# ELSA-2025-20552: Security update for 19 packages ELSA-2025-20552, released September 8, 2025, fixes 116 CVEs across 19 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20552 - Platform: Linux - Released: Sep 8, 2025 - Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV)) - CVEs: 116, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20552.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 8 | 0:5.15.0-312.187.5.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:5.15.0-312.187.5.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV | | [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 | | | [CVE-2025-38035](https://patchblox.com/security/data/cve/CVE-2025-38035.md) | High | nvmet-tcp: don't restore null sk_state_change | 7.5 | 0.0057 | | | [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0056 | | | [CVE-2025-38001](https://patchblox.com/security/data/cve/CVE-2025-38001.md) | High | net_sched: hfsc: Address reentrant enqueue adding class to eltree twice | 7.8 | 0.0056 | | | [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 | | | [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 | | | [CVE-2025-38146](https://patchblox.com/security/data/cve/CVE-2025-38146.md) | High | net: openvswitch: Fix the dead loop of MPLS parse | 7.8 | 0.0049 | | | [CVE-2025-38075](https://patchblox.com/security/data/cve/CVE-2025-38075.md) | High | scsi: target: iscsi: Fix timeout on deleted connection | 7.0 | 0.0046 | | | [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0041 | | | [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 | | | [CVE-2025-38003](https://patchblox.com/security/data/cve/CVE-2025-38003.md) | High | can: bcm: add missing rcu read protection for procfs content | 7.0 | 0.0030 | | | [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 | | | [CVE-2025-38004](https://patchblox.com/security/data/cve/CVE-2025-38004.md) | High | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 | | | [CVE-2025-38000](https://patchblox.com/security/data/cve/CVE-2025-38000.md) | High | sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() | 7.8 | 0.0024 | | | [CVE-2025-38298](https://patchblox.com/security/data/cve/CVE-2025-38298.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault A... | 7.8 | 0.0023 | | | [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 | | | [CVE-2025-37958](https://patchblox.com/security/data/cve/CVE-2025-37958.md) | High | mm/huge_memory: fix dereferencing invalid pmd migration entry | 7.1 | 0.0023 | | | [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 | | | [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 | | | [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 | | | [CVE-2025-38077](https://patchblox.com/security/data/cve/CVE-2025-38077.md) | High | platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() | 7.8 | 0.0023 | | | [CVE-2025-38194](https://patchblox.com/security/data/cve/CVE-2025-38194.md) | High | jffs2: check that raw node were preallocated before writing summary | 7.0 | 0.0022 | | | [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 | | | [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 | | | [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0022 | | | [CVE-2025-38051](https://patchblox.com/security/data/cve/CVE-2025-38051.md) | High | smb: client: Fix use-after-free in cifs_fill_dirent | 7.1 | 0.0022 | | | [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | | | [CVE-2025-38328](https://patchblox.com/security/data/cve/CVE-2025-38328.md) | High | jffs2: check jffs2_prealloc_raw_node_refs() result in few other places | 7.1 | 0.0022 | | | [CVE-2025-38324](https://patchblox.com/security/data/cve/CVE-2025-38324.md) | High | mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). | 7.0 | 0.0022 | | | [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 | | | [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 | | | [CVE-2025-38184](https://patchblox.com/security/data/cve/CVE-2025-38184.md) | High | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 7.0 | 0.0022 | | | [CVE-2025-38079](https://patchblox.com/security/data/cve/CVE-2025-38079.md) | High | crypto: algif_hash - fix double free in hash_accept | 7.8 | 0.0022 | | | [CVE-2025-38100](https://patchblox.com/security/data/cve/CVE-2025-38100.md) | High | x86/iopl: Cure TIF_IO_BITMAP inconsistencies | 7.0 | 0.0022 | | | [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0021 | | | [CVE-2025-38280](https://patchblox.com/security/data/cve/CVE-2025-38280.md) | High | bpf: Avoid __bpf_prog_ret0_warn when jit fails | 7.8 | 0.0021 | | | [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 | | | [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0021 | | | [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 | | | [CVE-2025-38320](https://patchblox.com/security/data/cve/CVE-2025-38320.md) | High | arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() | 7.1 | 0.0021 | | | [CVE-2025-37948](https://patchblox.com/security/data/cve/CVE-2025-37948.md) | High | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 7.0 | 0.0021 | | | [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 | | | [CVE-2025-38285](https://patchblox.com/security/data/cve/CVE-2025-38285.md) | High | bpf: Fix WARN() in get_bpf_raw_tp_regs | 7.1 | 0.0021 | | | [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 | | | [CVE-2025-38086](https://patchblox.com/security/data/cve/CVE-2025-38086.md) | High | net: ch9200: fix uninitialised access during mii_nway_restart | 7.8 | 0.0021 | | | [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 | | | [CVE-2025-38066](https://patchblox.com/security/data/cve/CVE-2025-38066.md) | High | dm cache: prevent BUG_ON by blocking retries on failed device resumes | 7.0 | 0.0021 | | | [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 | | | [CVE-2025-38346](https://patchblox.com/security/data/cve/CVE-2025-38346.md) | High | ftrace: Fix UAF when lookup kallsym after ftrace disabled | 7.8 | 0.0020 | | | [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 | | | [CVE-2025-38068](https://patchblox.com/security/data/cve/CVE-2025-38068.md) | High | crypto: lzo - Fix compression buffer overrun | 7.8 | 0.0020 | | | [CVE-2025-37963](https://patchblox.com/security/data/cve/CVE-2025-37963.md) | High | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0020 | | | [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 | | | [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 | | | [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 | | | [CVE-2025-38119](https://patchblox.com/security/data/cve/CVE-2025-38119.md) | High | scsi: core: ufs: Fix a hang in the error handler | 7.0 | 0.0020 | | | [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 | | | [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0019 | | | [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0019 | | | [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 | | | [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0019 | | | [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 | | | [CVE-2025-38206](https://patchblox.com/security/data/cve/CVE-2025-38206.md) | High | exfat: fix double free in delayed_free | 7.8 | 0.0019 | | | [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 | | | [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 | | | [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 | | | [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0019 | | | [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0018 | | | [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0018 | | | [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0018 | | | [CVE-2025-38160](https://patchblox.com/security/data/cve/CVE-2025-38160.md) | High | clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() | 7.0 | 0.0018 | | | [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 | | | [CVE-2025-38058](https://patchblox.com/security/data/cve/CVE-2025-38058.md) | High | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0017 | | | [CVE-2025-38310](https://patchblox.com/security/data/cve/CVE-2025-38310.md) | High | seg6: Fix validation of nexthop addresses | 7.1 | 0.0017 | | | [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0016 | | | [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0016 | | | [CVE-2025-38078](https://patchblox.com/security/data/cve/CVE-2025-38078.md) | High | ALSA: pcm: Fix race of buffer access at PCM OSS layer | 7.0 | 0.0016 | | | [CVE-2025-38083](https://patchblox.com/security/data/cve/CVE-2025-38083.md) | High | net_sched: prio: fix a race in prio_tune() | 7.0 | 0.0016 | | | [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 | | | [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 | | | [CVE-2025-38048](https://patchblox.com/security/data/cve/CVE-2025-38048.md) | High | virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN | 7.0 | 0.0014 | | | [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a | | | [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0052 | | | [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 | | | [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0027 | | | [CVE-2024-26726](https://patchblox.com/security/data/cve/CVE-2024-26726.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0026 | | | [CVE-2025-38037](https://patchblox.com/security/data/cve/CVE-2025-38037.md) | Routine | vxlan: Annotate FDB data races | 5.5 | 0.0023 | | | [CVE-2024-57883](https://patchblox.com/security/data/cve/CVE-2024-57883.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared c... | 5.5 | 0.0022 | | | [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0022 | | | [CVE-2025-38072](https://patchblox.com/security/data/cve/CVE-2025-38072.md) | Routine | libnvdimm/labels: Fix divide error in nd_label_data_init() | 5.5 | 0.0022 | | | [CVE-2025-38034](https://patchblox.com/security/data/cve/CVE-2025-38034.md) | Routine | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 5.5 | 0.0022 | | | [CVE-2025-38044](https://patchblox.com/security/data/cve/CVE-2025-38044.md) | Routine | media: cx231xx: set device_caps for 417 | 5.5 | 0.0022 | | | [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 | | | [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 | | | [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 | | | [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 | | | [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 | | | [CVE-2025-38061](https://patchblox.com/security/data/cve/CVE-2025-38061.md) | Routine | net: pktgen: fix access outside of user given buffer in pktgen_thread_write() | 6.7 | 0.0021 | | | [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0021 | | | [CVE-2025-38190](https://patchblox.com/security/data/cve/CVE-2025-38190.md) | Routine | atm: Revert atm_account_tx() if copy_from_iter_full() fails. | 5.5 | 0.0020 | | | [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 | | | [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 | | | [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 | | | [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0020 | | | [CVE-2025-38185](https://patchblox.com/security/data/cve/CVE-2025-38185.md) | Routine | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 5.5 | 0.0020 | | | [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 | | | [CVE-2025-38418](https://patchblox.com/security/data/cve/CVE-2025-38418.md) | Routine | remoteproc: core: Release rproc->clean_table after rproc_attach() fails | 5.5 | 0.0019 | | | [CVE-2025-38419](https://patchblox.com/security/data/cve/CVE-2025-38419.md) | Routine | remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() | 5.5 | 0.0019 | | | [CVE-2025-38163](https://patchblox.com/security/data/cve/CVE-2025-38163.md) | Routine | f2fs: fix to do sanity check on sbi->total_valid_block_count | 5.5 | 0.0019 | | | [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0018 | | | [CVE-2025-38251](https://patchblox.com/security/data/cve/CVE-2025-38251.md) | Routine | atm: clip: prevent NULL deref in clip_push() | 5.5 | 0.0018 | | | [CVE-2025-38263](https://patchblox.com/security/data/cve/CVE-2025-38263.md) | Routine | bcache: fix NULL pointer in cache_set_flush() | 5.5 | 0.0018 | | | [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 | | | [CVE-2025-38094](https://patchblox.com/security/data/cve/CVE-2025-38094.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0018 | | | [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo