{ "fix": "ELSA-2025-20551", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20551", "summary": "ELSA-2025-20551, released September 8, 2025, fixes 266 CVEs across 35 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "advisory", "title": "Security update for 35 packages", "released": "2025-09-08T00:00:00Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2025-38352, exploited (CISA KEV)", "supported": true, "cveCount": 266, "exploitedCveCount": 1, "kevCveCount": 1, "ransomwareCveCount": 0, "maxEpss": 0.01357, "maxCvss": 8.4, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2025-20551.html", "appliesTo": [ { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-103.40.4.1.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2025-38352", "url": "https://patchblox.com/security/cve/CVE-2025-38352", "title": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()", "priority": "Patch now", "severity": "Moderate", "cvss": 7.8, "epss": 0.01357, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2025-38488", "url": "https://patchblox.com/security/cve/CVE-2025-38488", "title": "kernel-livepatch-SLE15-SP7-RT_Update_0: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues\n\nThe following security...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00772, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38430", "url": "https://patchblox.com/security/cve/CVE-2025-38430", "title": "nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00593, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38439", "url": "https://patchblox.com/security/cve/CVE-2025-38439", "title": "bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00581, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38181", "url": "https://patchblox.com/security/cve/CVE-2025-38181", "title": "calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38399", "url": "https://patchblox.com/security/cve/CVE-2025-38399", "title": "scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00506, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38146", "url": "https://patchblox.com/security/cve/CVE-2025-38146", "title": "net: openvswitch: Fix the dead loop of MPLS parse", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00486, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38124", "url": "https://patchblox.com/security/cve/CVE-2025-38124", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7, "epss": 0.0047, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38471", "url": "https://patchblox.com/security/cve/CVE-2025-38471", "title": "tls: always refresh the queue when reading sock", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00468, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38472", "url": "https://patchblox.com/security/cve/CVE-2025-38472", "title": "netfilter: nf_conntrack: fix crash due to removal of uninitialised entry", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38527", "url": "https://patchblox.com/security/cve/CVE-2025-38527", "title": "smb: client: fix use-after-free in cifs_oplock_break", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38264", "url": "https://patchblox.com/security/cve/CVE-2025-38264", "title": "nvme-tcp: sanitize request list handling", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00447, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38379", "url": "https://patchblox.com/security/cve/CVE-2025-38379", "title": "smb: client: fix warning when reconnecting channel", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00411, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38211", "url": "https://patchblox.com/security/cve/CVE-2025-38211", "title": "RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00406, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38523", "url": "https://patchblox.com/security/cve/CVE-2025-38523", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncifs: Fix the smbd_response slab to allow usercop...", "priority": "High", "severity": "moderate", "cvss": 7.3, "epss": 0.00389, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38495", "url": "https://patchblox.com/security/cve/CVE-2025-38495", "title": "HID: core: ensure the allocated report buffer can contain the reserved report ID", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38552", "url": "https://patchblox.com/security/cve/CVE-2025-38552", "title": "mptcp: plug races between subflow fail and subflow creation", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38293", "url": "https://patchblox.com/security/cve/CVE-2025-38293", "title": "wifi: ath11k: fix node corruption in ar-\u003Earvifs list", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00337, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38350", "url": "https://patchblox.com/security/cve/CVE-2025-38350", "title": "net/sched: Always pass notifications when child class becomes empty", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38236", "url": "https://patchblox.com/security/cve/CVE-2025-38236", "title": "af_unix: Don\u0027t leave consecutive consumed OOB skbs.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00295, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38494", "url": "https://patchblox.com/security/cve/CVE-2025-38494", "title": "HID: core: do not bypass hid_hw_raw_request", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0026, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38244", "url": "https://patchblox.com/security/cve/CVE-2025-38244", "title": "smb: client: fix potential deadlock when reconnecting channels", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38512", "url": "https://patchblox.com/security/cve/CVE-2025-38512", "title": "wifi: prevent A-MSDU attacks in mesh networks", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00249, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38491", "url": "https://patchblox.com/security/cve/CVE-2025-38491", "title": "mptcp: make fallback action and fallback decision atomic", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38279", "url": "https://patchblox.com/security/cve/CVE-2025-38279", "title": "bpf: Do not include stack ptr register in precision backtracking bookkeeping", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38361", "url": "https://patchblox.com/security/cve/CVE-2025-38361", "title": "drm/amd/display: Check dce_hwseq before dereferencing it", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38201", "url": "https://patchblox.com/security/cve/CVE-2025-38201", "title": "netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38466", "url": "https://patchblox.com/security/cve/CVE-2025-38466", "title": "perf: Revert to requiring CAP_SYS_ADMIN for uprobes", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38298", "url": "https://patchblox.com/security/cve/CVE-2025-38298", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault A...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38103", "url": "https://patchblox.com/security/cve/CVE-2025-38103", "title": "HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38096", "url": "https://patchblox.com/security/cve/CVE-2025-38096", "title": "wifi: iwlwifi: don\u0027t warn when if there is a FW error", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38115", "url": "https://patchblox.com/security/cve/CVE-2025-38115", "title": "net_sched: sch_sfq: fix a potential crash on gso_skb handling", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00228, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38147", "url": "https://patchblox.com/security/cve/CVE-2025-38147", "title": "calipso: Don\u0027t call calipso functions for AF_INET sk.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38111", "url": "https://patchblox.com/security/cve/CVE-2025-38111", "title": "net/mdiobus: Fix potential out-of-bounds read/write access", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38194", "url": "https://patchblox.com/security/cve/CVE-2025-38194", "title": "jffs2: check that raw node were preallocated before writing summary", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38372", "url": "https://patchblox.com/security/cve/CVE-2025-38372", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38498", "url": "https://patchblox.com/security/cve/CVE-2025-38498", "title": "do_change_type(): refuse to operate on unmounted/not ours mounts", "priority": "High", "severity": "Moderate", "cvss": 7.9, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38332", "url": "https://patchblox.com/security/cve/CVE-2025-38332", "title": "scsi: lpfc: Use memcpy() for BIOS version", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38415", "url": "https://patchblox.com/security/cve/CVE-2025-38415", "title": "Squashfs: check return result of sb_min_blocksize", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38403", "url": "https://patchblox.com/security/cve/CVE-2025-38403", "title": "vsock/vmci: Clear the vmci transport packet properly when initializing it", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38464", "url": "https://patchblox.com/security/cve/CVE-2025-38464", "title": "tipc: Fix use-after-free in tipc_conn_close().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38328", "url": "https://patchblox.com/security/cve/CVE-2025-38328", "title": "jffs2: check jffs2_prealloc_raw_node_refs() result in few other places", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38324", "url": "https://patchblox.com/security/cve/CVE-2025-38324", "title": "mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38424", "url": "https://patchblox.com/security/cve/CVE-2025-38424", "title": "perf: Fix sample vs do_exit()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38389", "url": "https://patchblox.com/security/cve/CVE-2025-38389", "title": "drm/i915/gt: Fix timeline left held on VMA alloc error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38184", "url": "https://patchblox.com/security/cve/CVE-2025-38184", "title": "tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38095", "url": "https://patchblox.com/security/cve/CVE-2025-38095", "title": "dma-buf: insert memory barrier before updating num_fences", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38100", "url": "https://patchblox.com/security/cve/CVE-2025-38100", "title": "x86/iopl: Cure TIF_IO_BITMAP inconsistencies", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38084", "url": "https://patchblox.com/security/cve/CVE-2025-38084", "title": "mm/hugetlb: unshare page tables during VMA split, not before", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38280", "url": "https://patchblox.com/security/cve/CVE-2025-38280", "title": "bpf: Avoid __bpf_prog_ret0_warn when jit fails", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38323", "url": "https://patchblox.com/security/cve/CVE-2025-38323", "title": "net: atm: add lec_mutex", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38200", "url": "https://patchblox.com/security/cve/CVE-2025-38200", "title": "i40e: fix MMIO write access to an invalid page in i40e_clear_hw", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38386", "url": "https://patchblox.com/security/cve/CVE-2025-38386", "title": "ACPICA: Refuse to evaluate a method if arguments are missing", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38177", "url": "https://patchblox.com/security/cve/CVE-2025-38177", "title": "sch_hfsc: make hfsc_qlen_notify() idempotent", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38267", "url": "https://patchblox.com/security/cve/CVE-2025-38267", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38320", "url": "https://patchblox.com/security/cve/CVE-2025-38320", "title": "arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38375", "url": "https://patchblox.com/security/cve/CVE-2025-38375", "title": "virtio-net: ensure the received length does not exceed allocated size", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38395", "url": "https://patchblox.com/security/cve/CVE-2025-38395", "title": "regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38285", "url": "https://patchblox.com/security/cve/CVE-2025-38285", "title": "bpf: Fix WARN() in get_bpf_raw_tp_regs", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38420", "url": "https://patchblox.com/security/cve/CVE-2025-38420", "title": "wifi: carl9170: do not ping device which has failed to load firmware", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38086", "url": "https://patchblox.com/security/cve/CVE-2025-38086", "title": "net: ch9200: fix uninitialised access during mii_nway_restart", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38180", "url": "https://patchblox.com/security/cve/CVE-2025-38180", "title": "net: atm: fix /proc/net/atm/lec handling", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38459", "url": "https://patchblox.com/security/cve/CVE-2025-38459", "title": "atm: clip: Fix infinite recursive call of clip_push().", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38193", "url": "https://patchblox.com/security/cve/CVE-2025-38193", "title": "net_sched: sch_sfq: reject invalid perturb period", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22112", "url": "https://patchblox.com/security/cve/CVE-2025-22112", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38101", "url": "https://patchblox.com/security/cve/CVE-2025-38101", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38346", "url": "https://patchblox.com/security/cve/CVE-2025-38346", "title": "ftrace: Fix UAF when lookup kallsym after ftrace disabled", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38192", "url": "https://patchblox.com/security/cve/CVE-2025-38192", "title": "net: clear the dst when changing skb protocol", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38363", "url": "https://patchblox.com/security/cve/CVE-2025-38363", "title": "drm/tegra: Fix a possible null pointer dereference", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38110", "url": "https://patchblox.com/security/cve/CVE-2025-38110", "title": "net/mdiobus: Fix potential out-of-bounds clause 45 read/write access", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38348", "url": "https://patchblox.com/security/cve/CVE-2025-38348", "title": "wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38385", "url": "https://patchblox.com/security/cve/CVE-2025-38385", "title": "net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38425", "url": "https://patchblox.com/security/cve/CVE-2025-38425", "title": "i2c: tegra: check msg length in SMBUS block read", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38109", "url": "https://patchblox.com/security/cve/CVE-2025-38109", "title": "net/mlx5: Fix ECVF vports unload on shutdown flow", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38412", "url": "https://patchblox.com/security/cve/CVE-2025-38412", "title": "platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38465", "url": "https://patchblox.com/security/cve/CVE-2025-38465", "title": "netlink: Fix wraparounds of sk-\u003Esk_rmem_alloc.", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38118", "url": "https://patchblox.com/security/cve/CVE-2025-38118", "title": "Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38129", "url": "https://patchblox.com/security/cve/CVE-2025-38129", "title": "page_pool: Fix use-after-free in page_pool_recycle_in_ring", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38396", "url": "https://patchblox.com/security/cve/CVE-2025-38396", "title": "fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38445", "url": "https://patchblox.com/security/cve/CVE-2025-38445", "title": "md/raid1: Fix stack memory use after return in raid1_reshape", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38126", "url": "https://patchblox.com/security/cve/CVE-2025-38126", "title": "net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38212", "url": "https://patchblox.com/security/cve/CVE-2025-38212", "title": "ipc: fix to protect IPCS lookups using RCU", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38270", "url": "https://patchblox.com/security/cve/CVE-2025-38270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don\u0027t napi_complete() from...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38125", "url": "https://patchblox.com/security/cve/CVE-2025-38125", "title": "net: stmmac: make sure that ptp_rate is not 0 before configuring EST", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38141", "url": "https://patchblox.com/security/cve/CVE-2025-38141", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38288", "url": "https://patchblox.com/security/cve/CVE-2025-38288", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38113", "url": "https://patchblox.com/security/cve/CVE-2025-38113", "title": "ACPI: CPPC: Fix NULL pointer dereference when nosmp is used", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38119", "url": "https://patchblox.com/security/cve/CVE-2025-38119", "title": "scsi: core: ufs: Fix a hang in the error handler", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38413", "url": "https://patchblox.com/security/cve/CVE-2025-38413", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame\u0027s length chec...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38090", "url": "https://patchblox.com/security/cve/CVE-2025-38090", "title": "drivers/rapidio/rio_cm.c: prevent possible heap overwrite", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38106", "url": "https://patchblox.com/security/cve/CVE-2025-38106", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38468", "url": "https://patchblox.com/security/cve/CVE-2025-38468", "title": "net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38457", "url": "https://patchblox.com/security/cve/CVE-2025-38457", "title": "net/sched: Abort __tc_modify_qdisc if parent class does not exist", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38458", "url": "https://patchblox.com/security/cve/CVE-2025-38458", "title": "atm: clip: Fix NULL pointer dereference in vcc_sendmsg()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38157", "url": "https://patchblox.com/security/cve/CVE-2025-38157", "title": "wifi: ath9k_htc: Abort software beacon handling if disabled", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38161", "url": "https://patchblox.com/security/cve/CVE-2025-38161", "title": "RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38197", "url": "https://patchblox.com/security/cve/CVE-2025-38197", "title": "platform/x86: dell_rbu: Fix list usage", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38342", "url": "https://patchblox.com/security/cve/CVE-2025-38342", "title": "software node: Correct a OOB check in software_node_get_reference_args()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38099", "url": "https://patchblox.com/security/cve/CVE-2025-38099", "title": "Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38154", "url": "https://patchblox.com/security/cve/CVE-2025-38154", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38410", "url": "https://patchblox.com/security/cve/CVE-2025-38410", "title": "drm/msm: Fix a fence leak in submit error path", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38134", "url": "https://patchblox.com/security/cve/CVE-2025-38134", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in u...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38473", "url": "https://patchblox.com/security/cve/CVE-2025-38473", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38474", "url": "https://patchblox.com/security/cve/CVE-2025-38474", "title": "usb: net: sierra: check for no status endpoint", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38289", "url": "https://patchblox.com/security/cve/CVE-2025-38289", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38456", "url": "https://patchblox.com/security/cve/CVE-2025-38456", "title": "ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38245", "url": "https://patchblox.com/security/cve/CVE-2025-38245", "title": "atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38392", "url": "https://patchblox.com/security/cve/CVE-2025-38392", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38409", "url": "https://patchblox.com/security/cve/CVE-2025-38409", "title": "drm/msm: Fix another leak in the submit error path", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38417", "url": "https://patchblox.com/security/cve/CVE-2025-38417", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38427", "url": "https://patchblox.com/security/cve/CVE-2025-38427", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38198", "url": "https://patchblox.com/security/cve/CVE-2025-38198", "title": "fbcon: Make sure modelist not set on unregistered console", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38449", "url": "https://patchblox.com/security/cve/CVE-2025-38449", "title": "drm/gem: Acquire references on GEM handles for framebuffers", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38463", "url": "https://patchblox.com/security/cve/CVE-2025-38463", "title": "tcp: Correct signedness in skb remaining space calculation", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38162", "url": "https://patchblox.com/security/cve/CVE-2025-38162", "title": "netfilter: nft_set_pipapo: prevent overflow in lookup table allocation", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38214", "url": "https://patchblox.com/security/cve/CVE-2025-38214", "title": "fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38117", "url": "https://patchblox.com/security/cve/CVE-2025-38117", "title": "Bluetooth: MGMT: Protect mgmt_pending list with its own lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38179", "url": "https://patchblox.com/security/cve/CVE-2025-38179", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix max_sge overflow in smb_extract...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38369", "url": "https://patchblox.com/security/cve/CVE-2025-38369", "title": "dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38159", "url": "https://patchblox.com/security/cve/CVE-2025-38159", "title": "wifi: rtw88: fix the \u0027para\u0027 buffer size to avoid reading out of bounds", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38438", "url": "https://patchblox.com/security/cve/CVE-2025-38438", "title": "ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38249", "url": "https://patchblox.com/security/cve/CVE-2025-38249", "title": "ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38499", "url": "https://patchblox.com/security/cve/CVE-2025-38499", "title": "clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38338", "url": "https://patchblox.com/security/cve/CVE-2025-38338", "title": "fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38535", "url": "https://patchblox.com/security/cve/CVE-2025-38535", "title": "phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38349", "url": "https://patchblox.com/security/cve/CVE-2025-38349", "title": "eventpoll: don\u0027t decrement ep refcount while still holding the ep mutex", "priority": "High", "severity": "important", "cvss": 8.4, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38231", "url": "https://patchblox.com/security/cve/CVE-2025-38231", "title": "nfsd: Initialize ssc before laundromat_work to prevent NULL dereference", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38312", "url": "https://patchblox.com/security/cve/CVE-2025-38312", "title": "fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38443", "url": "https://patchblox.com/security/cve/CVE-2025-38443", "title": "nbd: fix uaf in nbd_genl_connect() error path", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38229", "url": "https://patchblox.com/security/cve/CVE-2025-38229", "title": "media: cxusb: no longer judge rbuf when the write fails", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38493", "url": "https://patchblox.com/security/cve/CVE-2025-38493", "title": "tracing/osnoise: Fix crash in timerlat_dump_stack()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38250", "url": "https://patchblox.com/security/cve/CVE-2025-38250", "title": "Bluetooth: hci_core: Fix use-after-free in vhci_flush()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38160", "url": "https://patchblox.com/security/cve/CVE-2025-38160", "title": "clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38149", "url": "https://patchblox.com/security/cve/CVE-2025-38149", "title": "net: phy: clear phydev-\u003Edevlink when the link is deleted", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38305", "url": "https://patchblox.com/security/cve/CVE-2025-38305", "title": "ptp: remove ptp-\u003En_vclocks check logic in ptp_vclock_in_use()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38087", "url": "https://patchblox.com/security/cve/CVE-2025-38087", "title": "net/sched: fix use-after-free in taprio_dev_notifier", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38208", "url": "https://patchblox.com/security/cve/CVE-2025-38208", "title": "smb: client: add NULL check in automount_fullpath", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38091", "url": "https://patchblox.com/security/cve/CVE-2025-38091", "title": "drm/amd/display: check stream id dml21 wrapper to get plane_id", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38239", "url": "https://patchblox.com/security/cve/CVE-2025-38239", "title": "scsi: megaraid_sas: Fix invalid node index", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38169", "url": "https://patchblox.com/security/cve/CVE-2025-38169", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD sta...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38186", "url": "https://patchblox.com/security/cve/CVE-2025-38186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop(...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38210", "url": "https://patchblox.com/security/cve/CVE-2025-38210", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38304", "url": "https://patchblox.com/security/cve/CVE-2025-38304", "title": "Bluetooth: Fix NULL pointer deference on eir_get_service_data", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38216", "url": "https://patchblox.com/security/cve/CVE-2025-38216", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38550", "url": "https://patchblox.com/security/cve/CVE-2025-38550", "title": "ipv6: mcast: Delay put pmc-\u003Eidev in mld_del_delrec()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38170", "url": "https://patchblox.com/security/cve/CVE-2025-38170", "title": "arm64/fpsimd: Discard stale CPU state when handling SME traps", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38310", "url": "https://patchblox.com/security/cve/CVE-2025-38310", "title": "seg6: Fix validation of nexthop addresses", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38215", "url": "https://patchblox.com/security/cve/CVE-2025-38215", "title": "fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38496", "url": "https://patchblox.com/security/cve/CVE-2025-38496", "title": "dm-bufio: fix sched in atomic context", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38220", "url": "https://patchblox.com/security/cve/CVE-2025-38220", "title": "ext4: only dirty folios when data journaling regular files", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38543", "url": "https://patchblox.com/security/cve/CVE-2025-38543", "title": "drm/tegra: nvdec: Fix dma_alloc_coherent error check", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38102", "url": "https://patchblox.com/security/cve/CVE-2025-38102", "title": "VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38108", "url": "https://patchblox.com/security/cve/CVE-2025-38108", "title": "net_sched: red: fix a race in __red_change()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38085", "url": "https://patchblox.com/security/cve/CVE-2025-38085", "title": "mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38083", "url": "https://patchblox.com/security/cve/CVE-2025-38083", "title": "net_sched: prio: fix a race in prio_tune()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38107", "url": "https://patchblox.com/security/cve/CVE-2025-38107", "title": "net_sched: ets: fix a race in ets_qdisc_change()", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38112", "url": "https://patchblox.com/security/cve/CVE-2025-38112", "title": "net: Fix TOCTOU issue in sk_is_readable()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38302", "url": "https://patchblox.com/security/cve/CVE-2025-38302", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: block: don\u0027t use submit_bio_noacct_nocheck in bl...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38440", "url": "https://patchblox.com/security/cve/CVE-2025-38440", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38461", "url": "https://patchblox.com/security/cve/CVE-2025-38461", "title": "vsock: Fix transport_* TOCTOU", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38477", "url": "https://patchblox.com/security/cve/CVE-2025-38477", "title": "net/sched: sch_qfq: Fix race condition on qfq_aggregate", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38462", "url": "https://patchblox.com/security/cve/CVE-2025-38462", "title": "vsock: Fix transport_{g2h,h2g} TOCTOU", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38383", "url": "https://patchblox.com/security/cve/CVE-2025-38383", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38373", "url": "https://patchblox.com/security/cve/CVE-2025-38373", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38380", "url": "https://patchblox.com/security/cve/CVE-2025-38380", "title": "i2c/designware: Fix an initialization issue", "priority": "High", "severity": "important", "cvss": 7.1, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38067", "url": "https://patchblox.com/security/cve/CVE-2025-38067", "title": "rseq: Fix segfault on registration when rseq_cs is non-zero", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38120", "url": "https://patchblox.com/security/cve/CVE-2025-38120", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00524, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38405", "url": "https://patchblox.com/security/cve/CVE-2025-38405", "title": "kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00429, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38526", "url": "https://patchblox.com/security/cve/CVE-2025-38526", "title": "ice: add NULL check in eswitch lag check", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00406, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38393", "url": "https://patchblox.com/security/cve/CVE-2025-38393", "title": "NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38165", "url": "https://patchblox.com/security/cve/CVE-2025-38165", "title": "bpf, sockmap: Fix panic when calling skb_linearize", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38365", "url": "https://patchblox.com/security/cve/CVE-2025-38365", "title": "btrfs: fix a race between renames and directory logging", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00356, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38246", "url": "https://patchblox.com/security/cve/CVE-2025-38246", "title": "bnxt: properly flush XDP redirect lists", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38174", "url": "https://patchblox.com/security/cve/CVE-2025-38174", "title": "thunderbolt: Do not double dequeue a configuration request", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00268, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-57976", "url": "https://patchblox.com/security/cve/CVE-2024-57976", "title": "btrfs: do proper folio cleanup when cow_file_range() failed", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21942", "url": "https://patchblox.com/security/cve/CVE-2025-21942", "title": "kernel-uek: [6.12.0-103.40.4.1.el10uek]\n- netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 3...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-49929", "url": "https://patchblox.com/security/cve/CVE-2024-49929", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38303", "url": "https://patchblox.com/security/cve/CVE-2025-38303", "title": "Bluetooth: eir: Fix possible crashes on eir_create_adv_data", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00237, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38253", "url": "https://patchblox.com/security/cve/CVE-2025-38253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handl...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38400", "url": "https://patchblox.com/security/cve/CVE-2025-38400", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "low", "cvss": 5.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38326", "url": "https://patchblox.com/security/cve/CVE-2025-38326", "title": "aoe: clean device rq_list in aoedev_downdev()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-58091", "url": "https://patchblox.com/security/cve/CVE-2024-58091", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38238", "url": "https://patchblox.com/security/cve/CVE-2025-38238", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38391", "url": "https://patchblox.com/security/cve/CVE-2025-38391", "title": "usb: typec: altmodes/displayport: do not index invalid pin_assignments", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21879", "url": "https://patchblox.com/security/cve/CVE-2025-21879", "title": "kernel-uek: [6.12.0-103.40.4.1.el10uek]\n- netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 3...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23155", "url": "https://patchblox.com/security/cve/CVE-2025-23155", "title": "net: stmmac: Fix accessing freed irq affinity_hint", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38387", "url": "https://patchblox.com/security/cve/CVE-2025-38387", "title": "RDMA/mlx5: Initialize obj_event-\u003Eobj_sub_list before xa_insert", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38406", "url": "https://patchblox.com/security/cve/CVE-2025-38406", "title": "wifi: ath6kl: remove WARN on bad firmware input", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38273", "url": "https://patchblox.com/security/cve/CVE-2025-38273", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38470", "url": "https://patchblox.com/security/cve/CVE-2025-38470", "title": "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38097", "url": "https://patchblox.com/security/cve/CVE-2025-38097", "title": "espintcp: remove encap socket caching to avoid reference leak", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38166", "url": "https://patchblox.com/security/cve/CVE-2025-38166", "title": "bpf: fix ktls panic with sockmap", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38505", "url": "https://patchblox.com/security/cve/CVE-2025-38505", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38127", "url": "https://patchblox.com/security/cve/CVE-2025-38127", "title": "ice: fix Tx scheduler error handling in XDP callback", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38382", "url": "https://patchblox.com/security/cve/CVE-2025-38382", "title": "btrfs: fix iteration of extrefs during log replay", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38098", "url": "https://patchblox.com/security/cve/CVE-2025-38098", "title": "drm/amd/display: Don\u0027t treat wb connector as physical in create_validate_stream_for_sink", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38190", "url": "https://patchblox.com/security/cve/CVE-2025-38190", "title": "atm: Revert atm_account_tx() if copy_from_iter_full() fails.", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38321", "url": "https://patchblox.com/security/cve/CVE-2025-38321", "title": "smb: Log an error when close_all_cached_dirs fails", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38345", "url": "https://patchblox.com/security/cve/CVE-2025-38345", "title": "ACPICA: fix acpi operand cache leak in dswstate.c", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38336", "url": "https://patchblox.com/security/cve/CVE-2025-38336", "title": "ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38467", "url": "https://patchblox.com/security/cve/CVE-2025-38467", "title": "drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38337", "url": "https://patchblox.com/security/cve/CVE-2025-38337", "title": "jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()", "priority": "Routine", "severity": "medium", "cvss": 6.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38344", "url": "https://patchblox.com/security/cve/CVE-2025-38344", "title": "ACPICA: fix acpi parse and parseext cache leaks", "priority": "Routine", "severity": "medium", "cvss": 6.2, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38185", "url": "https://patchblox.com/security/cve/CVE-2025-38185", "title": "atm: atmtcp: Free invalid length skb in atmtcp_c_send().", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38122", "url": "https://patchblox.com/security/cve/CVE-2025-38122", "title": "gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38460", "url": "https://patchblox.com/security/cve/CVE-2025-38460", "title": "atm: clip: Fix potential null-ptr-deref in to_atmarpd().", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38441", "url": "https://patchblox.com/security/cve/CVE-2025-38441", "title": "kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38282", "url": "https://patchblox.com/security/cve/CVE-2025-38282", "title": "kernfs: Relax constraint in draining guard", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38418", "url": "https://patchblox.com/security/cve/CVE-2025-38418", "title": "remoteproc: core: Release rproc-\u003Eclean_table after rproc_attach() fails", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38419", "url": "https://patchblox.com/security/cve/CVE-2025-38419", "title": "remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38539", "url": "https://patchblox.com/security/cve/CVE-2025-38539", "title": "tracing: Add down_write(trace_event_sem) when adding trace event", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22119", "url": "https://patchblox.com/security/cve/CVE-2025-22119", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: c...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38455", "url": "https://patchblox.com/security/cve/CVE-2025-38455", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37984", "url": "https://patchblox.com/security/cve/CVE-2025-37984", "title": "crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()", "priority": "Routine", "severity": "medium", "cvss": 6.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38265", "url": "https://patchblox.com/security/cve/CVE-2025-38265", "title": "serial: jsm: fix NPE during jsm_uart_port_init", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38354", "url": "https://patchblox.com/security/cve/CVE-2025-38354", "title": "drm/msm/gpu: Fix crash when throttling GPU immediately during boot", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38364", "url": "https://patchblox.com/security/cve/CVE-2025-38364", "title": "maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23137", "url": "https://patchblox.com/security/cve/CVE-2025-23137", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues we...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38269", "url": "https://patchblox.com/security/cve/CVE-2025-38269", "title": "btrfs: exit after state insertion failure at btrfs_convert_extent_bit()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38360", "url": "https://patchblox.com/security/cve/CVE-2025-38360", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38104", "url": "https://patchblox.com/security/cve/CVE-2025-38104", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38222", "url": "https://patchblox.com/security/cve/CVE-2025-38222", "title": "ext4: inline: fix len overflow in ext4_prepare_inline_data", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38148", "url": "https://patchblox.com/security/cve/CVE-2025-38148", "title": "net: phy: mscc: Fix memory leak when using one step timestamping", "priority": "Routine", "severity": "low", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38151", "url": "https://patchblox.com/security/cve/CVE-2025-38151", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38513", "url": "https://patchblox.com/security/cve/CVE-2025-38513", "title": "wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38516", "url": "https://patchblox.com/security/cve/CVE-2025-38516", "title": "pinctrl: qcom: msm: mark certain pins as invalid for interrupts", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38528", "url": "https://patchblox.com/security/cve/CVE-2025-38528", "title": "bpf: Reject %p% format string in bprintf-like helpers", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38540", "url": "https://patchblox.com/security/cve/CVE-2025-38540", "title": "HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38546", "url": "https://patchblox.com/security/cve/CVE-2025-38546", "title": "atm: clip: Fix memory leak of struct clip_vcc.", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38202", "url": "https://patchblox.com/security/cve/CVE-2025-38202", "title": "bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38444", "url": "https://patchblox.com/security/cve/CVE-2025-38444", "title": "raid10: cleanup memleak at raid10_make_request", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38251", "url": "https://patchblox.com/security/cve/CVE-2025-38251", "title": "atm: clip: prevent NULL deref in clip_push()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38263", "url": "https://patchblox.com/security/cve/CVE-2025-38263", "title": "bcache: fix NULL pointer in cache_set_flush()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38319", "url": "https://patchblox.com/security/cve/CVE-2025-38319", "title": "drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38451", "url": "https://patchblox.com/security/cve/CVE-2025-38451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22115", "url": "https://patchblox.com/security/cve/CVE-2025-22115", "title": "btrfs: fix block group refcount race in btrfs_create_pending_block_groups()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38402", "url": "https://patchblox.com/security/cve/CVE-2025-38402", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38531", "url": "https://patchblox.com/security/cve/CVE-2025-38531", "title": "iio: common: st_sensors: Fix use of uninitialize device structs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38094", "url": "https://patchblox.com/security/cve/CVE-2025-38094", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38188", "url": "https://patchblox.com/security/cve/CVE-2025-38188", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calli...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38307", "url": "https://patchblox.com/security/cve/CVE-2025-38307", "title": "ASoC: Intel: avs: Verify content returned by parse_int_array()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38334", "url": "https://patchblox.com/security/cve/CVE-2025-38334", "title": "x86/sgx: Prevent attempts to reclaim poisoned pages", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38374", "url": "https://patchblox.com/security/cve/CVE-2025-38374", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38155", "url": "https://patchblox.com/security/cve/CVE-2025-38155", "title": "wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38515", "url": "https://patchblox.com/security/cve/CVE-2025-38515", "title": "drm/sched: Increment job count before swapping tail spsc queue", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38232", "url": "https://patchblox.com/security/cve/CVE-2025-38232", "title": "NFSD: fix race between nfsd registration and exports_proc", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38547", "url": "https://patchblox.com/security/cve/CVE-2025-38547", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AX...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38255", "url": "https://patchblox.com/security/cve/CVE-2025-38255", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38258", "url": "https://patchblox.com/security/cve/CVE-2025-38258", "title": "mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-\u003Ememcg_path on write", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38260", "url": "https://patchblox.com/security/cve/CVE-2025-38260", "title": "btrfs: handle csum tree error with rescue=ibadroots correctly", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38256", "url": "https://patchblox.com/security/cve/CVE-2025-38256", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38315", "url": "https://patchblox.com/security/cve/CVE-2025-38315", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 6.4, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38243", "url": "https://patchblox.com/security/cve/CVE-2025-38243", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38503", "url": "https://patchblox.com/security/cve/CVE-2025-38503", "title": "btrfs: fix assertion when building free space tree", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38537", "url": "https://patchblox.com/security/cve/CVE-2025-38537", "title": "net: phy: Don\u0027t register LEDs for genphy", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38436", "url": "https://patchblox.com/security/cve/CVE-2025-38436", "title": "drm/scheduler: signal scheduled fence when kill job", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38549", "url": "https://patchblox.com/security/cve/CVE-2025-38549", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38404", "url": "https://patchblox.com/security/cve/CVE-2025-38404", "title": "usb: typec: displayport: Fix potential deadlock", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38268", "url": "https://patchblox.com/security/cve/CVE-2025-38268", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38242", "url": "https://patchblox.com/security/cve/CVE-2025-38242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race of userfaultfd_move an...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38362", "url": "https://patchblox.com/security/cve/CVE-2025-38362", "title": "drm/amd/display: Add null pointer check for get_first_active_display()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38520", "url": "https://patchblox.com/security/cve/CVE-2025-38520", "title": "drm/amdkfd: Don\u0027t call mmput from MMU notifier callback", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38506", "url": "https://patchblox.com/security/cve/CVE-2025-38506", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38551", "url": "https://patchblox.com/security/cve/CVE-2025-38551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during pr...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38217", "url": "https://patchblox.com/security/cve/CVE-2025-38217", "title": "hwmon: (ftsteutates) Fix TOCTOU race in fts_read()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38223", "url": "https://patchblox.com/security/cve/CVE-2025-38223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-07T06:34:28Z" }