# ELSA-2025-20662: Security update for 35 packages ELSA-2025-20662, released October 14, 2025, fixes 95 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20662 - Platform: Linux - Released: Oct 14, 2025 - Priority: High (Closes CVE-2025-38608, high severity) - CVEs: 95, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20662.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-104.43.4.2.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-104.43.4.2.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-38608](https://patchblox.com/security/data/cve/CVE-2025-38608.md) | High | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 7.1 | 0.0041 | | | [CVE-2025-38590](https://patchblox.com/security/data/cve/CVE-2025-38590.md) | High | net/mlx5e: Remove skb secpath if xfrm state is not found | 7.5 | 0.0041 | | | [CVE-2025-38660](https://patchblox.com/security/data/cve/CVE-2025-38660.md) | High | [ceph] parse_longname(): strrchr() expects NUL-terminated string | 7.1 | 0.0041 | | | [CVE-2025-38563](https://patchblox.com/security/data/cve/CVE-2025-38563.md) | High | perf/core: Prevent VMA split of buffer mappings | 7.8 | 0.0040 | | | [CVE-2025-38617](https://patchblox.com/security/data/cve/CVE-2025-38617.md) | High | net/packet: fix a race in packet_set_ring() and packet_notifier() | 7.0 | 0.0040 | | | [CVE-2025-38708](https://patchblox.com/security/data/cve/CVE-2025-38708.md) | High | drbd: add missing kref_get in handle_write_conflicts | 7.8 | 0.0040 | | | [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0039 | | | [CVE-2025-38728](https://patchblox.com/security/data/cve/CVE-2025-38728.md) | High | smb3: fix for slab out of bounds on mount to ksmbd | 7.1 | 0.0036 | | | [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 | | | [CVE-2025-38601](https://patchblox.com/security/data/cve/CVE-2025-38601.md) | High | wifi: ath11k: clear initialized flag for deinit-ed srng lists | 7.0 | 0.0025 | | | [CVE-2025-38616](https://patchblox.com/security/data/cve/CVE-2025-38616.md) | High | tls: handle data disappearing from under the TLS ULP | 7.1 | 0.0021 | | | [CVE-2025-39732](https://patchblox.com/security/data/cve/CVE-2025-39732.md) | High | wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() | 7.0 | 0.0021 | | | [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 | | | [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 | | | [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 | | | [CVE-2025-38699](https://patchblox.com/security/data/cve/CVE-2025-38699.md) | High | scsi: bfa: Double-free fix | 7.8 | 0.0019 | | | [CVE-2025-38351](https://patchblox.com/security/data/cve/CVE-2025-38351.md) | High | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 7.5 | 0.0019 | | | [CVE-2025-38565](https://patchblox.com/security/data/cve/CVE-2025-38565.md) | High | perf/core: Exit early on perf_mmap() fail | 7.8 | 0.0019 | | | [CVE-2025-38572](https://patchblox.com/security/data/cve/CVE-2025-38572.md) | High | ipv6: reject malicious packets in ipv6_gso_segment() | 7.8 | 0.0019 | | | [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 | | | [CVE-2025-38704](https://patchblox.com/security/data/cve/CVE-2025-38704.md) | High | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 7.8 | 0.0019 | | | [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 | | | [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 | | | [CVE-2025-38614](https://patchblox.com/security/data/cve/CVE-2025-38614.md) | High | eventpoll: Fix semi-unbounded recursion | 7.5 | 0.0019 | | | [CVE-2025-39727](https://patchblox.com/security/data/cve/CVE-2025-39727.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_... | 7.8 | 0.0018 | | | [CVE-2025-38569](https://patchblox.com/security/data/cve/CVE-2025-38569.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes... | 7.0 | 0.0018 | | | [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 | | | [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 | | | [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 | | | [CVE-2025-38736](https://patchblox.com/security/data/cve/CVE-2025-38736.md) | High | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization | 7.1 | 0.0018 | | | [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 | | | [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 | | | [CVE-2025-38593](https://patchblox.com/security/data/cve/CVE-2025-38593.md) | High | Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' | 7.8 | 0.0018 | | | [CVE-2025-38653](https://patchblox.com/security/data/cve/CVE-2025-38653.md) | High | proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al | 7.8 | 0.0018 | | | [CVE-2025-38568](https://patchblox.com/security/data/cve/CVE-2025-38568.md) | High | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 7.8 | 0.0018 | | | [CVE-2025-38688](https://patchblox.com/security/data/cve/CVE-2025-38688.md) | High | iommufd: Prevent ALIGN() overflow | 7.8 | 0.0018 | | | [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 | | | [CVE-2025-39738](https://patchblox.com/security/data/cve/CVE-2025-39738.md) | High | btrfs: do not allow relocation of partially dropped subvolumes | 7.8 | 0.0018 | | | [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 | | | [CVE-2025-38221](https://patchblox.com/security/data/cve/CVE-2025-38221.md) | High | kernel-uek: [6.12.0-104.43.4.2.el10uek] - Revert 'sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails' (Joseph Sa... | 7.0 | 0.0017 | | | [CVE-2025-38718](https://patchblox.com/security/data/cve/CVE-2025-38718.md) | High | sctp: linearize cloned gso packets in sctp_rcv | 7.8 | 0.0017 | | | [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 | | | [CVE-2025-38587](https://patchblox.com/security/data/cve/CVE-2025-38587.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0017 | | | [CVE-2025-38670](https://patchblox.com/security/data/cve/CVE-2025-38670.md) | High | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | 7.1 | 0.0017 | | | [CVE-2025-38609](https://patchblox.com/security/data/cve/CVE-2025-38609.md) | High | PM / devfreq: Check governor before using governor->name | 7.8 | 0.0017 | | | [CVE-2025-38692](https://patchblox.com/security/data/cve/CVE-2025-38692.md) | High | exfat: add cluster chain loop check for dir | 7.0 | 0.0017 | | | [CVE-2025-39744](https://patchblox.com/security/data/cve/CVE-2025-39744.md) | High | rcu: Fix rcu_read_unlock() deadloop due to IRQ work | 7.1 | 0.0016 | | | [CVE-2025-38710](https://patchblox.com/security/data/cve/CVE-2025-38710.md) | High | gfs2: Validate i_depth for exhash directories | 7.0 | 0.0016 | | | [CVE-2025-39797](https://patchblox.com/security/data/cve/CVE-2025-39797.md) | High | xfrm: Duplicate SPI Handling | 7.8 | 0.0016 | | | [CVE-2025-39739](https://patchblox.com/security/data/cve/CVE-2025-39739.md) | High | iommu/arm-smmu-qcom: Add SM6115 MDSS compatible | 7.0 | 0.0016 | | | [CVE-2025-39746](https://patchblox.com/security/data/cve/CVE-2025-39746.md) | High | wifi: ath10k: shutdown driver when hardware is unreliable | 7.0 | 0.0016 | | | [CVE-2025-38665](https://patchblox.com/security/data/cve/CVE-2025-38665.md) | High | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 7.0 | 0.0016 | | | [CVE-2025-38709](https://patchblox.com/security/data/cve/CVE-2025-38709.md) | High | loop: Avoid updating block size under exclusive owner | 7.0 | 0.0016 | | | [CVE-2025-39725](https://patchblox.com/security/data/cve/CVE-2025-39725.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling i... | 7.0 | 0.0015 | | | [CVE-2025-21884](https://patchblox.com/security/data/cve/CVE-2025-21884.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0022 | | | [CVE-2025-38705](https://patchblox.com/security/data/cve/CVE-2025-38705.md) | Routine | drm/amd/pm: fix null pointer access | 5.5 | 0.0020 | | | [CVE-2025-38706](https://patchblox.com/security/data/cve/CVE-2025-38706.md) | Routine | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 5.5 | 0.0020 | | | [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 | | | [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 | | | [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 | | | [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 | | | [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion wi... | 5.5 | 0.0018 | | | [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-39756](https://patchblox.com/security/data/cve/CVE-2025-39756.md) | Routine | fs: Prevent file descriptor table allocations exceeding INT_MAX | 5.5 | 0.0018 | | | [CVE-2025-38604](https://patchblox.com/security/data/cve/CVE-2025-38604.md) | Routine | wifi: rtl818x: Kill URBs before clearing tx status queue | 5.5 | 0.0018 | | | [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 | | | [CVE-2025-38586](https://patchblox.com/security/data/cve/CVE-2025-38586.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception... | 5.5 | 0.0018 | | | [CVE-2025-38640](https://patchblox.com/security/data/cve/CVE-2025-38640.md) | Routine | bpf: Disable migration in nf_hook_run_bpf(). | 5.5 | 0.0017 | | | [CVE-2025-39748](https://patchblox.com/security/data/cve/CVE-2025-39748.md) | Routine | bpf: Forget ranges when refining tnum after JSET | 5.5 | 0.0017 | | | [CVE-2025-38659](https://patchblox.com/security/data/cve/CVE-2025-38659.md) | Routine | gfs2: No more self recovery | 5.5 | 0.0017 | | | [CVE-2025-39795](https://patchblox.com/security/data/cve/CVE-2025-39795.md) | Routine | block: avoid possible overflow for chunk_sectors check in blk_stack_limits() | 5.5 | 0.0017 | | | [CVE-2025-38602](https://patchblox.com/security/data/cve/CVE-2025-38602.md) | Routine | iwlwifi: Add missing check for alloc_ordered_workqueue | 5.5 | 0.0017 | | | [CVE-2025-38671](https://patchblox.com/security/data/cve/CVE-2025-38671.md) | Routine | i2c: qup: jump out of the loop in case of timeout | 5.5 | 0.0017 | | | [CVE-2025-38588](https://patchblox.com/security/data/cve/CVE-2025-38588.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0017 | | | [CVE-2025-38557](https://patchblox.com/security/data/cve/CVE-2025-38557.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count... | 5.5 | 0.0017 | | | [CVE-2025-38625](https://patchblox.com/security/data/cve/CVE-2025-38625.md) | Routine | vfio/pds: Fix missing detach_ioas op | 5.5 | 0.0017 | | | [CVE-2025-38628](https://patchblox.com/security/data/cve/CVE-2025-38628.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0017 | | | [CVE-2025-38644](https://patchblox.com/security/data/cve/CVE-2025-38644.md) | Routine | wifi: mac80211: reject TDLS operations when station is not associated | 5.5 | 0.0017 | | | [CVE-2025-38645](https://patchblox.com/security/data/cve/CVE-2025-38645.md) | Routine | net/mlx5: Check device memory pointer before usage | 5.5 | 0.0017 | | | [CVE-2025-38559](https://patchblox.com/security/data/cve/CVE-2025-38559.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL poin... | 5.5 | 0.0017 | | | [CVE-2025-38686](https://patchblox.com/security/data/cve/CVE-2025-38686.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD... | 5.5 | 0.0017 | | | [CVE-2025-38725](https://patchblox.com/security/data/cve/CVE-2025-38725.md) | Routine | net: usb: asix_devices: add phy_mask for ax88772 mdio bus | 5.5 | 0.0016 | | | [CVE-2025-39763](https://patchblox.com/security/data/cve/CVE-2025-39763.md) | Routine | ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered | 5.5 | 0.0016 | | | [CVE-2025-39747](https://patchblox.com/security/data/cve/CVE-2025-39747.md) | Routine | drm/msm: Add error handling for krealloc in metadata setup | 5.5 | 0.0016 | | | [CVE-2025-39753](https://patchblox.com/security/data/cve/CVE-2025-39753.md) | Routine | gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops | 5.5 | 0.0016 | | | [CVE-2025-39792](https://patchblox.com/security/data/cve/CVE-2025-39792.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm: Always split write BIOs to zoned device limi... | 5.5 | 0.0016 | | | [CVE-2025-38632](https://patchblox.com/security/data/cve/CVE-2025-38632.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 4.7 | 0.0014 | | | [CVE-2025-39754](https://patchblox.com/security/data/cve/CVE-2025-39754.md) | Routine | mm/smaps: fix race between smaps_hugetlb_range and migration | 5.5 | 0.0014 | | | [CVE-2025-38335](https://patchblox.com/security/data/cve/CVE-2025-38335.md) | Routine | Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT | 5.5 | 0.0014 | | | [CVE-2025-38675](https://patchblox.com/security/data/cve/CVE-2025-38675.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xf... | 5.9 | 0.0012 | | | [CVE-2025-38553](https://patchblox.com/security/data/cve/CVE-2025-38553.md) | Routine | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 5.5 | n/a | | | [CVE-2025-38611](https://patchblox.com/security/data/cve/CVE-2025-38611.md) | Routine | vmci: Prevent the dispatching of uninitialized payloads | 5.5 | n/a | | | [CVE-2025-39799](https://patchblox.com/security/data/cve/CVE-2025-39799.md) | Routine | ACPI: processor: perflib: Move problematic pr->performance check | 5.5 | n/a | | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.