{ "fix": "ELSA-2025-20662", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20662", "summary": "ELSA-2025-20662, released October 14, 2025, fixes 95 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.", "platform": "linux", "type": "advisory", "title": "Security update for 35 packages", "released": "2025-10-14T00:00:00Z", "priority": "High", "priorityTier": 3, "priorityReason": "Closes CVE-2025-38608, high severity", "supported": true, "cveCount": 95, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00412, "maxCvss": 7.8, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2025-20662.html", "appliesTo": [ { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-104.43.4.2.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2025-38608", "url": "https://patchblox.com/security/cve/CVE-2025-38608", "title": "bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38590", "url": "https://patchblox.com/security/cve/CVE-2025-38590", "title": "net/mlx5e: Remove skb secpath if xfrm state is not found", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00411, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38660", "url": "https://patchblox.com/security/cve/CVE-2025-38660", "title": "[ceph] parse_longname(): strrchr() expects NUL-terminated string", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38563", "url": "https://patchblox.com/security/cve/CVE-2025-38563", "title": "perf/core: Prevent VMA split of buffer mappings", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38617", "url": "https://patchblox.com/security/cve/CVE-2025-38617", "title": "net/packet: fix a race in packet_set_ring() and packet_notifier()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38708", "url": "https://patchblox.com/security/cve/CVE-2025-38708", "title": "drbd: add missing kref_get in handle_write_conflicts", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00395, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38574", "url": "https://patchblox.com/security/cve/CVE-2025-38574", "title": "pptp: ensure minimal skb length in pptp_xmit()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00385, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38728", "url": "https://patchblox.com/security/cve/CVE-2025-38728", "title": "smb3: fix for slab out of bounds on mount to ksmbd", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00356, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39798", "url": "https://patchblox.com/security/cve/CVE-2025-39798", "title": "NFS: Fix the setting of capabilities when automounting a new filesystem", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38601", "url": "https://patchblox.com/security/cve/CVE-2025-38601", "title": "wifi: ath11k: clear initialized flag for deinit-ed srng lists", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38616", "url": "https://patchblox.com/security/cve/CVE-2025-38616", "title": "tls: handle data disappearing from under the TLS ULP", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38729", "url": "https://patchblox.com/security/cve/CVE-2025-38729", "title": "ALSA: usb-audio: Validate UAC3 power domain descriptors, too", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39732", "url": "https://patchblox.com/security/cve/CVE-2025-39732", "title": "wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38702", "url": "https://patchblox.com/security/cve/CVE-2025-38702", "title": "fbdev: fix potential buffer overflow in do_register_framebuffer()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39730", "url": "https://patchblox.com/security/cve/CVE-2025-39730", "title": "NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38572", "url": "https://patchblox.com/security/cve/CVE-2025-38572", "title": "ipv6: reject malicious packets in ipv6_gso_segment()", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38699", "url": "https://patchblox.com/security/cve/CVE-2025-38699", "title": "scsi: bfa: Double-free fix", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38351", "url": "https://patchblox.com/security/cve/CVE-2025-38351", "title": "KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38565", "url": "https://patchblox.com/security/cve/CVE-2025-38565", "title": "perf/core: Exit early on perf_mmap() fail", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38701", "url": "https://patchblox.com/security/cve/CVE-2025-38701", "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38704", "url": "https://patchblox.com/security/cve/CVE-2025-38704", "title": "rcu/nocb: Fix possible invalid rdp\u0027s-\u003Enocb_cb_kthread pointer access", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38680", "url": "https://patchblox.com/security/cve/CVE-2025-38680", "title": "media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38685", "url": "https://patchblox.com/security/cve/CVE-2025-38685", "title": "fbdev: Fix vmalloc out-of-bounds write in fast_imageblit", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38614", "url": "https://patchblox.com/security/cve/CVE-2025-38614", "title": "eventpoll: Fix semi-unbounded recursion", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38569", "url": "https://patchblox.com/security/cve/CVE-2025-38569", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38684", "url": "https://patchblox.com/security/cve/CVE-2025-38684", "title": "net/sched: ets: use old \u0027nbands\u0027 while purging unused classes", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38695", "url": "https://patchblox.com/security/cve/CVE-2025-38695", "title": "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38700", "url": "https://patchblox.com/security/cve/CVE-2025-38700", "title": "scsi: libiscsi: Initialize iscsi_conn-\u003Edd_data only if memory is allocated", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38736", "url": "https://patchblox.com/security/cve/CVE-2025-38736", "title": "net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39757", "url": "https://patchblox.com/security/cve/CVE-2025-39757", "title": "ALSA: usb-audio: Validate UAC3 cluster segment descriptors", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39760", "url": "https://patchblox.com/security/cve/CVE-2025-39760", "title": "usb: core: config: Prevent OOB read in SS endpoint companion parsing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38593", "url": "https://patchblox.com/security/cve/CVE-2025-38593", "title": "Bluetooth: hci_sync: fix double free in \u0027hci_discovery_filter_clear()\u0027", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38653", "url": "https://patchblox.com/security/cve/CVE-2025-38653", "title": "proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38568", "url": "https://patchblox.com/security/cve/CVE-2025-38568", "title": "net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38688", "url": "https://patchblox.com/security/cve/CVE-2025-38688", "title": "iommufd: Prevent ALIGN() overflow", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39727", "url": "https://patchblox.com/security/cve/CVE-2025-39727", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nmm: swap: fix potential buffer overflow in setup_...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39742", "url": "https://patchblox.com/security/cve/CVE-2025-39742", "title": "RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39738", "url": "https://patchblox.com/security/cve/CVE-2025-39738", "title": "btrfs: do not allow relocation of partially dropped subvolumes", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39749", "url": "https://patchblox.com/security/cve/CVE-2025-39749", "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38718", "url": "https://patchblox.com/security/cve/CVE-2025-38718", "title": "sctp: linearize cloned gso packets in sctp_rcv", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38668", "url": "https://patchblox.com/security/cve/CVE-2025-38668", "title": "regulator: core: fix NULL dereference on unbind due to stale coupling data", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38221", "url": "https://patchblox.com/security/cve/CVE-2025-38221", "title": "kernel-uek: [6.12.0-104.43.4.2.el10uek]\n- Revert \u0027sched/fair: Bump sd-\u003Emax_newidle_lb_cost when newidle balance fails\u0027 (Joseph Sa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38587", "url": "https://patchblox.com/security/cve/CVE-2025-38587", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38670", "url": "https://patchblox.com/security/cve/CVE-2025-38670", "title": "arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38609", "url": "https://patchblox.com/security/cve/CVE-2025-38609", "title": "PM / devfreq: Check governor before using governor-\u003Ename", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38692", "url": "https://patchblox.com/security/cve/CVE-2025-38692", "title": "exfat: add cluster chain loop check for dir", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39744", "url": "https://patchblox.com/security/cve/CVE-2025-39744", "title": "rcu: Fix rcu_read_unlock() deadloop due to IRQ work", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38710", "url": "https://patchblox.com/security/cve/CVE-2025-38710", "title": "gfs2: Validate i_depth for exhash directories", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39797", "url": "https://patchblox.com/security/cve/CVE-2025-39797", "title": "xfrm: Duplicate SPI Handling", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39739", "url": "https://patchblox.com/security/cve/CVE-2025-39739", "title": "iommu/arm-smmu-qcom: Add SM6115 MDSS compatible", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39746", "url": "https://patchblox.com/security/cve/CVE-2025-39746", "title": "wifi: ath10k: shutdown driver when hardware is unreliable", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38665", "url": "https://patchblox.com/security/cve/CVE-2025-38665", "title": "can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38709", "url": "https://patchblox.com/security/cve/CVE-2025-38709", "title": "loop: Avoid updating block size under exclusive owner", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39725", "url": "https://patchblox.com/security/cve/CVE-2025-39725", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling i...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21884", "url": "https://patchblox.com/security/cve/CVE-2025-21884", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38705", "url": "https://patchblox.com/security/cve/CVE-2025-38705", "title": "drm/amd/pm: fix null pointer access", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38706", "url": "https://patchblox.com/security/cve/CVE-2025-38706", "title": "ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38691", "url": "https://patchblox.com/security/cve/CVE-2025-38691", "title": "pNFS: Fix uninited ptr deref in block/scsi layout", "priority": "Routine", "severity": "medium", "cvss": 6.2, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38639", "url": "https://patchblox.com/security/cve/CVE-2025-38639", "title": "netfilter: xt_nfacct: don\u0027t assume acct name is null-terminated", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38622", "url": "https://patchblox.com/security/cve/CVE-2025-38622", "title": "net: drop UFO packets in udp_rcv_segment()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38664", "url": "https://patchblox.com/security/cve/CVE-2025-38664", "title": "ice: Fix a null pointer dereference in ice_copy_and_init_pkg()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38683", "url": "https://patchblox.com/security/cve/CVE-2025-38683", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nhv_netvsc: Fix panic during namespace deletion wi...", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38693", "url": "https://patchblox.com/security/cve/CVE-2025-38693", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38694", "url": "https://patchblox.com/security/cve/CVE-2025-38694", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39756", "url": "https://patchblox.com/security/cve/CVE-2025-39756", "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38604", "url": "https://patchblox.com/security/cve/CVE-2025-38604", "title": "wifi: rtl818x: Kill URBs before clearing tx status queue", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38727", "url": "https://patchblox.com/security/cve/CVE-2025-38727", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38721", "url": "https://patchblox.com/security/cve/CVE-2025-38721", "title": "netfilter: ctnetlink: fix refcount leak on table dump", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38586", "url": "https://patchblox.com/security/cve/CVE-2025-38586", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38640", "url": "https://patchblox.com/security/cve/CVE-2025-38640", "title": "bpf: Disable migration in nf_hook_run_bpf().", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39748", "url": "https://patchblox.com/security/cve/CVE-2025-39748", "title": "bpf: Forget ranges when refining tnum after JSET", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38659", "url": "https://patchblox.com/security/cve/CVE-2025-38659", "title": "gfs2: No more self recovery", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39795", "url": "https://patchblox.com/security/cve/CVE-2025-39795", "title": "block: avoid possible overflow for chunk_sectors check in blk_stack_limits()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38602", "url": "https://patchblox.com/security/cve/CVE-2025-38602", "title": "iwlwifi: Add missing check for alloc_ordered_workqueue", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38671", "url": "https://patchblox.com/security/cve/CVE-2025-38671", "title": "i2c: qup: jump out of the loop in case of timeout", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38588", "url": "https://patchblox.com/security/cve/CVE-2025-38588", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38557", "url": "https://patchblox.com/security/cve/CVE-2025-38557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38625", "url": "https://patchblox.com/security/cve/CVE-2025-38625", "title": "vfio/pds: Fix missing detach_ioas op", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38628", "url": "https://patchblox.com/security/cve/CVE-2025-38628", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38644", "url": "https://patchblox.com/security/cve/CVE-2025-38644", "title": "wifi: mac80211: reject TDLS operations when station is not associated", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38645", "url": "https://patchblox.com/security/cve/CVE-2025-38645", "title": "net/mlx5: Check device memory pointer before usage", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38559", "url": "https://patchblox.com/security/cve/CVE-2025-38559", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL poin...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38686", "url": "https://patchblox.com/security/cve/CVE-2025-38686", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38725", "url": "https://patchblox.com/security/cve/CVE-2025-38725", "title": "net: usb: asix_devices: add phy_mask for ax88772 mdio bus", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39763", "url": "https://patchblox.com/security/cve/CVE-2025-39763", "title": "ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39747", "url": "https://patchblox.com/security/cve/CVE-2025-39747", "title": "drm/msm: Add error handling for krealloc in metadata setup", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39753", "url": "https://patchblox.com/security/cve/CVE-2025-39753", "title": "gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39792", "url": "https://patchblox.com/security/cve/CVE-2025-39792", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: Always split write BIOs to zoned device limi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39754", "url": "https://patchblox.com/security/cve/CVE-2025-39754", "title": "mm/smaps: fix race between smaps_hugetlb_range and migration", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38335", "url": "https://patchblox.com/security/cve/CVE-2025-38335", "title": "Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38675", "url": "https://patchblox.com/security/cve/CVE-2025-38675", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xf...", "priority": "Routine", "severity": "medium", "cvss": 5.9, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38632", "url": "https://patchblox.com/security/cve/CVE-2025-38632", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38553", "url": "https://patchblox.com/security/cve/CVE-2025-38553", "title": "net/sched: Restrict conditions for adding duplicating netems to qdisc tree", "priority": "Routine", "severity": "medium", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38611", "url": "https://patchblox.com/security/cve/CVE-2025-38611", "title": "vmci: Prevent the dispatching of uninitialized payloads", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39799", "url": "https://patchblox.com/security/cve/CVE-2025-39799", "title": "ACPI: processor: perflib: Move problematic pr-\u003Eperformance check", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-07T06:34:28Z" }