# ELSA-2025-20663: Security update for 8 packages ELSA-2025-20663, released October 11, 2025, fixes 136 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20663 - Platform: Linux - Released: Oct 11, 2025 - Priority: High (Closes CVE-2025-38439, high severity) - CVEs: 136, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20663.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 | | | [CVE-2025-38608](https://patchblox.com/security/data/cve/CVE-2025-38608.md) | High | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 7.1 | 0.0041 | | | [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0041 | | | [CVE-2025-38563](https://patchblox.com/security/data/cve/CVE-2025-38563.md) | High | perf/core: Prevent VMA split of buffer mappings | 7.8 | 0.0040 | | | [CVE-2025-38617](https://patchblox.com/security/data/cve/CVE-2025-38617.md) | High | net/packet: fix a race in packet_set_ring() and packet_notifier() | 7.0 | 0.0040 | | | [CVE-2025-38708](https://patchblox.com/security/data/cve/CVE-2025-38708.md) | High | drbd: add missing kref_get in handle_write_conflicts | 7.8 | 0.0040 | | | [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0039 | | | [CVE-2024-53237](https://patchblox.com/security/data/cve/CVE-2024-53237.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0032 | | | [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 | | | [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 | | | [CVE-2024-26958](https://patchblox.com/security/data/cve/CVE-2024-26958.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 | | | [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | | | [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 | | | [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 | | | [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 | | | [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0021 | | | [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 | | | [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 | | | [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 | | | [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 | | | [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 | | | [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 | | | [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 | | | [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 | | | [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0020 | | | [CVE-2025-38529](https://patchblox.com/security/data/cve/CVE-2025-38529.md) | High | comedi: aio_iiro_16: Fix bit shift out of bounds | 7.1 | 0.0020 | | | [CVE-2025-38530](https://patchblox.com/security/data/cve/CVE-2025-38530.md) | High | comedi: pcl812: Fix bit shift out of bounds | 7.1 | 0.0020 | | | [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 | | | [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 | | | [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 | | | [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 | | | [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 | | | [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 | | | [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 | | | [CVE-2025-38572](https://patchblox.com/security/data/cve/CVE-2025-38572.md) | High | ipv6: reject malicious packets in ipv6_gso_segment() | 7.8 | 0.0019 | | | [CVE-2025-38697](https://patchblox.com/security/data/cve/CVE-2025-38697.md) | High | jfs: upper bound check of tree index in dbAllocAG | 7.8 | 0.0019 | | | [CVE-2025-38699](https://patchblox.com/security/data/cve/CVE-2025-38699.md) | High | scsi: bfa: Double-free fix | 7.8 | 0.0019 | | | [CVE-2025-39689](https://patchblox.com/security/data/cve/CVE-2025-39689.md) | High | ftrace: Also allocate and copy hash for reading of filter files | 7.8 | 0.0019 | | | [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0019 | | | [CVE-2025-38230](https://patchblox.com/security/data/cve/CVE-2025-38230.md) | High | jfs: validate AG parameters in dbMount() to prevent crashes | 7.8 | 0.0019 | | | [CVE-2025-38565](https://patchblox.com/security/data/cve/CVE-2025-38565.md) | High | perf/core: Exit early on perf_mmap() fail | 7.8 | 0.0019 | | | [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0019 | | | [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 | | | [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 | | | [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 | | | [CVE-2025-38538](https://patchblox.com/security/data/cve/CVE-2025-38538.md) | High | dmaengine: nbpfaxi: Fix memory corruption in probe() | 7.8 | 0.0019 | | | [CVE-2025-38578](https://patchblox.com/security/data/cve/CVE-2025-38578.md) | High | f2fs: fix to avoid UAF in f2fs_sync_inode_meta() | 7.3 | 0.0019 | | | [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 | | | [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 | | | [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0019 | | | [CVE-2025-38555](https://patchblox.com/security/data/cve/CVE-2025-38555.md) | High | usb: gadget : fix use-after-free in composite_dev_cleanup() | 7.8 | 0.0019 | | | [CVE-2025-39743](https://patchblox.com/security/data/cve/CVE-2025-39743.md) | High | jfs: truncate good inode pages when hard link is 0 | 9.8 | 0.0018 | | | [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 | | | [CVE-2025-38698](https://patchblox.com/security/data/cve/CVE-2025-38698.md) | High | jfs: Regular file corruption check | 7.1 | 0.0018 | | | [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0018 | | | [CVE-2025-38569](https://patchblox.com/security/data/cve/CVE-2025-38569.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes... | 7.0 | 0.0018 | | | [CVE-2025-38581](https://patchblox.com/security/data/cve/CVE-2025-38581.md) | High | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 7.0 | 0.0018 | | | [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 | | | [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 | | | [CVE-2025-38652](https://patchblox.com/security/data/cve/CVE-2025-38652.md) | High | f2fs: fix to avoid out-of-boundary access in devs.path | 7.1 | 0.0018 | | | [CVE-2025-38714](https://patchblox.com/security/data/cve/CVE-2025-38714.md) | High | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 9.0 | 0.0018 | | | [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 | | | [CVE-2025-38677](https://patchblox.com/security/data/cve/CVE-2025-38677.md) | High | f2fs: fix to avoid out-of-boundary access in dnode page | 7.1 | 0.0018 | | | [CVE-2025-38715](https://patchblox.com/security/data/cve/CVE-2025-38715.md) | High | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 7.1 | 0.0018 | | | [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 | | | [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 | | | [CVE-2025-38666](https://patchblox.com/security/data/cve/CVE-2025-38666.md) | High | net: appletalk: Fix use-after-free in AARP proxy probe | 7.8 | 0.0017 | | | [CVE-2025-38713](https://patchblox.com/security/data/cve/CVE-2025-38713.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | 7.1 | 0.0017 | | | [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 | | | [CVE-2025-38718](https://patchblox.com/security/data/cve/CVE-2025-38718.md) | High | sctp: linearize cloned gso packets in sctp_rcv | 7.8 | 0.0017 | | | [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 | | | [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 | | | [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 | | | [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 | | | [CVE-2025-39817](https://patchblox.com/security/data/cve/CVE-2025-39817.md) | High | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 | | | [CVE-2025-39794](https://patchblox.com/security/data/cve/CVE-2025-39794.md) | High | ARM: tegra: Use I/O memcpy to write to IRAM | 7.0 | 0.0016 | | | [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0016 | | | [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 | | | [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0014 | | | [CVE-2025-38514](https://patchblox.com/security/data/cve/CVE-2025-38514.md) | Routine | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 6.5 | 0.0039 | | | [CVE-2024-49935](https://patchblox.com/security/data/cve/CVE-2024-49935.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-26644](https://patchblox.com/security/data/cve/CVE-2024-26644.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to... | 5.5 | 0.0023 | | | [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0022 | | | [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 | | | [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 | | | [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 | | | [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 | | | [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 | | | [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 | | | [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0020 | | | [CVE-2025-38347](https://patchblox.com/security/data/cve/CVE-2025-38347.md) | Routine | f2fs: fix to do sanity check on ino and xnid | 5.5 | 0.0019 | | | [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 | | | [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 | | | [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 | | | [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 | | | [CVE-2025-38542](https://patchblox.com/security/data/cve/CVE-2025-38542.md) | Routine | net: appletalk: Fix device refcount leak in atrtr_create() | 5.5 | 0.0019 | | | [CVE-2025-38577](https://patchblox.com/security/data/cve/CVE-2025-38577.md) | Routine | f2fs: fix to avoid panic in f2fs_evict_inode | 6.6 | 0.0019 | | | [CVE-2025-38262](https://patchblox.com/security/data/cve/CVE-2025-38262.md) | Routine | tty: serial: uartlite: register uart driver in init | 5.5 | 0.0019 | | | [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 | | | [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 | | | [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 | | | [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-39676](https://patchblox.com/security/data/cve/CVE-2025-39676.md) | Routine | scsi: qla4xxx: Prevent a potential error pointer dereference | 5.5 | 0.0018 | | | [CVE-2025-39756](https://patchblox.com/security/data/cve/CVE-2025-39756.md) | Routine | fs: Prevent file descriptor table allocations exceeding INT_MAX | 5.5 | 0.0018 | | | [CVE-2025-38513](https://patchblox.com/security/data/cve/CVE-2025-38513.md) | Routine | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 5.5 | 0.0018 | | | [CVE-2025-38516](https://patchblox.com/security/data/cve/CVE-2025-38516.md) | Routine | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 5.5 | 0.0018 | | | [CVE-2025-38540](https://patchblox.com/security/data/cve/CVE-2025-38540.md) | Routine | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 5.5 | 0.0018 | | | [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 | | | [CVE-2025-38612](https://patchblox.com/security/data/cve/CVE-2025-38612.md) | Routine | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | 5.5 | 0.0018 | | | [CVE-2025-38635](https://patchblox.com/security/data/cve/CVE-2025-38635.md) | Routine | clk: davinci: Add NULL check in davinci_lpsc_clk_register() | 5.5 | 0.0018 | | | [CVE-2025-38663](https://patchblox.com/security/data/cve/CVE-2025-38663.md) | Routine | nilfs2: reject invalid file types when reading inodes | 5.5 | 0.0018 | | | [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 | | | [CVE-2025-38604](https://patchblox.com/security/data/cve/CVE-2025-38604.md) | Routine | wifi: rtl818x: Kill URBs before clearing tx status queue | 5.5 | 0.0018 | | | [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 | | | [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 | | | [CVE-2025-39737](https://patchblox.com/security/data/cve/CVE-2025-39737.md) | Routine | mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() | 5.5 | 0.0018 | | | [CVE-2025-39752](https://patchblox.com/security/data/cve/CVE-2025-39752.md) | Routine | ARM: rockchip: fix kernel hang during smp initialization | 5.5 | 0.0018 | | | [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 | | | [CVE-2025-39812](https://patchblox.com/security/data/cve/CVE-2025-39812.md) | Routine | sctp: initialize more fields in sctp_v6_from_sk() | 5.5 | 0.0018 | | | [CVE-2025-38630](https://patchblox.com/security/data/cve/CVE-2025-38630.md) | Routine | fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | 5.5 | 0.0017 | | | [CVE-2025-39787](https://patchblox.com/security/data/cve/CVE-2025-39787.md) | Routine | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | 5.5 | 0.0017 | | | [CVE-2025-38515](https://patchblox.com/security/data/cve/CVE-2025-38515.md) | Routine | drm/sched: Increment job count before swapping tail spsc queue | 5.5 | 0.0017 | | | [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 | | | [CVE-2025-38602](https://patchblox.com/security/data/cve/CVE-2025-38602.md) | Routine | iwlwifi: Add missing check for alloc_ordered_workqueue | 5.5 | 0.0017 | | | [CVE-2025-38671](https://patchblox.com/security/data/cve/CVE-2025-38671.md) | Routine | i2c: qup: jump out of the loop in case of timeout | 5.5 | 0.0017 | | | [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 | | | [CVE-2025-38448](https://patchblox.com/security/data/cve/CVE-2025-38448.md) | Routine | usb: gadget: u_serial: Fix race condition in TTY wakeup | 6.2 | 0.0014 | | | [CVE-2025-38650](https://patchblox.com/security/data/cve/CVE-2025-38650.md) | Routine | hfsplus: remove mutex_lock check in hfsplus_free_extents | 5.5 | 0.0014 | | | [CVE-2025-38687](https://patchblox.com/security/data/cve/CVE-2025-38687.md) | Routine | comedi: fix race between polling and detaching | 5.5 | 0.0013 | | | [CVE-2025-39736](https://patchblox.com/security/data/cve/CVE-2025-39736.md) | Routine | mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock | 5.5 | 0.0013 | | | [CVE-2025-39782](https://patchblox.com/security/data/cve/CVE-2025-39782.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoi... | 5.5 | 0.0013 | | | [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 | | | [CVE-2025-38553](https://patchblox.com/security/data/cve/CVE-2025-38553.md) | Routine | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 5.5 | n/a | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo