [CVE-2025-22087](https://patchblox.com/security/data/cve/CVE-2025-22087.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0024 | | | [CVE-2024-53208](https://patchblox.com/security/data/cve/CVE-2024-53208.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-53228](https://patchblox.com/security/data/cve/CVE-2024-53228.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: Fix out-of-bounds array access In k... | 7.8 | 0.0024 | | | [CVE-2024-56551](https://patchblox.com/security/data/cve/CVE-2024-56551.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2025-21861](https://patchblox.com/security/data/cve/CVE-2025-21861.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 | | | [CVE-2025-37911](https://patchblox.com/security/data/cve/CVE-2025-37911.md) | High | bnxt_en: Fix out-of-bound memcpy() during ethtool -w | 7.0 | 0.0024 | | | [CVE-2024-56603](https://patchblox.com/security/data/cve/CVE-2024-56603.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 8.1 | 0.0024 | | | [CVE-2024-53103](https://patchblox.com/security/data/cve/CVE-2024-53103.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-53156](https://patchblox.com/security/data/cve/CVE-2024-53156.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-53229](https://patchblox.com/security/data/cve/CVE-2024-53229.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0024 | | | [CVE-2024-53194](https://patchblox.com/security/data/cve/CVE-2024-53194.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56582](https://patchblox.com/security/data/cve/CVE-2024-56582.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_... | 7.8 | 0.0024 | | | [CVE-2024-57990](https://patchblox.com/security/data/cve/CVE-2024-57990.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0024 | | | [CVE-2025-21919](https://patchblox.com/security/data/cve/CVE-2025-21919.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: w... | 7.8 | 0.0024 | | | [CVE-2025-37913](https://patchblox.com/security/data/cve/CVE-2025-37913.md) | High | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 | | | [CVE-2025-37921](https://patchblox.com/security/data/cve/CVE-2025-37921.md) | High | vxlan: vnifilter: Fix unlocked deletion of default FDB entry | 7.8 | 0.0024 | | | [CVE-2024-53155](https://patchblox.com/security/data/cve/CVE-2024-53155.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2_file_rea... | 7.1 | 0.0024 | | | [CVE-2024-57909](https://patchblox.com/security/data/cve/CVE-2024-57909.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in trig... | 7.1 | 0.0024 | | | [CVE-2024-56581](https://patchblox.com/security/data/cve/CVE-2024-56581.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after inva... | 7.8 | 0.0024 | | | [CVE-2024-56658](https://patchblox.com/security/data/cve/CVE-2024-56658.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dism... | 7.8 | 0.0024 | | | [CVE-2024-58034](https://patchblox.com/security/data/cve/CVE-2024-58034.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bu... | 7.8 | 0.0024 | | | [CVE-2025-21726](https://patchblox.com/security/data/cve/CVE-2025-21726.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0024 | | | [CVE-2025-21729](https://patchblox.com/security/data/cve/CVE-2025-21729.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0024 | | | [CVE-2025-37973](https://patchblox.com/security/data/cve/CVE-2025-37973.md) | High | wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation | 7.1 | 0.0024 | | | [CVE-2024-57904](https://patchblox.com/security/data/cve/CVE-2024-57904.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allo... | 7.8 | 0.0024 | | | [CVE-2025-21687](https://patchblox.com/security/data/cve/CVE-2025-21687.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write sy... | 7.8 | 0.0024 | | | [CVE-2025-21928](https://patchblox.com/security/data/cve/CVE-2025-21928.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0024 | | | [CVE-2024-56597](https://patchblox.com/security/data/cve/CVE-2024-56597.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix shift-out-of-bounds in dbSplit When dm... | 7.1 | 0.0024 | | | [CVE-2025-21920](https://patchblox.com/security/data/cve/CVE-2025-21920.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0024 | | | [CVE-2024-58069](https://patchblox.com/security/data/cve/CVE-2024-58069.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-21669](https://patchblox.com/security/data/cve/CVE-2025-21669.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0023 | | | [CVE-2025-21999](https://patchblox.com/security/data/cve/CVE-2025-21999.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: e... | 7.8 | 0.0023 | | | [CVE-2025-21794](https://patchblox.com/security/data/cve/CVE-2025-21794.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds r... | 7.1 | 0.0023 | | | [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 | | | [CVE-2024-56739](https://patchblox.com/security/data/cve/CVE-2024-56739.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0023 | | | [CVE-2024-58093](https://patchblox.com/security/data/cve/CVE-2024-58093.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0023 | | | [CVE-2025-21700](https://patchblox.com/security/data/cve/CVE-2025-21700.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc fr... | 7.8 | 0.0023 | | | [CVE-2025-21786](https://patchblox.com/security/data/cve/CVE-2025-21786.md) | High | workqueue: Put the pwq after detaching the rescuer from the pool | 7.8 | 0.0023 | | | [CVE-2025-37914](https://patchblox.com/security/data/cve/CVE-2025-37914.md) | High | net_sched: ets: Fix double list add in class with netem as child qdisc | 7.8 | 0.0023 | | | [CVE-2025-37916](https://patchblox.com/security/data/cve/CVE-2025-37916.md) | High | pds_core: remove write-after-free of client_id | 7.8 | 0.0023 | | | [CVE-2024-53213](https://patchblox.com/security/data/cve/CVE-2024-53213.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0023 | | | [CVE-2024-56602](https://patchblox.com/security/data/cve/CVE-2024-56602.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0023 | | | [CVE-2025-38069](https://patchblox.com/security/data/cve/CVE-2025-38069.md) | High | PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops | 7.8 | 0.0023 | | | [CVE-2024-57928](https://patchblox.com/security/data/cve/CVE-2024-57928.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If... | 7.1 | 0.0023 | | | [CVE-2025-37930](https://patchblox.com/security/data/cve/CVE-2025-37930.md) | High | drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | 7.0 | 0.0023 | | | [CVE-2024-57984](https://patchblox.com/security/data/cve/CVE-2024-57984.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-21790](https://patchblox.com/security/data/cve/CVE-2025-21790.md) | High | kernel-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-22058](https://patchblox.com/security/data/cve/CVE-2025-22058.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... | 7.3 | 0.0023 | | | [CVE-2025-21789](https://patchblox.com/security/data/cve/CVE-2025-21789.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum c... | 7.1 | 0.0023 | | | [CVE-2025-38023](https://patchblox.com/security/data/cve/CVE-2025-38023.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0023 | | | [CVE-2025-38065](https://patchblox.com/security/data/cve/CVE-2025-38065.md) | High | orangefs: Do not truncate file size | 7.0 | 0.0023 | | | [CVE-2024-53161](https://patchblox.com/security/data/cve/CVE-2024-53161.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: E... | 7.9 | 0.0023 | | | [CVE-2024-53680](https://patchblox.com/security/data/cve/CVE-2024-53680.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0023 | | | [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 | | | [CVE-2025-38024](https://patchblox.com/security/data/cve/CVE-2025-38024.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0023 | | | [CVE-2024-56663](https://patchblox.com/security/data/cve/CVE-2024-56663.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0023 | | | [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 | | | [CVE-2024-56721](https://patchblox.com/security/data/cve/CVE-2024-56721.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 7.3 | 0.0023 | | | [CVE-2024-41935](https://patchblox.com/security/data/cve/CVE-2024-41935.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches... | 7.1 | 0.0023 | | | [CVE-2025-37958](https://patchblox.com/security/data/cve/CVE-2025-37958.md) | High | mm/huge_memory: fix dereferencing invalid pmd migration entry | 7.1 | 0.0023 | | | [CVE-2024-56609](https://patchblox.com/security/data/cve/CVE-2024-56609.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: use ieee80211_purge_tx_queue() to p... | 7.8 | 0.0023 | | | [CVE-2024-56638](https://patchblox.com/security/data/cve/CVE-2024-56638.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0023 | | | [CVE-2025-21806](https://patchblox.com/security/data/cve/CVE-2025-21806.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0023 | | | [CVE-2025-37991](https://patchblox.com/security/data/cve/CVE-2025-37991.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed th... | 7.8 | 0.0023 | | | [CVE-2024-54031](https://patchblox.com/security/data/cve/CVE-2024-54031.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read o... | 7.1 | 0.0023 | | | [CVE-2024-56594](https://patchblox.com/security/data/cve/CVE-2024-56594.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limi... | 7.0 | 0.0023 | | | [CVE-2024-53193](https://patchblox.com/security/data/cve/CVE-2024-53193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix memory corruption bug in... | 7.8 | 0.0023 | | | [CVE-2024-54456](https://patchblox.com/security/data/cve/CVE-2024-54456.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0023 | | | [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 | | | [CVE-2025-38077](https://patchblox.com/security/data/cve/CVE-2025-38077.md) | High | platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() | 7.8 | 0.0023 | | | [CVE-2024-49570](https://patchblox.com/security/data/cve/CVE-2024-49570.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0023 | | | [CVE-2024-56678](https://patchblox.com/security/data/cve/CVE-2024-56678.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reportin... | 7.8 | 0.0023 | | | [CVE-2025-21991](https://patchblox.com/security/data/cve/CVE-2025-21991.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.8 | 0.0023 | | | [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 | | | [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 | | | [CVE-2025-37915](https://patchblox.com/security/data/cve/CVE-2025-37915.md) | High | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 | | | [CVE-2024-53182](https://patchblox.com/security/data/cve/CVE-2024-53182.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Revert "block, bfq: merge bfq_release_process_re... | 7.8 | 0.0022 | | | [CVE-2024-56604](https://patchblox.com/security/data/cve/CVE-2024-56604.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0022 | | | [CVE-2024-57801](https://patchblox.com/security/data/cve/CVE-2024-57801.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep w... | 7.8 | 0.0022 | | | [CVE-2024-58083](https://patchblox.com/security/data/cve/CVE-2024-58083.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0022 | | | [CVE-2025-21680](https://patchblox.com/security/data/cve/CVE-2025-21680.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21738](https://patchblox.com/security/data/cve/CVE-2025-21738.md) | High | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 7.8 | 0.0022 | | | [CVE-2025-21856](https://patchblox.com/security/data/cve/CVE-2025-21856.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0022 | | | [CVE-2025-23158](https://patchblox.com/security/data/cve/CVE-2025-23158.md) | High | media: venus: hfi: add check to handle incorrect queue size | 7.8 | 0.0022 | | | [CVE-2025-23156](https://patchblox.com/security/data/cve/CVE-2025-23156.md) | High | media: venus: hfi_parser: refactor hfi packet parsing logic | 7.1 | 0.0022 | | | [CVE-2025-23157](https://patchblox.com/security/data/cve/CVE-2025-23157.md) | High | media: venus: hfi_parser: add check to avoid out of bound access | 7.1 | 0.0022 | | | [CVE-2024-53222](https://patchblox.com/security/data/cve/CVE-2024-53222.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0022 | | | [CVE-2024-58014](https://patchblox.com/security/data/cve/CVE-2024-58014.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21739](https://patchblox.com/security/data/cve/CVE-2025-21739.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0022 | | | [CVE-2025-21828](https://patchblox.com/security/data/cve/CVE-2025-21828.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21887](https://patchblox.com/security/data/cve/CVE-2025-21887.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0022 | | | [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 | | | [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 | | | [CVE-2024-53216](https://patchblox.com/security/data/cve/CVE-2024-53216.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work... | 7.8 | 0.0022 | | | [CVE-2024-53218](https://patchblox.com/security/data/cve/CVE-2024-53218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fs_stop_gc_thread... | 7.8 | 0.0022 | | | [CVE-2024-56766](https://patchblox.com/security/data/cve/CVE-2024-56766.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_cre... | 7.8 | 0.0022 | | | [CVE-2024-57795](https://patchblox.com/security/data/cve/CVE-2024-57795.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device... | 7.8 | 0.0022 | | | [CVE-2024-57798](https://patchblox.com/security/data/cve/CVE-2024-57798.md) | High | drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | 7.8 | 0.0022 | | | [CVE-2025-21727](https://patchblox.com/security/data/cve/CVE-2025-21727.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... | 7.8 | 0.0022 | | | [CVE-2025-22097](https://patchblox.com/security/data/cve/CVE-2025-22097.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0022 | | | [CVE-2025-37890](https://patchblox.com/security/data/cve/CVE-2025-37890.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 | | | [CVE-2024-56759](https://patchblox.com/security/data/cve/CVE-2024-56759.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock... | 7.8 | 0.0022 | | | [CVE-2025-37979](https://patchblox.com/security/data/cve/CVE-2025-37979.md) | High | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | 7.8 | 0.0022 | | | [CVE-2025-37995](https://patchblox.com/security/data/cve/CVE-2025-37995.md) | High | module: ensure that kobject_put() is safe for module type kobjects | 7.0 | 0.0022 | | | [CVE-2024-41149](https://patchblox.com/security/data/cve/CVE-2024-41149.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse `hctx` not removed from cp... | 7.8 | 0.0022 | | | [CVE-2024-56541](https://patchblox.com/security/data/cve/CVE-2024-56541.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0022 | | | [CVE-2024-57892](https://patchblox.com/security/data/cve/CVE-2024-57892.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling p... | 7.8 | 0.0022 | | | [CVE-2025-21741](https://patchblox.com/security/data/cve/CVE-2025-21741.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21742](https://patchblox.com/security/data/cve/CVE-2025-21742.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21648](https://patchblox.com/security/data/cve/CVE-2025-21648.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0022 | | | [CVE-2025-21993](https://patchblox.com/security/data/cve/CVE-2025-21993.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0022 | | | [CVE-2025-37936](https://patchblox.com/security/data/cve/CVE-2025-37936.md) | High | perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. | 7.0 | 0.0022 | | | [CVE-2024-57987](https://patchblox.com/security/data/cve/CVE-2024-57987.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2024-57988](https://patchblox.com/security/data/cve/CVE-2024-57988.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2024-57989](https://patchblox.com/security/data/cve/CVE-2024-57989.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21847](https://patchblox.com/security/data/cve/CVE-2025-21847.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2024-57906](https://patchblox.com/security/data/cve/CVE-2024-57906.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in tr... | 7.1 | 0.0022 | | | [CVE-2024-57908](https://patchblox.com/security/data/cve/CVE-2024-57908.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in trigger... | 7.1 | 0.0022 | | | [CVE-2024-57910](https://patchblox.com/security/data/cve/CVE-2024-57910.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in tr... | 7.1 | 0.0022 | | | [CVE-2025-38051](https://patchblox.com/security/data/cve/CVE-2025-38051.md) | High | smb: client: Fix use-after-free in cifs_fill_dirent | 7.1 | 0.0022 | | | [CVE-2024-56561](https://patchblox.com/security/data/cve/CVE-2024-56561.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix PCI domain ID release in pci_... | 7.8 | 0.0022 | | | [CVE-2024-56684](https://patchblox.com/security/data/cve/CVE-2024-56684.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cm... | 7.8 | 0.0022 | | | [CVE-2024-57917](https://patchblox.com/security/data/cve/CVE-2024-57917.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printi... | 7.8 | 0.0022 | | | [CVE-2025-37817](https://patchblox.com/security/data/cve/CVE-2025-37817.md) | High | mcb: fix a double free bug in chameleon_parse_gdd() | 7.8 | 0.0022 | | | [CVE-2025-38005](https://patchblox.com/security/data/cve/CVE-2025-38005.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0022 | | | [CVE-2025-21671](https://patchblox.com/security/data/cve/CVE-2025-21671.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21743](https://patchblox.com/security/data/cve/CVE-2025-21743.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-21857](https://patchblox.com/security/data/cve/CVE-2025-21857.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2025-37738](https://patchblox.com/security/data/cve/CVE-2025-37738.md) | High | ext4: ignore xattrs past end | 7.8 | 0.0022 | | | [CVE-2024-57838](https://patchblox.com/security/data/cve/CVE-2024-57838.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot... | 7.1 | 0.0022 | | | [CVE-2024-56616](https://patchblox.com/security/data/cve/CVE-2024-56616.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0022 | | | [CVE-2024-56695](https://patchblox.com/security/data/cve/CVE-2024-56695.md) | High | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | 7.8 | 0.0022 | | | [CVE-2025-38079](https://patchblox.com/security/data/cve/CVE-2025-38079.md) | High | crypto: algif_hash - fix double free in hash_accept | 7.8 | 0.0022 | | | [CVE-2024-57907](https://patchblox.com/security/data/cve/CVE-2024-57907.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak... | 7.1 | 0.0022 | | | [CVE-2024-57923](https://patchblox.com/security/data/cve/CVE-2024-57923.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW... | 7.1 | 0.0022 | | | [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 | | | [CVE-2024-51729](https://patchblox.com/security/data/cve/CVE-2024-51729.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copy_user_gigantic_pa... | 7.8 | 0.0021 | | | [CVE-2024-52319](https://patchblox.com/security/data/cve/CVE-2024-52319.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in clear_gigantic_page()... | 7.8 | 0.0021 | | | [CVE-2024-56554](https://patchblox.com/security/data/cve/CVE-2024-56554.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: binder: fix freeze UAF in binder_release_work()... | 7.8 | 0.0021 | | | [CVE-2024-56628](https://patchblox.com/security/data/cve/CVE-2024-56628.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific huge_pte_cl... | 7.8 | 0.0021 | | | [CVE-2024-58072](https://patchblox.com/security/data/cve/CVE-2024-58072.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2025-21728](https://patchblox.com/security/data/cve/CVE-2025-21728.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0021 | | | [CVE-2025-21800](https://patchblox.com/security/data/cve/CVE-2025-21800.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-22020](https://patchblox.com/security/data/cve/CVE-2025-22020.md) | High | kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0021 | | | [CVE-2025-37901](https://patchblox.com/security/data/cve/CVE-2025-37901.md) | High | irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs | 7.0 | 0.0021 | | | [CVE-2024-53143](https://patchblox.com/security/data/cve/CVE-2024-53143.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_obje... | 7.8 | 0.0021 | | | [CVE-2024-56619](https://patchblox.com/security/data/cve/CVE-2024-56619.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory acces... | 7.8 | 0.0021 | | | [CVE-2025-21968](https://patchblox.com/security/data/cve/CVE-2025-21968.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-21979](https://patchblox.com/security/data/cve/CVE-2025-21979.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2024-56669](https://patchblox.com/security/data/cve/CVE-2024-56669.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling A... | 7.8 | 0.0021 | | | [CVE-2024-56699](https://patchblox.com/security/data/cve/CVE-2024-56699.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2024-57896](https://patchblox.com/security/data/cve/CVE-2024-57896.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopp... | 7.8 | 0.0021 | | | [CVE-2025-21966](https://patchblox.com/security/data/cve/CVE-2025-21966.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-22067](https://patchblox.com/security/data/cve/CVE-2025-22067.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in... | 7.8 | 0.0021 | | | [CVE-2025-38019](https://patchblox.com/security/data/cve/CVE-2025-38019.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when... | 7.8 | 0.0021 | | | [CVE-2024-57945](https://patchblox.com/security/data/cve/CVE-2024-57945.md) | High | riscv: mm: Fix the out of bound issue of vmemmap address | 7.1 | 0.0021 | | | [CVE-2025-37905](https://patchblox.com/security/data/cve/CVE-2025-37905.md) | High | firmware: arm_scmi: Balance device refcount when destroying devices | 7.0 | 0.0021 | | | [CVE-2025-21631](https://patchblox.com/security/data/cve/CVE-2025-21631.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0021 | | | [CVE-2025-21867](https://patchblox.com/security/data/cve/CVE-2025-21867.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2024-56555](https://patchblox.com/security/data/cve/CVE-2024-56555.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binder_add_freeze_work() In... | 7.1 | 0.0021 | | | [CVE-2024-56652](https://patchblox.com/security/data/cve/CVE-2024-56652.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Remove register pool That pool i... | 7.8 | 0.0021 | | | [CVE-2024-57993](https://patchblox.com/security/data/cve/CVE-2024-57993.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0021 | | | [CVE-2025-21950](https://patchblox.com/security/data/cve/CVE-2025-21950.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0021 | | | [CVE-2025-37761](https://patchblox.com/security/data/cve/CVE-2025-37761.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidat... | 7.1 | 0.0021 | | | [CVE-2025-37948](https://patchblox.com/security/data/cve/CVE-2025-37948.md) | High | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 7.0 | 0.0021 | | | [CVE-2024-57849](https://patchblox.com/security/data/cve/CVE-2024-57849.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during s... | 8.8 | 0.0021 | | | [CVE-2024-57887](https://patchblox.com/security/data/cve/CVE-2024-57887.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_atta... | 7.8 | 0.0021 | | | [CVE-2025-21883](https://patchblox.com/security/data/cve/CVE-2025-21883.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0021 | | | [CVE-2025-21923](https://patchblox.com/security/data/cve/CVE-2025-21923.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-22083](https://patchblox.com/security/data/cve/CVE-2025-22083.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-37908](https://patchblox.com/security/data/cve/CVE-2025-37908.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab->obj_exts always When m... | 7.8 | 0.0021 | | | [CVE-2025-37934](https://patchblox.com/security/data/cve/CVE-2025-37934.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-37964](https://patchblox.com/security/data/cve/CVE-2025-37964.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may b... | 7.0 | 0.0021 | | | [CVE-2024-56765](https://patchblox.com/security/data/cve/CVE-2024-56765.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close() callback in vas... | 7.8 | 0.0021 | | | [CVE-2025-21652](https://patchblox.com/security/data/cve/CVE-2025-21652.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2025-21750](https://patchblox.com/security/data/cve/CVE-2025-21750.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2025-37892](https://patchblox.com/security/data/cve/CVE-2025-37892.md) | High | mtd: inftlcore: Add error check for inftl_read_oob() | 7.8 | 0.0021 | | | [CVE-2025-37903](https://patchblox.com/security/data/cve/CVE-2025-37903.md) | High | drm/amd/display: Fix slab-use-after-free in hdcp | 7.8 | 0.0021 | | | [CVE-2024-57925](https://patchblox.com/security/data/cve/CVE-2024-57925.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In... | 7.1 | 0.0021 | | | [CVE-2024-56775](https://patchblox.com/security/data/cve/CVE-2024-56775.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount... | 7.8 | 0.0021 | | | [CVE-2025-21915](https://patchblox.com/security/data/cve/CVE-2025-21915.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-21929](https://patchblox.com/security/data/cve/CVE-2025-21929.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-21962](https://patchblox.com/security/data/cve/CVE-2025-21962.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-21963](https://patchblox.com/security/data/cve/CVE-2025-21963.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.3 | 0.0021 | | | [CVE-2025-21997](https://patchblox.com/security/data/cve/CVE-2025-21997.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.0021 | | | [CVE-2025-21964](https://patchblox.com/security/data/cve/CVE-2025-21964.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0021 | | | [CVE-2025-37763](https://patchblox.com/security/data/cve/CVE-2025-37763.md) | High | kernel-syms-azure: The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following securi... | 7.8 | 0.0021 | | | [CVE-2025-37938](https://patchblox.com/security/data/cve/CVE-2025-37938.md) | High | tracing: Verify event formats that have "%*p.." | 7.8 | 0.0021 | | | [CVE-2025-22026](https://patchblox.com/security/data/cve/CVE-2025-22026.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.5 | 0.0021 | | | [CVE-2025-21719](https://patchblox.com/security/data/cve/CVE-2025-21719.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipmr: do not call mr_mfc_uses_dev() for unres en... | 7.1 | 0.0021 | | | [CVE-2024-58060](https://patchblox.com/security/data/cve/CVE-2024-58060.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject struct_ops registration that uses mo... | 7.8 | 0.0021 | | | [CVE-2025-22068](https://patchblox.com/security/data/cve/CVE-2025-22068.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue... | 7.8 | 0.0021 | | | [CVE-2025-22085](https://patchblox.com/security/data/cve/CVE-2025-22085.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device... | 7.8 | 0.0021 | | | [CVE-2024-53236](https://patchblox.com/security/data/cve/CVE-2024-53236.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are inval... | 7.1 | 0.0021 | | | [CVE-2025-38066](https://patchblox.com/security/data/cve/CVE-2025-38066.md) | High | dm cache: prevent BUG_ON by blocking retries on failed device resumes | 7.0 | 0.0021 | | | [CVE-2025-21691](https://patchblox.com/security/data/cve/CVE-2025-21691.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-21734](https://patchblox.com/security/data/cve/CVE-2025-21734.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For no... | 7.8 | 0.0020 | | | [CVE-2025-37897](https://patchblox.com/security/data/cve/CVE-2025-37897.md) | High | wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release | 7.0 | 0.0020 | | | [CVE-2025-37929](https://patchblox.com/security/data/cve/CVE-2025-37929.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0020 | | | [CVE-2024-57977](https://patchblox.com/security/data/cve/CVE-2024-57977.md) | High | kernel-64k-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2024-58003](https://patchblox.com/security/data/cve/CVE-2024-58003.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: i2c: ds90ub9x3: Fix extra fwnode_handle_p... | 7.8 | 0.0020 | | | [CVE-2025-21693](https://patchblox.com/security/data/cve/CVE-2025-21693.md) | High | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 7.8 | 0.0020 | | | [CVE-2025-21771](https://patchblox.com/security/data/cve/CVE-2025-21771.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-21777](https://patchblox.com/security/data/cve/CVE-2025-21777.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-22091](https://patchblox.com/security/data/cve/CVE-2025-22091.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix page_size variable overflow Change... | 7.1 | 0.0020 | | | [CVE-2024-58004](https://patchblox.com/security/data/cve/CVE-2024-58004.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-38013](https://patchblox.com/security/data/cve/CVE-2025-38013.md) | High | kernel-debug-uki-virt: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0020 | | | [CVE-2025-38068](https://patchblox.com/security/data/cve/CVE-2025-38068.md) | High | crypto: lzo - Fix compression buffer overrun | 7.8 | 0.0020 | | | [CVE-2025-38027](https://patchblox.com/security/data/cve/CVE-2025-38027.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0020 | | | [CVE-2025-37963](https://patchblox.com/security/data/cve/CVE-2025-37963.md) | High | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0020 | | | [CVE-2025-38074](https://patchblox.com/security/data/cve/CVE-2025-38074.md) | High | vhost-scsi: protect vq->log_used with vq->mutex | 7.0 | 0.0020 | | | [CVE-2024-56764](https://patchblox.com/security/data/cve/CVE-2024-56764.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_dis... | 7.8 | 0.0020 | | | [CVE-2024-56772](https://patchblox.com/security/data/cve/CVE-2024-56772.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_ini... | 7.8 | 0.0020 | | | [CVE-2024-56784](https://patchblox.com/security/data/cve/CVE-2024-56784.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to pre... | 7.8 | 0.0020 | | | [CVE-2025-37796](https://patchblox.com/security/data/cve/CVE-2025-37796.md) | High | wifi: at76c50x: fix use after free access in at76_disconnect | 7.8 | 0.0020 | | | [CVE-2025-37739](https://patchblox.com/security/data/cve/CVE-2025-37739.md) | High | f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() | 7.1 | 0.0020 | | | [CVE-2025-37900](https://patchblox.com/security/data/cve/CVE-2025-37900.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0020 | | | [CVE-2025-37910](https://patchblox.com/security/data/cve/CVE-2025-37910.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA... | 7.0 | 0.0020 | | | [CVE-2025-37941](https://patchblox.com/security/data/cve/CVE-2025-37941.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory le... | 7.0 | 0.0020 | | | [CVE-2025-21826](https://patchblox.com/security/data/cve/CVE-2025-21826.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-21893](https://patchblox.com/security/data/cve/CVE-2025-21893.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0020 | | | [CVE-2025-22022](https://patchblox.com/security/data/cve/CVE-2025-22022.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0020 | | | [CVE-2025-21985](https://patchblox.com/security/data/cve/CVE-2025-21985.md) | High | drm/amd/display: Fix out-of-bound accesses | 7.1 | 0.0020 | | | [CVE-2025-21983](https://patchblox.com/security/data/cve/CVE-2025-21983.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq... | 7.8 | 0.0020 | | | [CVE-2025-38022](https://patchblox.com/security/data/cve/CVE-2025-38022.md) | High | RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem | 7.8 | 0.0020 | | | [CVE-2025-22036](https://patchblox.com/security/data/cve/CVE-2025-22036.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_bloc... | 7.0 | 0.0020 | | | [CVE-2024-56740](https://patchblox.com/security/data/cve/CVE-2024-56740.md) | High | kernel-uek: [6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.... | 7.8 | 0.0020 | | | [CVE-2025-21869](https://patchblox.com/security/data/cve/CVE-2025-21869.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0020 | | | [CVE-2025-22126](https://patchblox.com/security/data/cve/CVE-2025-22126.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: e... | 7.8 | 0.0020 | | | [CVE-2024-58054](https://patchblox.com/security/data/cve/CVE-2024-58054.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: media: max96712: fix kernel oops when r... | 7.1 | 0.0020 | | | [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 | | | [CVE-2025-22023](https://patchblox.com/security/data/cve/CVE-2025-22023.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0020 | | | [CVE-2025-38015](https://patchblox.com/security/data/cve/CVE-2025-38015.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0020 | | | [CVE-2025-38020](https://patchblox.com/security/data/cve/CVE-2025-38020.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0020 | | | [CVE-2025-38043](https://patchblox.com/security/data/cve/CVE-2025-38043.md) | High | firmware: arm_ffa: Set dma_mask for ffa devices | 7.0 | 0.0020 | | | [CVE-2025-38056](https://patchblox.com/security/data/cve/CVE-2025-38056.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading mo... | 7.8 | 0.0020 | | | [CVE-2025-21973](https://patchblox.com/security/data/cve/CVE-2025-21973.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0020 | | | [CVE-2025-37982](https://patchblox.com/security/data/cve/CVE-2025-37982.md) | High | wifi: wl1251: fix memory leak in wl1251_tx_work | 7.0 | 0.0020 | | | [CVE-2024-57943](https://patchblox.com/security/data/cve/CVE-2024-57943.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before... | 7.8 | 0.0020 | | | [CVE-2025-37946](https://patchblox.com/security/data/cve/CVE-2025-37946.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0020 | | | [CVE-2025-38062](https://patchblox.com/security/data/cve/CVE-2025-38062.md) | High | genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie | 7.8 | 0.0020 | | | [CVE-2025-38040](https://patchblox.com/security/data/cve/CVE-2025-38040.md) | High | serial: mctrl_gpio: split disable_ms into sync and no_sync APIs | 7.0 | 0.0020 | | | [CVE-2025-37786](https://patchblox.com/security/data/cve/CVE-2025-37786.md) | High | net: dsa: free routing table on probe failure | 7.8 | 0.0019 | | | [CVE-2025-37953](https://patchblox.com/security/data/cve/CVE-2025-37953.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0019 | | | [CVE-2025-38014](https://patchblox.com/security/data/cve/CVE-2025-38014.md) | High | dmaengine: idxd: Refactor remove call with idxd_cleanup() helper | 7.0 | 0.0019 | | | [CVE-2025-38045](https://patchblox.com/security/data/cve/CVE-2025-38045.md) | High | wifi: iwlwifi: fix debug actions order | 7.0 | 0.0019 | | | [CVE-2024-58061](https://patchblox.com/security/data/cve/CVE-2024-58061.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | | | [CVE-2025-37957](https://patchblox.com/security/data/cve/CVE-2025-37957.md) | High | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | 7.8 | 0.0019 | | | [CVE-2024-57905](https://patchblox.com/security/data/cve/CVE-2024-57905.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in tr... | 7.1 | 0.0019 | | | [CVE-2025-21815](https://patchblox.com/security/data/cve/CVE-2025-21815.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warn... | 7.1 | 0.0019 | | | [CVE-2025-37987](https://patchblox.com/security/data/cve/CVE-2025-37987.md) | High | pds_core: Prevent possible adminq overflow/stuck condition | 7.0 | 0.0019 | | | [CVE-2025-38053](https://patchblox.com/security/data/cve/CVE-2025-38053.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.1 | 0.0019 | | | [CVE-2024-56635](https://patchblox.com/security/data/cve/CVE-2024-56635.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate()... | 7.0 | 0.0019 | | | [CVE-2025-37972](https://patchblox.com/security/data/cve/CVE-2025-37972.md) | High | Input: mtk-pmic-keys - fix possible null pointer dereference | 7.0 | 0.0019 | | | [CVE-2025-38038](https://patchblox.com/security/data/cve/CVE-2025-38038.md) | High | cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost | 7.0 | 0.0019 | | | [CVE-2025-38054](https://patchblox.com/security/data/cve/CVE-2025-38054.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Limit signal/freq counts in summary ou... | 7.0 | 0.0019 | | | [CVE-2025-38055](https://patchblox.com/security/data/cve/CVE-2025-38055.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0019 | | | [CVE-2024-58068](https://patchblox.com/security/data/cve/CVE-2024-58068.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0019 | | | [CVE-2024-58075](https://patchblox.com/security/data/cve/CVE-2024-58075.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | | | [CVE-2025-21724](https://patchblox.com/security/data/cve/CVE-2025-21724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in... | 7.8 | 0.0019 | | | [CVE-2025-37975](https://patchblox.com/security/data/cve/CVE-2025-37975.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation acce... | 7.1 | 0.0019 | | | [CVE-2025-37951](https://patchblox.com/security/data/cve/CVE-2025-37951.md) | High | drm/v3d: Add job to pending list if the reset was skipped | 7.0 | 0.0019 | | | [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | | | [CVE-2025-37831](https://patchblox.com/security/data/cve/CVE-2025-37831.md) | High | cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() | 7.0 | 0.0019 | | | [CVE-2025-37833](https://patchblox.com/security/data/cve/CVE-2025-37833.md) | High | net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads | 7.0 | 0.0019 | | | [CVE-2025-37960](https://patchblox.com/security/data/cve/CVE-2025-37960.md) | High | memblock: Accept allocated memory before use in memblock_double_array() | 7.0 | 0.0019 | | | [CVE-2025-38071](https://patchblox.com/security/data/cve/CVE-2025-38071.md) | High | x86/mm: Check return value from memblock_phys_alloc_range() | 7.0 | 0.0019 | | | [CVE-2025-37955](https://patchblox.com/security/data/cve/CVE-2025-37955.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_x... | 7.0 | 0.0019 | | | [CVE-2025-37965](https://patchblox.com/security/data/cve/CVE-2025-37965.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0019 | | | [CVE-2025-37971](https://patchblox.com/security/data/cve/CVE-2025-37971.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_... | 7.0 | 0.0019 | | | [CVE-2025-37993](https://patchblox.com/security/data/cve/CVE-2025-37993.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initiali... | 7.0 | 0.0019 | | | [CVE-2025-37999](https://patchblox.com/security/data/cve/CVE-2025-37999.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split()... | 7.0 | 0.0019 | | | [CVE-2024-58077](https://patchblox.com/security/data/cve/CVE-2024-58077.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 | | | [CVE-2024-58088](https://patchblox.com/security/data/cve/CVE-2024-58088.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 | | | [CVE-2025-37969](https://patchblox.com/security/data/cve/CVE-2025-37969.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | 7.0 | 0.0018 | | Showing 500 of 1,343 CVEs; the web page lists them all. --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.