{
  "fix": "ELSA-2025-25757",
  "url": "https://patchblox.com/security/fix/linux/elsa-2025-25757",
  "summary": "ELSA-2025-25757, released November 10, 2025, fixes 116 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 19 packages",
  "released": "2025-11-10T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-39898, rated Critical",
  "supported": true,
  "cveCount": 116,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00481,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2025-25757.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-container-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container-debug",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-debug-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-doc",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-doc",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    },
    {
      "product": "kernel-uek64k-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-314.193.5.3.el9uek",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39898",
      "url": "https://patchblox.com/security/cve/CVE-2025-39898",
      "title": "e1000e: fix heap overflow in e1000_set_eeprom",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39841",
      "url": "https://patchblox.com/security/cve/CVE-2025-39841",
      "title": "scsi: lpfc: Fix buffer free/clear order in deferred receive path",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38676",
      "url": "https://patchblox.com/security/cve/CVE-2025-38676",
      "title": "iommu/amd: Avoid stack buffer overflow from kernel cmdline",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38608",
      "url": "https://patchblox.com/security/cve/CVE-2025-38608",
      "title": "bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38563",
      "url": "https://patchblox.com/security/cve/CVE-2025-38563",
      "title": "perf/core: Prevent VMA split of buffer mappings",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38617",
      "url": "https://patchblox.com/security/cve/CVE-2025-38617",
      "title": "net/packet: fix a race in packet_set_ring() and packet_notifier()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38708",
      "url": "https://patchblox.com/security/cve/CVE-2025-38708",
      "title": "drbd: add missing kref_get in handle_write_conflicts",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39703",
      "url": "https://patchblox.com/security/cve/CVE-2025-39703",
      "title": "net, hsr: reject HSR frame if skb can\u0027t hold tag",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38574",
      "url": "https://patchblox.com/security/cve/CVE-2025-38574",
      "title": "pptp: ensure minimal skb length in pptp_xmit()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39894",
      "url": "https://patchblox.com/security/cve/CVE-2025-39894",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: br_netfilter: do not check confirmed...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39673",
      "url": "https://patchblox.com/security/cve/CVE-2025-39673",
      "title": "ppp: fix race conditions in ppp_fill_forward_path",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39798",
      "url": "https://patchblox.com/security/cve/CVE-2025-39798",
      "title": "NFS: Fix the setting of capabilities when automounting a new filesystem",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38601",
      "url": "https://patchblox.com/security/cve/CVE-2025-38601",
      "title": "wifi: ath11k: clear initialized flag for deinit-ed srng lists",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39806",
      "url": "https://patchblox.com/security/cve/CVE-2025-39806",
      "title": "kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: H...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39864",
      "url": "https://patchblox.com/security/cve/CVE-2025-39864",
      "title": "wifi: cfg80211: fix use-after-free in cmp_bss()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37916",
      "url": "https://patchblox.com/security/cve/CVE-2025-37916",
      "title": "pds_core: remove write-after-free of client_id",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39860",
      "url": "https://patchblox.com/security/cve/CVE-2025-39860",
      "title": "Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37798",
      "url": "https://patchblox.com/security/cve/CVE-2025-37798",
      "title": "codel: remove sch-\u003Eq.qlen check before qdisc_tree_reduce_backlog()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38095",
      "url": "https://patchblox.com/security/cve/CVE-2025-38095",
      "title": "dma-buf: insert memory barrier before updating num_fences",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38177",
      "url": "https://patchblox.com/security/cve/CVE-2025-38177",
      "title": "sch_hfsc: make hfsc_qlen_notify() idempotent",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38425",
      "url": "https://patchblox.com/security/cve/CVE-2025-38425",
      "title": "i2c: tegra: check msg length in SMBUS block read",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38729",
      "url": "https://patchblox.com/security/cve/CVE-2025-38729",
      "title": "ALSA: usb-audio: Validate UAC3 power domain descriptors, too",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39730",
      "url": "https://patchblox.com/security/cve/CVE-2025-39730",
      "title": "NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38468",
      "url": "https://patchblox.com/security/cve/CVE-2025-38468",
      "title": "net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39691",
      "url": "https://patchblox.com/security/cve/CVE-2025-39691",
      "title": "fs/buffer: fix use-after-free when call bh_read() helper",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37953",
      "url": "https://patchblox.com/security/cve/CVE-2025-37953",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37987",
      "url": "https://patchblox.com/security/cve/CVE-2025-37987",
      "title": "pds_core: Prevent possible adminq overflow/stuck condition",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38572",
      "url": "https://patchblox.com/security/cve/CVE-2025-38572",
      "title": "ipv6: reject malicious packets in ipv6_gso_segment()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38699",
      "url": "https://patchblox.com/security/cve/CVE-2025-38699",
      "title": "scsi: bfa: Double-free fix",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39689",
      "url": "https://patchblox.com/security/cve/CVE-2025-39689",
      "title": "ftrace: Also allocate and copy hash for reading of filter files",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39683",
      "url": "https://patchblox.com/security/cve/CVE-2025-39683",
      "title": "tracing: Limit access to parser-\u003Ebuffer when trace_get_user failed",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38565",
      "url": "https://patchblox.com/security/cve/CVE-2025-38565",
      "title": "perf/core: Exit early on perf_mmap() fail",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38473",
      "url": "https://patchblox.com/security/cve/CVE-2025-38473",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38474",
      "url": "https://patchblox.com/security/cve/CVE-2025-38474",
      "title": "usb: net: sierra: check for no status endpoint",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38701",
      "url": "https://patchblox.com/security/cve/CVE-2025-38701",
      "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38502",
      "url": "https://patchblox.com/security/cve/CVE-2025-38502",
      "title": "bpf: Fix oob access in cgroup local storage",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38680",
      "url": "https://patchblox.com/security/cve/CVE-2025-38680",
      "title": "media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38497",
      "url": "https://patchblox.com/security/cve/CVE-2025-38497",
      "title": "usb: gadget: configfs: Fix OOB read on empty string write",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38535",
      "url": "https://patchblox.com/security/cve/CVE-2025-38535",
      "title": "phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38555",
      "url": "https://patchblox.com/security/cve/CVE-2025-38555",
      "title": "usb: gadget : fix use-after-free in composite_dev_cleanup()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38685",
      "url": "https://patchblox.com/security/cve/CVE-2025-38685",
      "title": "fbdev: Fix vmalloc out-of-bounds write in fast_imageblit",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38614",
      "url": "https://patchblox.com/security/cve/CVE-2025-38614",
      "title": "eventpoll: Fix semi-unbounded recursion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39766",
      "url": "https://patchblox.com/security/cve/CVE-2025-39766",
      "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38684",
      "url": "https://patchblox.com/security/cve/CVE-2025-38684",
      "title": "net/sched: ets: use old \u0027nbands\u0027 while purging unused classes",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38695",
      "url": "https://patchblox.com/security/cve/CVE-2025-38695",
      "title": "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38700",
      "url": "https://patchblox.com/security/cve/CVE-2025-38700",
      "title": "scsi: libiscsi: Initialize iscsi_conn-\u003Edd_data only if memory is allocated",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38732",
      "url": "https://patchblox.com/security/cve/CVE-2025-38732",
      "title": "netfilter: nf_reject: don\u0027t leak dst refcount for loopback packets",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38736",
      "url": "https://patchblox.com/security/cve/CVE-2025-38736",
      "title": "net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39757",
      "url": "https://patchblox.com/security/cve/CVE-2025-39757",
      "title": "ALSA: usb-audio: Validate UAC3 cluster segment descriptors",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39760",
      "url": "https://patchblox.com/security/cve/CVE-2025-39760",
      "title": "usb: core: config: Prevent OOB read in SS endpoint companion parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39742",
      "url": "https://patchblox.com/security/cve/CVE-2025-39742",
      "title": "RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39738",
      "url": "https://patchblox.com/security/cve/CVE-2025-39738",
      "title": "btrfs: do not allow relocation of partially dropped subvolumes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39749",
      "url": "https://patchblox.com/security/cve/CVE-2025-39749",
      "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38550",
      "url": "https://patchblox.com/security/cve/CVE-2025-38550",
      "title": "ipv6: mcast: Delay put pmc-\u003Eidev in mld_del_delrec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38718",
      "url": "https://patchblox.com/security/cve/CVE-2025-38718",
      "title": "sctp: linearize cloned gso packets in sctp_rcv",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39828",
      "url": "https://patchblox.com/security/cve/CVE-2025-39828",
      "title": "atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39835",
      "url": "https://patchblox.com/security/cve/CVE-2025-39835",
      "title": "xfs: do not propagate ENODATA disk errors into xattr code",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38668",
      "url": "https://patchblox.com/security/cve/CVE-2025-38668",
      "title": "regulator: core: fix NULL dereference on unbind due to stale coupling data",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39824",
      "url": "https://patchblox.com/security/cve/CVE-2025-39824",
      "title": "HID: asus: fix UAF via HID_CLAIMED_INPUT validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39902",
      "url": "https://patchblox.com/security/cve/CVE-2025-39902",
      "title": "mm/slub: avoid accessing metadata when pointer is invalid in object_err()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39817",
      "url": "https://patchblox.com/security/cve/CVE-2025-39817",
      "title": "efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38670",
      "url": "https://patchblox.com/security/cve/CVE-2025-38670",
      "title": "arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39853",
      "url": "https://patchblox.com/security/cve/CVE-2025-39853",
      "title": "i40e: Fix potential invalid access when MAC list is empty",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39891",
      "url": "https://patchblox.com/security/cve/CVE-2025-39891",
      "title": "wifi: mwifiex: Initialize the chan_stats array to zero",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38609",
      "url": "https://patchblox.com/security/cve/CVE-2025-38609",
      "title": "PM / devfreq: Check governor before using governor-\u003Ename",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39865",
      "url": "https://patchblox.com/security/cve/CVE-2025-39865",
      "title": "tee: fix NULL pointer dereference in tee_shm_put",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37968",
      "url": "https://patchblox.com/security/cve/CVE-2025-37968",
      "title": "iio: light: opt3001: fix deadlock due to concurrent flag access",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39790",
      "url": "https://patchblox.com/security/cve/CVE-2025-39790",
      "title": "bus: mhi: host: Detect events pointing to unexpected TREs",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39697",
      "url": "https://patchblox.com/security/cve/CVE-2025-39697",
      "title": "NFS: Fix a race when updating an existing write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39713",
      "url": "https://patchblox.com/security/cve/CVE-2025-39713",
      "title": "media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38477",
      "url": "https://patchblox.com/security/cve/CVE-2025-38477",
      "title": "net/sched: sch_qfq: Fix race condition on qfq_aggregate",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37886",
      "url": "https://patchblox.com/security/cve/CVE-2025-37886",
      "title": "pds_core: make wait_context part of q_info",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26652",
      "url": "https://patchblox.com/security/cve/CVE-2024-26652",
      "title": "kernel-azure: The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.\n\nThe following securi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.7,
      "epss": 0.00301,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37887",
      "url": "https://patchblox.com/security/cve/CVE-2025-37887",
      "title": "pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-50022",
      "url": "https://patchblox.com/security/cve/CVE-2024-50022",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: d...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-56742",
      "url": "https://patchblox.com/security/cve/CVE-2024-56742",
      "title": "vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37932",
      "url": "https://patchblox.com/security/cve/CVE-2025-37932",
      "title": "sch_htb: make htb_qlen_notify() idempotent",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38470",
      "url": "https://patchblox.com/security/cve/CVE-2025-38470",
      "title": "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38706",
      "url": "https://patchblox.com/security/cve/CVE-2025-38706",
      "title": "ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38691",
      "url": "https://patchblox.com/security/cve/CVE-2025-38691",
      "title": "pNFS: Fix uninited ptr deref in block/scsi layout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.2,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38539",
      "url": "https://patchblox.com/security/cve/CVE-2025-38539",
      "title": "tracing: Add down_write(trace_event_sem) when adding trace event",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38639",
      "url": "https://patchblox.com/security/cve/CVE-2025-38639",
      "title": "netfilter: xt_nfacct: don\u0027t assume acct name is null-terminated",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38622",
      "url": "https://patchblox.com/security/cve/CVE-2025-38622",
      "title": "net: drop UFO packets in udp_rcv_segment()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38664",
      "url": "https://patchblox.com/security/cve/CVE-2025-38664",
      "title": "ice: Fix a null pointer dereference in ice_copy_and_init_pkg()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38683",
      "url": "https://patchblox.com/security/cve/CVE-2025-38683",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nhv_netvsc: Fix panic during namespace deletion wi...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38693",
      "url": "https://patchblox.com/security/cve/CVE-2025-38693",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38694",
      "url": "https://patchblox.com/security/cve/CVE-2025-38694",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39676",
      "url": "https://patchblox.com/security/cve/CVE-2025-39676",
      "title": "scsi: qla4xxx: Prevent a potential error pointer dereference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39681",
      "url": "https://patchblox.com/security/cve/CVE-2025-39681",
      "title": "x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39756",
      "url": "https://patchblox.com/security/cve/CVE-2025-39756",
      "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38148",
      "url": "https://patchblox.com/security/cve/CVE-2025-38148",
      "title": "net: phy: mscc: Fix memory leak when using one step timestamping",
      "priority": "Routine",
      "severity": "low",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38528",
      "url": "https://patchblox.com/security/cve/CVE-2025-38528",
      "title": "bpf: Reject %p% format string in bprintf-like helpers",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39724",
      "url": "https://patchblox.com/security/cve/CVE-2025-39724",
      "title": "serial: 8250: fix panic due to PSLVERR",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38604",
      "url": "https://patchblox.com/security/cve/CVE-2025-38604",
      "title": "wifi: rtl818x: Kill URBs before clearing tx status queue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39714",
      "url": "https://patchblox.com/security/cve/CVE-2025-39714",
      "title": "media: usbtv: Lock resolution while streaming",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38721",
      "url": "https://patchblox.com/security/cve/CVE-2025-38721",
      "title": "netfilter: ctnetlink: fix refcount leak on table dump",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39808",
      "url": "https://patchblox.com/security/cve/CVE-2025-39808",
      "title": "HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39812",
      "url": "https://patchblox.com/security/cve/CVE-2025-39812",
      "title": "sctp: initialize more fields in sctp_v6_from_sk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39787",
      "url": "https://patchblox.com/security/cve/CVE-2025-39787",
      "title": "soc: qcom: mdt_loader: Ensure we don\u0027t read past the ELF header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39795",
      "url": "https://patchblox.com/security/cve/CVE-2025-39795",
      "title": "block: avoid possible overflow for chunk_sectors check in blk_stack_limits()",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38602",
      "url": "https://patchblox.com/security/cve/CVE-2025-38602",
      "title": "iwlwifi: Add missing check for alloc_ordered_workqueue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38671",
      "url": "https://patchblox.com/security/cve/CVE-2025-38671",
      "title": "i2c: qup: jump out of the loop in case of timeout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39693",
      "url": "https://patchblox.com/security/cve/CVE-2025-39693",
      "title": "drm/amd/display: Avoid a NULL pointer dereference",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38645",
      "url": "https://patchblox.com/security/cve/CVE-2025-38645",
      "title": "net/mlx5: Check device memory pointer before usage",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38725",
      "url": "https://patchblox.com/security/cve/CVE-2025-38725",
      "title": "net: usb: asix_devices: add phy_mask for ax88772 mdio bus",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39847",
      "url": "https://patchblox.com/security/cve/CVE-2025-39847",
      "title": "ppp: fix memory leak in pad_compress_skb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39845",
      "url": "https://patchblox.com/security/cve/CVE-2025-39845",
      "title": "x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35968",
      "url": "https://patchblox.com/security/cve/CVE-2024-35968",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pds_core: Fix pdsc_check_pci_health function to...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39801",
      "url": "https://patchblox.com/security/cve/CVE-2025-39801",
      "title": "usb: dwc3: Remove WARN_ON for device endpoint command timeouts",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.2,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39772",
      "url": "https://patchblox.com/security/cve/CVE-2025-39772",
      "title": "drm/hisilicon/hibmc: fix the hibmc loaded failed bug",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39844",
      "url": "https://patchblox.com/security/cve/CVE-2025-39844",
      "title": "mm: move page table sync declarations to linux/pgtable.h",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38335",
      "url": "https://patchblox.com/security/cve/CVE-2025-38335",
      "title": "Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39782",
      "url": "https://patchblox.com/security/cve/CVE-2025-39782",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: prevent softlockup in jbd2_log_do_checkpoi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39773",
      "url": "https://patchblox.com/security/cve/CVE-2025-39773",
      "title": "net: bridge: fix soft lockup in br_multicast_query_expired()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39813",
      "url": "https://patchblox.com/security/cve/CVE-2025-39813",
      "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38553",
      "url": "https://patchblox.com/security/cve/CVE-2025-38553",
      "title": "net/sched: Restrict conditions for adding duplicating netems to qdisc tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}