{
  "fix": "ELSA-2025-20663",
  "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663",
  "summary": "ELSA-2025-20663, released October 11, 2025, fixes 136 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 8 packages",
  "released": "2025-10-11T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-38439, high severity",
  "supported": true,
  "cveCount": 136,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00581,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2025-20663.html",
  "appliesTo": [
    {
      "product": "kernel-uek",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-doc",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    },
    {
      "product": "kernel-uek-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.348.3.el7uek",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-38439",
      "url": "https://patchblox.com/security/cve/CVE-2025-38439",
      "title": "bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38608",
      "url": "https://patchblox.com/security/cve/CVE-2025-38608",
      "title": "bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38211",
      "url": "https://patchblox.com/security/cve/CVE-2025-38211",
      "title": "RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38563",
      "url": "https://patchblox.com/security/cve/CVE-2025-38563",
      "title": "perf/core: Prevent VMA split of buffer mappings",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38617",
      "url": "https://patchblox.com/security/cve/CVE-2025-38617",
      "title": "net/packet: fix a race in packet_set_ring() and packet_notifier()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38708",
      "url": "https://patchblox.com/security/cve/CVE-2025-38708",
      "title": "drbd: add missing kref_get in handle_write_conflicts",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38574",
      "url": "https://patchblox.com/security/cve/CVE-2025-38574",
      "title": "pptp: ensure minimal skb length in pptp_xmit()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-53237",
      "url": "https://patchblox.com/security/cve/CVE-2024-53237",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00318,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38377",
      "url": "https://patchblox.com/security/cve/CVE-2025-38377",
      "title": "rose: fix dangling neighbour pointers in rose_rt_device_down()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39798",
      "url": "https://patchblox.com/security/cve/CVE-2025-39798",
      "title": "NFS: Fix the setting of capabilities when automounting a new filesystem",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26958",
      "url": "https://patchblox.com/security/cve/CVE-2024-26958",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37798",
      "url": "https://patchblox.com/security/cve/CVE-2025-37798",
      "title": "codel: remove sch-\u003Eq.qlen check before qdisc_tree_reduce_backlog()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38403",
      "url": "https://patchblox.com/security/cve/CVE-2025-38403",
      "title": "vsock/vmci: Clear the vmci transport packet properly when initializing it",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38464",
      "url": "https://patchblox.com/security/cve/CVE-2025-38464",
      "title": "tipc: Fix use-after-free in tipc_conn_close().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38389",
      "url": "https://patchblox.com/security/cve/CVE-2025-38389",
      "title": "drm/i915/gt: Fix timeline left held on VMA alloc error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38386",
      "url": "https://patchblox.com/security/cve/CVE-2025-38386",
      "title": "ACPICA: Refuse to evaluate a method if arguments are missing",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38177",
      "url": "https://patchblox.com/security/cve/CVE-2025-38177",
      "title": "sch_hfsc: make hfsc_qlen_notify() idempotent",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38375",
      "url": "https://patchblox.com/security/cve/CVE-2025-38375",
      "title": "virtio-net: ensure the received length does not exceed allocated size",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38395",
      "url": "https://patchblox.com/security/cve/CVE-2025-38395",
      "title": "regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38401",
      "url": "https://patchblox.com/security/cve/CVE-2025-38401",
      "title": "mtk-sd: Prevent memory corruption from DMA map failure",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38459",
      "url": "https://patchblox.com/security/cve/CVE-2025-38459",
      "title": "atm: clip: Fix infinite recursive call of clip_push().",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38193",
      "url": "https://patchblox.com/security/cve/CVE-2025-38193",
      "title": "net_sched: sch_sfq: reject invalid perturb period",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38465",
      "url": "https://patchblox.com/security/cve/CVE-2025-38465",
      "title": "netlink: Fix wraparounds of sk-\u003Esk_rmem_alloc.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38729",
      "url": "https://patchblox.com/security/cve/CVE-2025-38729",
      "title": "ALSA: usb-audio: Validate UAC3 power domain descriptors, too",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38445",
      "url": "https://patchblox.com/security/cve/CVE-2025-38445",
      "title": "md/raid1: Fix stack memory use after return in raid1_reshape",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39730",
      "url": "https://patchblox.com/security/cve/CVE-2025-39730",
      "title": "NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38529",
      "url": "https://patchblox.com/security/cve/CVE-2025-38529",
      "title": "comedi: aio_iiro_16: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38530",
      "url": "https://patchblox.com/security/cve/CVE-2025-38530",
      "title": "comedi: pcl812: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38468",
      "url": "https://patchblox.com/security/cve/CVE-2025-38468",
      "title": "net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38457",
      "url": "https://patchblox.com/security/cve/CVE-2025-38457",
      "title": "net/sched: Abort __tc_modify_qdisc if parent class does not exist",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38458",
      "url": "https://patchblox.com/security/cve/CVE-2025-38458",
      "title": "atm: clip: Fix NULL pointer dereference in vcc_sendmsg()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38482",
      "url": "https://patchblox.com/security/cve/CVE-2025-38482",
      "title": "comedi: das6402: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38483",
      "url": "https://patchblox.com/security/cve/CVE-2025-38483",
      "title": "comedi: das16m1: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39691",
      "url": "https://patchblox.com/security/cve/CVE-2025-39691",
      "title": "fs/buffer: fix use-after-free when call bh_read() helper",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38478",
      "url": "https://patchblox.com/security/cve/CVE-2025-38478",
      "title": "comedi: Fix initialization of data for instructions that write to subdevice",
      "priority": "High",
      "severity": "medium",
      "cvss": 9.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38572",
      "url": "https://patchblox.com/security/cve/CVE-2025-38572",
      "title": "ipv6: reject malicious packets in ipv6_gso_segment()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38697",
      "url": "https://patchblox.com/security/cve/CVE-2025-38697",
      "title": "jfs: upper bound check of tree index in dbAllocAG",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38699",
      "url": "https://patchblox.com/security/cve/CVE-2025-38699",
      "title": "scsi: bfa: Double-free fix",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39689",
      "url": "https://patchblox.com/security/cve/CVE-2025-39689",
      "title": "ftrace: Also allocate and copy hash for reading of filter files",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38226",
      "url": "https://patchblox.com/security/cve/CVE-2025-38226",
      "title": "media: vivid: Change the siize of the composing",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38230",
      "url": "https://patchblox.com/security/cve/CVE-2025-38230",
      "title": "jfs: validate AG parameters in dbMount() to prevent crashes",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38565",
      "url": "https://patchblox.com/security/cve/CVE-2025-38565",
      "title": "perf/core: Exit early on perf_mmap() fail",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38473",
      "url": "https://patchblox.com/security/cve/CVE-2025-38473",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38474",
      "url": "https://patchblox.com/security/cve/CVE-2025-38474",
      "title": "usb: net: sierra: check for no status endpoint",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38701",
      "url": "https://patchblox.com/security/cve/CVE-2025-38701",
      "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38245",
      "url": "https://patchblox.com/security/cve/CVE-2025-38245",
      "title": "atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38538",
      "url": "https://patchblox.com/security/cve/CVE-2025-38538",
      "title": "dmaengine: nbpfaxi: Fix memory corruption in probe()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38578",
      "url": "https://patchblox.com/security/cve/CVE-2025-38578",
      "title": "f2fs: fix to avoid UAF in f2fs_sync_inode_meta()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.3,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38680",
      "url": "https://patchblox.com/security/cve/CVE-2025-38680",
      "title": "media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38497",
      "url": "https://patchblox.com/security/cve/CVE-2025-38497",
      "title": "usb: gadget: configfs: Fix OOB read on empty string write",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38249",
      "url": "https://patchblox.com/security/cve/CVE-2025-38249",
      "title": "ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38555",
      "url": "https://patchblox.com/security/cve/CVE-2025-38555",
      "title": "usb: gadget : fix use-after-free in composite_dev_cleanup()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39743",
      "url": "https://patchblox.com/security/cve/CVE-2025-39743",
      "title": "jfs: truncate good inode pages when hard link is 0",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39766",
      "url": "https://patchblox.com/security/cve/CVE-2025-39766",
      "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38698",
      "url": "https://patchblox.com/security/cve/CVE-2025-38698",
      "title": "jfs: Regular file corruption check",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38229",
      "url": "https://patchblox.com/security/cve/CVE-2025-38229",
      "title": "media: cxusb: no longer judge rbuf when the write fails",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38569",
      "url": "https://patchblox.com/security/cve/CVE-2025-38569",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  benet: fix BUG when creating VFs  benet crashes...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38581",
      "url": "https://patchblox.com/security/cve/CVE-2025-38581",
      "title": "crypto: ccp - Fix crash when rebind ccp device for ccp.ko",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38695",
      "url": "https://patchblox.com/security/cve/CVE-2025-38695",
      "title": "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38700",
      "url": "https://patchblox.com/security/cve/CVE-2025-38700",
      "title": "scsi: libiscsi: Initialize iscsi_conn-\u003Edd_data only if memory is allocated",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38652",
      "url": "https://patchblox.com/security/cve/CVE-2025-38652",
      "title": "f2fs: fix to avoid out-of-boundary access in devs.path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38714",
      "url": "https://patchblox.com/security/cve/CVE-2025-38714",
      "title": "hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()",
      "priority": "High",
      "severity": "high",
      "cvss": 9,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39757",
      "url": "https://patchblox.com/security/cve/CVE-2025-39757",
      "title": "ALSA: usb-audio: Validate UAC3 cluster segment descriptors",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38677",
      "url": "https://patchblox.com/security/cve/CVE-2025-38677",
      "title": "f2fs: fix to avoid out-of-boundary access in dnode page",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38715",
      "url": "https://patchblox.com/security/cve/CVE-2025-38715",
      "title": "hfs: fix slab-out-of-bounds in hfs_bnode_read()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39710",
      "url": "https://patchblox.com/security/cve/CVE-2025-39710",
      "title": "media: venus: Add a check for packet size after reading from shared memory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39742",
      "url": "https://patchblox.com/security/cve/CVE-2025-39742",
      "title": "RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38666",
      "url": "https://patchblox.com/security/cve/CVE-2025-38666",
      "title": "net: appletalk: Fix use-after-free in AARP proxy probe",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38713",
      "url": "https://patchblox.com/security/cve/CVE-2025-38713",
      "title": "hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39749",
      "url": "https://patchblox.com/security/cve/CVE-2025-39749",
      "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38718",
      "url": "https://patchblox.com/security/cve/CVE-2025-38718",
      "title": "sctp: linearize cloned gso packets in sctp_rcv",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39828",
      "url": "https://patchblox.com/security/cve/CVE-2025-39828",
      "title": "atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38668",
      "url": "https://patchblox.com/security/cve/CVE-2025-38668",
      "title": "regulator: core: fix NULL dereference on unbind due to stale coupling data",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39783",
      "url": "https://patchblox.com/security/cve/CVE-2025-39783",
      "title": "PCI: endpoint: Fix configfs group list head handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39824",
      "url": "https://patchblox.com/security/cve/CVE-2025-39824",
      "title": "HID: asus: fix UAF via HID_CLAIMED_INPUT validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39817",
      "url": "https://patchblox.com/security/cve/CVE-2025-39817",
      "title": "efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39794",
      "url": "https://patchblox.com/security/cve/CVE-2025-39794",
      "title": "ARM: tegra: Use I/O memcpy to write to IRAM",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38102",
      "url": "https://patchblox.com/security/cve/CVE-2025-38102",
      "title": "VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39713",
      "url": "https://patchblox.com/security/cve/CVE-2025-39713",
      "title": "media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38477",
      "url": "https://patchblox.com/security/cve/CVE-2025-38477",
      "title": "net/sched: sch_qfq: Fix race condition on qfq_aggregate",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38514",
      "url": "https://patchblox.com/security/cve/CVE-2025-38514",
      "title": "rxrpc: Fix oops due to non-existence of prealloc backlog struct",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-49935",
      "url": "https://patchblox.com/security/cve/CVE-2024-49935",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26644",
      "url": "https://patchblox.com/security/cve/CVE-2024-26644",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: don\u0027t abort filesystem when attempting to...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38400",
      "url": "https://patchblox.com/security/cve/CVE-2025-38400",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "Routine",
      "severity": "low",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38391",
      "url": "https://patchblox.com/security/cve/CVE-2025-38391",
      "title": "usb: typec: altmodes/displayport: do not index invalid pin_assignments",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38387",
      "url": "https://patchblox.com/security/cve/CVE-2025-38387",
      "title": "RDMA/mlx5: Initialize obj_event-\u003Eobj_sub_list before xa_insert",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38406",
      "url": "https://patchblox.com/security/cve/CVE-2025-38406",
      "title": "wifi: ath6kl: remove WARN on bad firmware input",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38470",
      "url": "https://patchblox.com/security/cve/CVE-2025-38470",
      "title": "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38467",
      "url": "https://patchblox.com/security/cve/CVE-2025-38467",
      "title": "drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38371",
      "url": "https://patchblox.com/security/cve/CVE-2025-38371",
      "title": "drm/v3d: Disable interrupts before resetting the GPU",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38460",
      "url": "https://patchblox.com/security/cve/CVE-2025-38460",
      "title": "atm: clip: Fix potential null-ptr-deref in to_atmarpd().",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38347",
      "url": "https://patchblox.com/security/cve/CVE-2025-38347",
      "title": "f2fs: fix to do sanity check on ino and xnid",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38691",
      "url": "https://patchblox.com/security/cve/CVE-2025-38691",
      "title": "pNFS: Fix uninited ptr deref in block/scsi layout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.2,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38539",
      "url": "https://patchblox.com/security/cve/CVE-2025-38539",
      "title": "tracing: Add down_write(trace_event_sem) when adding trace event",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38480",
      "url": "https://patchblox.com/security/cve/CVE-2025-38480",
      "title": "comedi: Fix use of uninitialized data in insn_rw_emulate_bits()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38481",
      "url": "https://patchblox.com/security/cve/CVE-2025-38481",
      "title": "comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38542",
      "url": "https://patchblox.com/security/cve/CVE-2025-38542",
      "title": "net: appletalk: Fix device refcount leak in atrtr_create()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38577",
      "url": "https://patchblox.com/security/cve/CVE-2025-38577",
      "title": "f2fs: fix to avoid panic in f2fs_evict_inode",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.6,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38262",
      "url": "https://patchblox.com/security/cve/CVE-2025-38262",
      "title": "tty: serial: uartlite: register uart driver in init",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38639",
      "url": "https://patchblox.com/security/cve/CVE-2025-38639",
      "title": "netfilter: xt_nfacct: don\u0027t assume acct name is null-terminated",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38622",
      "url": "https://patchblox.com/security/cve/CVE-2025-38622",
      "title": "net: drop UFO packets in udp_rcv_segment()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38664",
      "url": "https://patchblox.com/security/cve/CVE-2025-38664",
      "title": "ice: Fix a null pointer dereference in ice_copy_and_init_pkg()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38693",
      "url": "https://patchblox.com/security/cve/CVE-2025-38693",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38694",
      "url": "https://patchblox.com/security/cve/CVE-2025-38694",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39676",
      "url": "https://patchblox.com/security/cve/CVE-2025-39676",
      "title": "scsi: qla4xxx: Prevent a potential error pointer dereference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39756",
      "url": "https://patchblox.com/security/cve/CVE-2025-39756",
      "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38513",
      "url": "https://patchblox.com/security/cve/CVE-2025-38513",
      "title": "wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38516",
      "url": "https://patchblox.com/security/cve/CVE-2025-38516",
      "title": "pinctrl: qcom: msm: mark certain pins as invalid for interrupts",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38540",
      "url": "https://patchblox.com/security/cve/CVE-2025-38540",
      "title": "HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38546",
      "url": "https://patchblox.com/security/cve/CVE-2025-38546",
      "title": "atm: clip: Fix memory leak of struct clip_vcc.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38612",
      "url": "https://patchblox.com/security/cve/CVE-2025-38612",
      "title": "staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38635",
      "url": "https://patchblox.com/security/cve/CVE-2025-38635",
      "title": "clk: davinci: Add NULL check in davinci_lpsc_clk_register()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38663",
      "url": "https://patchblox.com/security/cve/CVE-2025-38663",
      "title": "nilfs2: reject invalid file types when reading inodes",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39724",
      "url": "https://patchblox.com/security/cve/CVE-2025-39724",
      "title": "serial: 8250: fix panic due to PSLVERR",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38604",
      "url": "https://patchblox.com/security/cve/CVE-2025-38604",
      "title": "wifi: rtl818x: Kill URBs before clearing tx status queue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39714",
      "url": "https://patchblox.com/security/cve/CVE-2025-39714",
      "title": "media: usbtv: Lock resolution while streaming",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38727",
      "url": "https://patchblox.com/security/cve/CVE-2025-38727",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38721",
      "url": "https://patchblox.com/security/cve/CVE-2025-38721",
      "title": "netfilter: ctnetlink: fix refcount leak on table dump",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39737",
      "url": "https://patchblox.com/security/cve/CVE-2025-39737",
      "title": "mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39752",
      "url": "https://patchblox.com/security/cve/CVE-2025-39752",
      "title": "ARM: rockchip: fix kernel hang during smp initialization",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39808",
      "url": "https://patchblox.com/security/cve/CVE-2025-39808",
      "title": "HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39812",
      "url": "https://patchblox.com/security/cve/CVE-2025-39812",
      "title": "sctp: initialize more fields in sctp_v6_from_sk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38630",
      "url": "https://patchblox.com/security/cve/CVE-2025-38630",
      "title": "fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39787",
      "url": "https://patchblox.com/security/cve/CVE-2025-39787",
      "title": "soc: qcom: mdt_loader: Ensure we don\u0027t read past the ELF header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38515",
      "url": "https://patchblox.com/security/cve/CVE-2025-38515",
      "title": "drm/sched: Increment job count before swapping tail spsc queue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39709",
      "url": "https://patchblox.com/security/cve/CVE-2025-39709",
      "title": "media: venus: protect against spurious interrupts during probe",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38602",
      "url": "https://patchblox.com/security/cve/CVE-2025-38602",
      "title": "iwlwifi: Add missing check for alloc_ordered_workqueue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38671",
      "url": "https://patchblox.com/security/cve/CVE-2025-38671",
      "title": "i2c: qup: jump out of the loop in case of timeout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38404",
      "url": "https://patchblox.com/security/cve/CVE-2025-38404",
      "title": "usb: typec: displayport: Fix potential deadlock",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38448",
      "url": "https://patchblox.com/security/cve/CVE-2025-38448",
      "title": "usb: gadget: u_serial: Fix race condition in TTY wakeup",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.2,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38650",
      "url": "https://patchblox.com/security/cve/CVE-2025-38650",
      "title": "hfsplus: remove mutex_lock check in hfsplus_free_extents",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38687",
      "url": "https://patchblox.com/security/cve/CVE-2025-38687",
      "title": "comedi: fix race between polling and detaching",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39736",
      "url": "https://patchblox.com/security/cve/CVE-2025-39736",
      "title": "mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39782",
      "url": "https://patchblox.com/security/cve/CVE-2025-39782",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: prevent softlockup in jbd2_log_do_checkpoi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39813",
      "url": "https://patchblox.com/security/cve/CVE-2025-39813",
      "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38553",
      "url": "https://patchblox.com/security/cve/CVE-2025-38553",
      "title": "net/sched: Restrict conditions for adding duplicating netems to qdisc tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}