# ELSA-2025-25754: Security update for 35 packages ELSA-2025-25754, released November 9, 2025, fixes 116 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-25754 - Platform: Linux - Released: Nov 9, 2025 - Priority: Urgent (Closes CVE-2025-39898, rated Critical) - CVEs: 116, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-25754.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-105.51.5.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-105.51.5.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-39898](https://patchblox.com/security/data/cve/CVE-2025-39898.md) | Urgent | e1000e: fix heap overflow in e1000_set_eeprom | 9.8 | n/a | | | [CVE-2025-39841](https://patchblox.com/security/data/cve/CVE-2025-39841.md) | High | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 7.8 | 0.0048 | | | [CVE-2025-38676](https://patchblox.com/security/data/cve/CVE-2025-38676.md) | High | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 7.8 | 0.0042 | | | [CVE-2025-39851](https://patchblox.com/security/data/cve/CVE-2025-39851.md) | High | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 7.0 | 0.0040 | | | [CVE-2025-38737](https://patchblox.com/security/data/cve/CVE-2025-38737.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix... | 7.8 | 0.0039 | | | [CVE-2025-39894](https://patchblox.com/security/data/cve/CVE-2025-39894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed... | 7.0 | 0.0033 | | | [CVE-2025-39880](https://patchblox.com/security/data/cve/CVE-2025-39880.md) | High | libceph: fix invalid accesses to ceph_connection_v1_info | 7.8 | 0.0033 | | | [CVE-2025-39673](https://patchblox.com/security/data/cve/CVE-2025-39673.md) | High | ppp: fix race conditions in ppp_fill_forward_path | 7.0 | 0.0032 | | | [CVE-2025-23133](https://patchblox.com/security/data/cve/CVE-2025-23133.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0031 | | | [CVE-2025-39932](https://patchblox.com/security/data/cve/CVE-2025-39932.md) | High | smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) | 7.0 | 0.0031 | | | [CVE-2025-22113](https://patchblox.com/security/data/cve/CVE-2025-22113.md) | High | ext4: avoid journaling sb update on error if journal is destroying | 7.8 | 0.0025 | | | [CVE-2025-39723](https://patchblox.com/security/data/cve/CVE-2025-39723.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If a... | 7.8 | 0.0024 | | | [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0024 | | | [CVE-2025-39864](https://patchblox.com/security/data/cve/CVE-2025-39864.md) | High | wifi: cfg80211: fix use-after-free in cmp_bss() | 7.8 | 0.0024 | | | [CVE-2025-39860](https://patchblox.com/security/data/cve/CVE-2025-39860.md) | High | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 7.8 | 0.0023 | | | [CVE-2025-39849](https://patchblox.com/security/data/cve/CVE-2025-39849.md) | High | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 | | | [CVE-2025-39918](https://patchblox.com/security/data/cve/CVE-2025-39918.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.6 | 0.0021 | | | [CVE-2025-39810](https://patchblox.com/security/data/cve/CVE-2025-39810.md) | High | bnxt_en: Fix memory corruption when FW resources change during ifdown | 7.8 | 0.0020 | | | [CVE-2025-38322](https://patchblox.com/security/data/cve/CVE-2025-38322.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 7.0 | 0.0020 | | | [CVE-2025-39850](https://patchblox.com/security/data/cve/CVE-2025-39850.md) | High | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 7.0 | 0.0020 | | | [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 | | | [CVE-2025-39689](https://patchblox.com/security/data/cve/CVE-2025-39689.md) | High | ftrace: Also allocate and copy hash for reading of filter files | 7.8 | 0.0019 | | | [CVE-2025-39683](https://patchblox.com/security/data/cve/CVE-2025-39683.md) | High | tracing: Limit access to parser->buffer when trace_get_user failed | 7.1 | 0.0019 | | | [CVE-2025-38453](https://patchblox.com/security/data/cve/CVE-2025-38453.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | | | [CVE-2025-39913](https://patchblox.com/security/data/cve/CVE-2025-39913.md) | High | tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. | 7.8 | 0.0019 | | | [CVE-2025-38502](https://patchblox.com/security/data/cve/CVE-2025-38502.md) | High | bpf: Fix oob access in cgroup local storage | 7.1 | 0.0019 | | | [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 | | | [CVE-2025-38732](https://patchblox.com/security/data/cve/CVE-2025-38732.md) | High | netfilter: nf_reject: don't leak dst refcount for loopback packets | 7.0 | 0.0018 | | | [CVE-2025-38735](https://patchblox.com/security/data/cve/CVE-2025-38735.md) | High | gve: prevent ethtool ops after shutdown | 7.0 | 0.0018 | | | [CVE-2025-38730](https://patchblox.com/security/data/cve/CVE-2025-38730.md) | High | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 | | | [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 | | | [CVE-2025-39835](https://patchblox.com/security/data/cve/CVE-2025-39835.md) | High | xfs: do not propagate ENODATA disk errors into xattr code | 7.8 | 0.0017 | | | [CVE-2025-38556](https://patchblox.com/security/data/cve/CVE-2025-38556.md) | High | HID: core: Harden s32ton() against conversion to 0 bits | 8.0 | 0.0017 | | | [CVE-2025-39914](https://patchblox.com/security/data/cve/CVE-2025-39914.md) | High | tracing: Silence warning when chunk allocation fails in trace_pid_write | 7.0 | 0.0017 | | | [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 | | | [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 | | | [CVE-2025-39902](https://patchblox.com/security/data/cve/CVE-2025-39902.md) | High | mm/slub: avoid accessing metadata when pointer is invalid in object_err() | 7.8 | 0.0017 | | | [CVE-2025-39817](https://patchblox.com/security/data/cve/CVE-2025-39817.md) | High | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 | | | [CVE-2025-39853](https://patchblox.com/security/data/cve/CVE-2025-39853.md) | High | i40e: Fix potential invalid access when MAC list is empty | 7.1 | 0.0017 | | | [CVE-2025-39891](https://patchblox.com/security/data/cve/CVE-2025-39891.md) | High | wifi: mwifiex: Initialize the chan_stats array to zero | 7.1 | 0.0017 | | | [CVE-2025-39865](https://patchblox.com/security/data/cve/CVE-2025-39865.md) | High | tee: fix NULL pointer dereference in tee_shm_put | 7.0 | 0.0016 | | | [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 | | | [CVE-2025-39790](https://patchblox.com/security/data/cve/CVE-2025-39790.md) | High | bus: mhi: host: Detect events pointing to unexpected TREs | 7.8 | 0.0016 | | | [CVE-2025-39911](https://patchblox.com/security/data/cve/CVE-2025-39911.md) | High | i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path | 7.8 | 0.0016 | | | [CVE-2025-39945](https://patchblox.com/security/data/cve/CVE-2025-39945.md) | High | cnic: Fix use-after-free bugs in cnic_delete_task | 7.8 | 0.0016 | | | [CVE-2025-39838](https://patchblox.com/security/data/cve/CVE-2025-39838.md) | High | cifs: prevent NULL pointer dereference in UTF16 conversion | 7.0 | 0.0016 | | | [CVE-2025-39697](https://patchblox.com/security/data/cve/CVE-2025-39697.md) | High | NFS: Fix a race when updating an existing write | 7.6 | 0.0016 | | | [CVE-2025-39870](https://patchblox.com/security/data/cve/CVE-2025-39870.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_w... | 7.8 | 0.0016 | | | [CVE-2025-39883](https://patchblox.com/security/data/cve/CVE-2025-39883.md) | High | mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory | 7.6 | 0.0016 | | | [CVE-2025-39949](https://patchblox.com/security/data/cve/CVE-2025-39949.md) | High | qed: Don't collect too many protection override GRC elements | 7.0 | 0.0016 | | | [CVE-2025-39861](https://patchblox.com/security/data/cve/CVE-2025-39861.md) | High | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 7.8 | 0.0016 | | | [CVE-2025-39901](https://patchblox.com/security/data/cve/CVE-2025-39901.md) | High | i40e: remove read access to debugfs files | 7.1 | 0.0016 | | | [CVE-2025-39871](https://patchblox.com/security/data/cve/CVE-2025-39871.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The... | 7.8 | 0.0015 | | | [CVE-2025-39877](https://patchblox.com/security/data/cve/CVE-2025-39877.md) | High | mm/damon/sysfs: fix use-after-free in state_show() | 7.8 | 0.0015 | | | [CVE-2025-39917](https://patchblox.com/security/data/cve/CVE-2025-39917.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpf_crypt... | 7.8 | 0.0015 | | | [CVE-2025-39854](https://patchblox.com/security/data/cve/CVE-2025-39854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ll_ts_... | 7.8 | 0.0015 | | | [CVE-2025-39721](https://patchblox.com/security/data/cve/CVE-2025-39721.md) | High | crypto: qat - flush misc workqueue during device shutdown | 7.0 | 0.0015 | | | [CVE-2025-39922](https://patchblox.com/security/data/cve/CVE-2025-39922.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0015 | | | [CVE-2025-39819](https://patchblox.com/security/data/cve/CVE-2025-39819.md) | High | fs/smb: Fix inconsistent refcnt update | 7.6 | 0.0015 | | | [CVE-2025-39903](https://patchblox.com/security/data/cve/CVE-2025-39903.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing k... | 7.3 | 0.0015 | | | [CVE-2025-39900](https://patchblox.com/security/data/cve/CVE-2025-39900.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 7.0 | 0.0015 | | | [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 | | | [CVE-2025-38306](https://patchblox.com/security/data/cve/CVE-2025-38306.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_c... | 7.0 | 0.0014 | | | [CVE-2025-39825](https://patchblox.com/security/data/cve/CVE-2025-39825.md) | High | smb: client: fix race with concurrent opens in rename(2) | 7.6 | 0.0012 | | | [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 | | | [CVE-2025-39843](https://patchblox.com/security/data/cve/CVE-2025-39843.md) | High | mm: slub: avoid wake up kswapd in set_track_prepare | 7.8 | 0.0012 | | | [CVE-2025-39832](https://patchblox.com/security/data/cve/CVE-2025-39832.md) | High | net/mlx5: Fix lockdep assertion on sync reset unload event | 7.0 | 0.0012 | | | [CVE-2025-39948](https://patchblox.com/security/data/cve/CVE-2025-39948.md) | Routine | kernel-docs: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 6.4 | 0.0040 | | | [CVE-2025-39770](https://patchblox.com/security/data/cve/CVE-2025-39770.md) | Routine | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0038 | | | [CVE-2025-39929](https://patchblox.com/security/data/cve/CVE-2025-39929.md) | Routine | smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path | 5.5 | 0.0031 | | | [CVE-2025-38272](https://patchblox.com/security/data/cve/CVE-2025-38272.md) | Routine | net: dsa: b53: do not enable EEE on bcm63xx | 5.5 | 0.0023 | | | [CVE-2025-22103](https://patchblox.com/security/data/cve/CVE-2025-22103.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0020 | | | [CVE-2025-39705](https://patchblox.com/security/data/cve/CVE-2025-39705.md) | Routine | drm/amd/display: fix a Null pointer dereference vulnerability | 5.5 | 0.0020 | | | [CVE-2025-22106](https://patchblox.com/security/data/cve/CVE-2025-22106.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0020 | | | [CVE-2025-22124](https://patchblox.com/security/data/cve/CVE-2025-22124.md) | Routine | md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb | 6.0 | 0.0020 | | | [CVE-2025-39940](https://patchblox.com/security/data/cve/CVE-2025-39940.md) | Routine | dm-stripe: fix a possible integer overflow | 6.1 | 0.0020 | | | [CVE-2025-39829](https://patchblox.com/security/data/cve/CVE-2025-39829.md) | Routine | trace/fgraph: Fix the warning caused by missing unregister notifier | 5.5 | 0.0019 | | | [CVE-2025-39676](https://patchblox.com/security/data/cve/CVE-2025-39676.md) | Routine | scsi: qla4xxx: Prevent a potential error pointer dereference | 5.5 | 0.0018 | | | [CVE-2025-39681](https://patchblox.com/security/data/cve/CVE-2025-39681.md) | Routine | x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | 5.5 | 0.0018 | | | [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 | | | [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 | | | [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 | | | [CVE-2025-39812](https://patchblox.com/security/data/cve/CVE-2025-39812.md) | Routine | sctp: initialize more fields in sctp_v6_from_sk() | 5.5 | 0.0018 | | | [CVE-2025-39842](https://patchblox.com/security/data/cve/CVE-2025-39842.md) | Routine | ocfs2: prevent release journal inode after journal shutdown | 5.5 | 0.0017 | | | [CVE-2025-39675](https://patchblox.com/security/data/cve/CVE-2025-39675.md) | Routine | drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() | 5.5 | 0.0017 | | | [CVE-2025-39693](https://patchblox.com/security/data/cve/CVE-2025-39693.md) | Routine | drm/amd/display: Avoid a NULL pointer dereference | 5.5 | 0.0017 | | | [CVE-2025-39679](https://patchblox.com/security/data/cve/CVE-2025-39679.md) | Routine | drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). | 5.5 | 0.0017 | | | [CVE-2025-39695](https://patchblox.com/security/data/cve/CVE-2025-39695.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE... | 5.5 | 0.0016 | | | [CVE-2025-39700](https://patchblox.com/security/data/cve/CVE-2025-39700.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to... | 5.5 | 0.0016 | | | [CVE-2025-39847](https://patchblox.com/security/data/cve/CVE-2025-39847.md) | Routine | ppp: fix memory leak in pad_compress_skb | 5.5 | 0.0016 | | | [CVE-2025-39805](https://patchblox.com/security/data/cve/CVE-2025-39805.md) | Routine | net: macb: fix unregister_netdev call order in macb_remove() | 5.5 | 0.0016 | | | [CVE-2025-39800](https://patchblox.com/security/data/cve/CVE-2025-39800.md) | Routine | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 5.5 | 0.0016 | | | [CVE-2025-39765](https://patchblox.com/security/data/cve/CVE-2025-39765.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: fix ida_free call while not allocat... | 5.5 | 0.0016 | | | [CVE-2025-39845](https://patchblox.com/security/data/cve/CVE-2025-39845.md) | Routine | x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() | 5.5 | 0.0016 | | | [CVE-2025-39953](https://patchblox.com/security/data/cve/CVE-2025-39953.md) | Routine | cgroup: split cgroup_destroy_wq into 3 workqueues | 5.5 | 0.0016 | | | [CVE-2025-39706](https://patchblox.com/security/data/cve/CVE-2025-39706.md) | Routine | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | 5.5 | 0.0016 | | | [CVE-2025-39927](https://patchblox.com/security/data/cve/CVE-2025-39927.md) | Routine | ceph: fix race condition validating r_parent before applying state | 6.4 | 0.0015 | | | [CVE-2025-39779](https://patchblox.com/security/data/cve/CVE-2025-39779.md) | Routine | btrfs: subpage: keep TOWRITE tag until folio is cleaned | 5.5 | 0.0015 | | | [CVE-2025-39780](https://patchblox.com/security/data/cve/CVE-2025-39780.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on... | 5.5 | 0.0015 | | | [CVE-2025-39923](https://patchblox.com/security/data/cve/CVE-2025-39923.md) | Routine | dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees | 5.5 | 0.0015 | | | [CVE-2025-39707](https://patchblox.com/security/data/cve/CVE-2025-39707.md) | Routine | drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities | 5.5 | 0.0015 | | | [CVE-2025-39886](https://patchblox.com/security/data/cve/CVE-2025-39886.md) | Routine | bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() | 5.5 | 0.0015 | | | [CVE-2025-39772](https://patchblox.com/security/data/cve/CVE-2025-39772.md) | Routine | drm/hisilicon/hibmc: fix the hibmc loaded failed bug | 5.5 | 0.0015 | | | [CVE-2025-39844](https://patchblox.com/security/data/cve/CVE-2025-39844.md) | Routine | mm: move page table sync declarations to linux/pgtable.h | 5.5 | 0.0015 | | | [CVE-2025-39895](https://patchblox.com/security/data/cve/CVE-2025-39895.md) | Routine | sched: Fix sched_numa_find_nth_cpu() if mask offline | 5.5 | 0.0015 | | | [CVE-2025-39926](https://patchblox.com/security/data/cve/CVE-2025-39926.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genl_bind() invoking bind() after... | 5.5 | 0.0015 | | | [CVE-2025-39947](https://patchblox.com/security/data/cve/CVE-2025-39947.md) | Routine | net/mlx5e: Harden uplink netdev access against device unbind | 5.5 | 0.0015 | | | [CVE-2025-39852](https://patchblox.com/security/data/cve/CVE-2025-39852.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix socket memory leak in TCP-AO failur... | 5.5 | 0.0015 | | | [CVE-2025-39899](https://patchblox.com/security/data/cve/CVE-2025-39899.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for... | 5.5 | 0.0015 | | | [CVE-2025-39782](https://patchblox.com/security/data/cve/CVE-2025-39782.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoi... | 5.5 | 0.0013 | | | [CVE-2025-39791](https://patchblox.com/security/data/cve/CVE-2025-39791.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs... | 5.5 | 0.0013 | | | [CVE-2025-39773](https://patchblox.com/security/data/cve/CVE-2025-39773.md) | Routine | net: bridge: fix soft lockup in br_multicast_query_expired() | 5.5 | 0.0012 | | | [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 | | | [CVE-2025-39885](https://patchblox.com/security/data/cve/CVE-2025-39885.md) | Routine | ocfs2: fix recursive semaphore deadlock in fiemap call | 5.5 | 0.0012 | | | [CVE-2025-39884](https://patchblox.com/security/data/cve/CVE-2025-39884.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by i... | 5.5 | 0.0011 | | | [CVE-2025-39867](https://patchblox.com/security/data/cve/CVE-2025-39867.md) | Routine | netfilter: nft_set_pipapo: fix null deref for empty set | 5.5 | n/a | | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.