{ "fix": "ELSA-2025-25754", "url": "https://patchblox.com/security/fix/linux/elsa-2025-25754", "summary": "ELSA-2025-25754, released November 9, 2025, fixes 116 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 35 packages", "released": "2025-11-09T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2025-39898, rated Critical", "supported": true, "cveCount": 116, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00481, "maxCvss": 9.8, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2025-25754.html", "appliesTo": [ { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-105.51.5.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2025-39898", "url": "https://patchblox.com/security/cve/CVE-2025-39898", "title": "e1000e: fix heap overflow in e1000_set_eeprom", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39841", "url": "https://patchblox.com/security/cve/CVE-2025-39841", "title": "scsi: lpfc: Fix buffer free/clear order in deferred receive path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00481, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38676", "url": "https://patchblox.com/security/cve/CVE-2025-38676", "title": "iommu/amd: Avoid stack buffer overflow from kernel cmdline", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39851", "url": "https://patchblox.com/security/cve/CVE-2025-39851", "title": "vxlan: Fix NPD when refreshing an FDB entry with a nexthop object", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00397, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38737", "url": "https://patchblox.com/security/cve/CVE-2025-38737", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncifs: Fix oops due to uninitialised variable\nFix...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00391, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39894", "url": "https://patchblox.com/security/cve/CVE-2025-39894", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00332, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39880", "url": "https://patchblox.com/security/cve/CVE-2025-39880", "title": "libceph: fix invalid accesses to ceph_connection_v1_info", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39673", "url": "https://patchblox.com/security/cve/CVE-2025-39673", "title": "ppp: fix race conditions in ppp_fill_forward_path", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23133", "url": "https://patchblox.com/security/cve/CVE-2025-23133", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39932", "url": "https://patchblox.com/security/cve/CVE-2025-39932", "title": "smb: client: let smbd_destroy() call disable_work_sync(\u0026info-\u003Epost_send_credits_work)", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00305, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22113", "url": "https://patchblox.com/security/cve/CVE-2025-22113", "title": "ext4: avoid journaling sb update on error if journal is destroying", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39723", "url": "https://patchblox.com/security/cve/CVE-2025-39723", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00243, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39806", "url": "https://patchblox.com/security/cve/CVE-2025-39806", "title": "kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: H...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39864", "url": "https://patchblox.com/security/cve/CVE-2025-39864", "title": "wifi: cfg80211: fix use-after-free in cmp_bss()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39860", "url": "https://patchblox.com/security/cve/CVE-2025-39860", "title": "Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39849", "url": "https://patchblox.com/security/cve/CVE-2025-39849", "title": "wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39918", "url": "https://patchblox.com/security/cve/CVE-2025-39918", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Moderate", "cvss": 7.6, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39810", "url": "https://patchblox.com/security/cve/CVE-2025-39810", "title": "bnxt_en: Fix memory corruption when FW resources change during ifdown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38322", "url": "https://patchblox.com/security/cve/CVE-2025-38322", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39850", "url": "https://patchblox.com/security/cve/CVE-2025-39850", "title": "vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39691", "url": "https://patchblox.com/security/cve/CVE-2025-39691", "title": "fs/buffer: fix use-after-free when call bh_read() helper", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39689", "url": "https://patchblox.com/security/cve/CVE-2025-39689", "title": "ftrace: Also allocate and copy hash for reading of filter files", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39683", "url": "https://patchblox.com/security/cve/CVE-2025-39683", "title": "tracing: Limit access to parser-\u003Ebuffer when trace_get_user failed", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38453", "url": "https://patchblox.com/security/cve/CVE-2025-38453", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39913", "url": "https://patchblox.com/security/cve/CVE-2025-39913", "title": "tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-\u003Ecork.", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38502", "url": "https://patchblox.com/security/cve/CVE-2025-38502", "title": "bpf: Fix oob access in cgroup local storage", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39766", "url": "https://patchblox.com/security/cve/CVE-2025-39766", "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38732", "url": "https://patchblox.com/security/cve/CVE-2025-38732", "title": "netfilter: nf_reject: don\u0027t leak dst refcount for loopback packets", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38735", "url": "https://patchblox.com/security/cve/CVE-2025-38735", "title": "gve: prevent ethtool ops after shutdown", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38730", "url": "https://patchblox.com/security/cve/CVE-2025-38730", "title": "io_uring/net: commit partial buffers on retry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39828", "url": "https://patchblox.com/security/cve/CVE-2025-39828", "title": "atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39835", "url": "https://patchblox.com/security/cve/CVE-2025-39835", "title": "xfs: do not propagate ENODATA disk errors into xattr code", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38556", "url": "https://patchblox.com/security/cve/CVE-2025-38556", "title": "HID: core: Harden s32ton() against conversion to 0 bits", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39914", "url": "https://patchblox.com/security/cve/CVE-2025-39914", "title": "tracing: Silence warning when chunk allocation fails in trace_pid_write", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39931", "url": "https://patchblox.com/security/cve/CVE-2025-39931", "title": "crypto: af_alg - Set merge to zero early in af_alg_sendmsg", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39824", "url": "https://patchblox.com/security/cve/CVE-2025-39824", "title": "HID: asus: fix UAF via HID_CLAIMED_INPUT validation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39902", "url": "https://patchblox.com/security/cve/CVE-2025-39902", "title": "mm/slub: avoid accessing metadata when pointer is invalid in object_err()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39817", "url": "https://patchblox.com/security/cve/CVE-2025-39817", "title": "efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare", "priority": "High", "severity": "Important", "cvss": 7.6, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39853", "url": "https://patchblox.com/security/cve/CVE-2025-39853", "title": "i40e: Fix potential invalid access when MAC list is empty", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39891", "url": "https://patchblox.com/security/cve/CVE-2025-39891", "title": "wifi: mwifiex: Initialize the chan_stats array to zero", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39865", "url": "https://patchblox.com/security/cve/CVE-2025-39865", "title": "tee: fix NULL pointer dereference in tee_shm_put", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39863", "url": "https://patchblox.com/security/cve/CVE-2025-39863", "title": "wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39790", "url": "https://patchblox.com/security/cve/CVE-2025-39790", "title": "bus: mhi: host: Detect events pointing to unexpected TREs", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39911", "url": "https://patchblox.com/security/cve/CVE-2025-39911", "title": "i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39945", "url": "https://patchblox.com/security/cve/CVE-2025-39945", "title": "cnic: Fix use-after-free bugs in cnic_delete_task", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39838", "url": "https://patchblox.com/security/cve/CVE-2025-39838", "title": "cifs: prevent NULL pointer dereference in UTF16 conversion", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39697", "url": "https://patchblox.com/security/cve/CVE-2025-39697", "title": "NFS: Fix a race when updating an existing write", "priority": "High", "severity": "Moderate", "cvss": 7.6, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39870", "url": "https://patchblox.com/security/cve/CVE-2025-39870", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_w...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39883", "url": "https://patchblox.com/security/cve/CVE-2025-39883", "title": "mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory", "priority": "High", "severity": "Low", "cvss": 7.6, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39949", "url": "https://patchblox.com/security/cve/CVE-2025-39949", "title": "qed: Don\u0027t collect too many protection override GRC elements", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39861", "url": "https://patchblox.com/security/cve/CVE-2025-39861", "title": "Bluetooth: vhci: Prevent use-after-free by removing debugfs files early", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39901", "url": "https://patchblox.com/security/cve/CVE-2025-39901", "title": "i40e: remove read access to debugfs files", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39871", "url": "https://patchblox.com/security/cve/CVE-2025-39871", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39877", "url": "https://patchblox.com/security/cve/CVE-2025-39877", "title": "mm/damon/sysfs: fix use-after-free in state_show()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39917", "url": "https://patchblox.com/security/cve/CVE-2025-39917", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpf_crypt...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39854", "url": "https://patchblox.com/security/cve/CVE-2025-39854", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx-\u003Ein_use in ice_ll_ts_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39721", "url": "https://patchblox.com/security/cve/CVE-2025-39721", "title": "crypto: qat - flush misc workqueue during device shutdown", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39922", "url": "https://patchblox.com/security/cve/CVE-2025-39922", "title": "kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39819", "url": "https://patchblox.com/security/cve/CVE-2025-39819", "title": "fs/smb: Fix inconsistent refcnt update", "priority": "High", "severity": "Moderate", "cvss": 7.6, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39903", "url": "https://patchblox.com/security/cve/CVE-2025-39903", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nof_numa: fix uninitialized memory nodes causing k...", "priority": "High", "severity": "moderate", "cvss": 7.3, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39900", "url": "https://patchblox.com/security/cve/CVE-2025-39900", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39713", "url": "https://patchblox.com/security/cve/CVE-2025-39713", "title": "media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38306", "url": "https://patchblox.com/security/cve/CVE-2025-38306", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_c...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39825", "url": "https://patchblox.com/security/cve/CVE-2025-39825", "title": "smb: client: fix race with concurrent opens in rename(2)", "priority": "High", "severity": "Important", "cvss": 7.6, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39759", "url": "https://patchblox.com/security/cve/CVE-2025-39759", "title": "btrfs: qgroup: fix race between quota disable and quota rescan ioctl", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39843", "url": "https://patchblox.com/security/cve/CVE-2025-39843", "title": "mm: slub: avoid wake up kswapd in set_track_prepare", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39832", "url": "https://patchblox.com/security/cve/CVE-2025-39832", "title": "net/mlx5: Fix lockdep assertion on sync reset unload event", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39948", "url": "https://patchblox.com/security/cve/CVE-2025-39948", "title": "kernel-docs: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 6.4, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39770", "url": "https://patchblox.com/security/cve/CVE-2025-39770", "title": "net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39929", "url": "https://patchblox.com/security/cve/CVE-2025-39929", "title": "smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00314, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38272", "url": "https://patchblox.com/security/cve/CVE-2025-38272", "title": "net: dsa: b53: do not enable EEE on bcm63xx", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22103", "url": "https://patchblox.com/security/cve/CVE-2025-22103", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39705", "url": "https://patchblox.com/security/cve/CVE-2025-39705", "title": "drm/amd/display: fix a Null pointer dereference vulnerability", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22106", "url": "https://patchblox.com/security/cve/CVE-2025-22106", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22124", "url": "https://patchblox.com/security/cve/CVE-2025-22124", "title": "md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39940", "url": "https://patchblox.com/security/cve/CVE-2025-39940", "title": "dm-stripe: fix a possible integer overflow", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39829", "url": "https://patchblox.com/security/cve/CVE-2025-39829", "title": "trace/fgraph: Fix the warning caused by missing unregister notifier", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39676", "url": "https://patchblox.com/security/cve/CVE-2025-39676", "title": "scsi: qla4xxx: Prevent a potential error pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39681", "url": "https://patchblox.com/security/cve/CVE-2025-39681", "title": "x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39724", "url": "https://patchblox.com/security/cve/CVE-2025-39724", "title": "serial: 8250: fix panic due to PSLVERR", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39714", "url": "https://patchblox.com/security/cve/CVE-2025-39714", "title": "media: usbtv: Lock resolution while streaming", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39808", "url": "https://patchblox.com/security/cve/CVE-2025-39808", "title": "HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39812", "url": "https://patchblox.com/security/cve/CVE-2025-39812", "title": "sctp: initialize more fields in sctp_v6_from_sk()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39842", "url": "https://patchblox.com/security/cve/CVE-2025-39842", "title": "ocfs2: prevent release journal inode after journal shutdown", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39675", "url": "https://patchblox.com/security/cve/CVE-2025-39675", "title": "drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39693", "url": "https://patchblox.com/security/cve/CVE-2025-39693", "title": "drm/amd/display: Avoid a NULL pointer dereference", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39679", "url": "https://patchblox.com/security/cve/CVE-2025-39679", "title": "drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39695", "url": "https://patchblox.com/security/cve/CVE-2025-39695", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39700", "url": "https://patchblox.com/security/cve/CVE-2025-39700", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39847", "url": "https://patchblox.com/security/cve/CVE-2025-39847", "title": "ppp: fix memory leak in pad_compress_skb", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39805", "url": "https://patchblox.com/security/cve/CVE-2025-39805", "title": "net: macb: fix unregister_netdev call order in macb_remove()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39800", "url": "https://patchblox.com/security/cve/CVE-2025-39800", "title": "btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39765", "url": "https://patchblox.com/security/cve/CVE-2025-39765", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: fix ida_free call while not allocat...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39845", "url": "https://patchblox.com/security/cve/CVE-2025-39845", "title": "x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39953", "url": "https://patchblox.com/security/cve/CVE-2025-39953", "title": "cgroup: split cgroup_destroy_wq into 3 workqueues", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39706", "url": "https://patchblox.com/security/cve/CVE-2025-39706", "title": "drm/amdkfd: Destroy KFD debugfs after destroy KFD wq", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39927", "url": "https://patchblox.com/security/cve/CVE-2025-39927", "title": "ceph: fix race condition validating r_parent before applying state", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39779", "url": "https://patchblox.com/security/cve/CVE-2025-39779", "title": "btrfs: subpage: keep TOWRITE tag until folio is cleaned", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39780", "url": "https://patchblox.com/security/cve/CVE-2025-39780", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39923", "url": "https://patchblox.com/security/cve/CVE-2025-39923", "title": "dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39707", "url": "https://patchblox.com/security/cve/CVE-2025-39707", "title": "drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39886", "url": "https://patchblox.com/security/cve/CVE-2025-39886", "title": "bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39772", "url": "https://patchblox.com/security/cve/CVE-2025-39772", "title": "drm/hisilicon/hibmc: fix the hibmc loaded failed bug", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39844", "url": "https://patchblox.com/security/cve/CVE-2025-39844", "title": "mm: move page table sync declarations to linux/pgtable.h", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39895", "url": "https://patchblox.com/security/cve/CVE-2025-39895", "title": "sched: Fix sched_numa_find_nth_cpu() if mask offline", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39926", "url": "https://patchblox.com/security/cve/CVE-2025-39926", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genl_bind() invoking bind() after...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39947", "url": "https://patchblox.com/security/cve/CVE-2025-39947", "title": "net/mlx5e: Harden uplink netdev access against device unbind", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39852", "url": "https://patchblox.com/security/cve/CVE-2025-39852", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix socket memory leak in TCP-AO failur...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39899", "url": "https://patchblox.com/security/cve/CVE-2025-39899", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39782", "url": "https://patchblox.com/security/cve/CVE-2025-39782", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39791", "url": "https://patchblox.com/security/cve/CVE-2025-39791", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39773", "url": "https://patchblox.com/security/cve/CVE-2025-39773", "title": "net: bridge: fix soft lockup in br_multicast_query_expired()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39813", "url": "https://patchblox.com/security/cve/CVE-2025-39813", "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39885", "url": "https://patchblox.com/security/cve/CVE-2025-39885", "title": "ocfs2: fix recursive semaphore deadlock in fiemap call", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39884", "url": "https://patchblox.com/security/cve/CVE-2025-39884", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00108, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39867", "url": "https://patchblox.com/security/cve/CVE-2025-39867", "title": "netfilter: nft_set_pipapo: fix null deref for empty set", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-07T06:34:28Z" }