{ "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "summary": "ELSA-2026-50006, released January 13, 2026, fixes 102 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 35 packages", "released": "2026-01-13T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2025-68192, rated Critical", "supported": true, "cveCount": 102, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00651, "maxCvss": 9.8, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-50006.html", "appliesTo": [ { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2025-68192", "url": "https://patchblox.com/security/cve/CVE-2025-68192", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00611, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40350", "url": "https://patchblox.com/security/cve/CVE-2025-40350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00548, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40212", "url": "https://patchblox.com/security/cve/CVE-2025-40212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsd_set_fh_dentry()...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0043, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40320", "url": "https://patchblox.com/security/cve/CVE-2025-40320", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00418, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40242", "url": "https://patchblox.com/security/cve/CVE-2025-40242", "title": "gfs2: Fix unlikely race in gdlm_put_lock", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40343", "url": "https://patchblox.com/security/cve/CVE-2025-40343", "title": "nvmet-fc: avoid scheduling association deletion twice", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00651, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40240", "url": "https://patchblox.com/security/cve/CVE-2025-40240", "title": "sctp: avoid NULL dereference when chunk data buffer is missing", "priority": "High", "severity": "Important", "cvss": 8.6, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40337", "url": "https://patchblox.com/security/cve/CVE-2025-40337", "title": "net: stmmac: Correctly handle Rx checksum offload errors", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00481, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68241", "url": "https://patchblox.com/security/cve/CVE-2025-68241", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00466, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40328", "url": "https://patchblox.com/security/cve/CVE-2025-40328", "title": "smb: client: fix potential UAF in smb2_close_cached_fid()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00461, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40273", "url": "https://patchblox.com/security/cve/CVE-2025-40273", "title": "NFSD: free copynotify stateid in nfs4_free_ol_stateid()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00456, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40324", "url": "https://patchblox.com/security/cve/CVE-2025-40324", "title": "NFSD: Fix crash in nfsd4_read_release()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68321", "url": "https://patchblox.com/security/cve/CVE-2025-68321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allo...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00451, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40342", "url": "https://patchblox.com/security/cve/CVE-2025-40342", "title": "nvme-fc: use lock accessing port_state and rport state", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00366, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40301", "url": "https://patchblox.com/security/cve/CVE-2025-40301", "title": "Bluetooth: hci_event: validate skb length for unknown CC opcode", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00271, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40318", "url": "https://patchblox.com/security/cve/CVE-2025-40318", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0027, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40277", "url": "https://patchblox.com/security/cve/CVE-2025-40277", "title": "drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40309", "url": "https://patchblox.com/security/cve/CVE-2025-40309", "title": "Bluetooth: SCO: Fix UAF on sco_conn_free", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40281", "url": "https://patchblox.com/security/cve/CVE-2025-40281", "title": "sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68188", "url": "https://patchblox.com/security/cve/CVE-2025-68188", "title": "tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40329", "url": "https://patchblox.com/security/cve/CVE-2025-40329", "title": "drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22121", "url": "https://patchblox.com/security/cve/CVE-2025-22121", "title": "ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40237", "url": "https://patchblox.com/security/cve/CVE-2025-40237", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40211", "url": "https://patchblox.com/security/cve/CVE-2025-40211", "title": "ACPI: video: Fix use-after-free in acpi_video_switch_brightness()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68190", "url": "https://patchblox.com/security/cve/CVE-2025-68190", "title": "drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40294", "url": "https://patchblox.com/security/cve/CVE-2025-40294", "title": "Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40293", "url": "https://patchblox.com/security/cve/CVE-2025-40293", "title": "iommufd: Don\u0027t overflow during division for dirty tracking", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40348", "url": "https://patchblox.com/security/cve/CVE-2025-40348", "title": "kernel-uek: [6.12.0-107.59.3.2]\n- xfrm: delete x-\u003Etunnel as we delete x (Sabrina Dubroca) {CVE-2025-40215}\n\n[6.12.0-107.59.3.1]...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68180", "url": "https://patchblox.com/security/cve/CVE-2025-68180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odm_c...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68202", "url": "https://patchblox.com/security/cve/CVE-2025-68202", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_st...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40213", "url": "https://patchblox.com/security/cve/CVE-2025-40213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40214", "url": "https://patchblox.com/security/cve/CVE-2025-40214", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40269", "url": "https://patchblox.com/security/cve/CVE-2025-40269", "title": "ALSA: usb-audio: Fix potential overflow of PCM transfer buffer", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40331", "url": "https://patchblox.com/security/cve/CVE-2025-40331", "title": "sctp: Prevent TOCTOU out-of-bounds write", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40344", "url": "https://patchblox.com/security/cve/CVE-2025-40344", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work w...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40305", "url": "https://patchblox.com/security/cve/CVE-2025-40305", "title": "9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40292", "url": "https://patchblox.com/security/cve/CVE-2025-40292", "title": "virtio-net: fix received length check in big packets", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40250", "url": "https://patchblox.com/security/cve/CVE-2025-40250", "title": "net/mlx5: Clean up only new IRQ glue on request_irq() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40233", "url": "https://patchblox.com/security/cve/CVE-2025-40233", "title": "ocfs2: clear extent cache after moving/defragmenting extents", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40362", "url": "https://patchblox.com/security/cve/CVE-2025-40362", "title": "ceph: fix multifs mds auth caps issue", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40280", "url": "https://patchblox.com/security/cve/CVE-2025-40280", "title": "tipc: Fix use-after-free in tipc_mon_reinit_self().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40297", "url": "https://patchblox.com/security/cve/CVE-2025-40297", "title": "net: bridge: fix use-after-free due to MST port state bypass", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68171", "url": "https://patchblox.com/security/cve/CVE-2025-68171", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68183", "url": "https://patchblox.com/security/cve/CVE-2025-68183", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ima: don\u0027t clear IMA_DIGSIG flag when setting or...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68208", "url": "https://patchblox.com/security/cve/CVE-2025-68208", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39981", "url": "https://patchblox.com/security/cve/CVE-2025-39981", "title": "Bluetooth: MGMT: Fix possible UAFs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40272", "url": "https://patchblox.com/security/cve/CVE-2025-40272", "title": "mm/secretmem: fix use-after-free race in fault handler", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40283", "url": "https://patchblox.com/security/cve/CVE-2025-40283", "title": "Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40354", "url": "https://patchblox.com/security/cve/CVE-2025-40354", "title": "drm/amd/display: increase max link count and fix link-\u003Eenc NULL pointer access", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68167", "url": "https://patchblox.com/security/cve/CVE-2025-68167", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68170", "url": "https://patchblox.com/security/cve/CVE-2025-68170", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40274", "url": "https://patchblox.com/security/cve/CVE-2025-40274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40284", "url": "https://patchblox.com/security/cve/CVE-2025-40284", "title": "Bluetooth: MGMT: cancel mesh send timer when hdev removed", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68181", "url": "https://patchblox.com/security/cve/CVE-2025-68181", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68211", "url": "https://patchblox.com/security/cve/CVE-2025-68211", "title": "ksm: use range-walk function to jump over holes in scan_get_next_rmap_item", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40307", "url": "https://patchblox.com/security/cve/CVE-2025-40307", "title": "exfat: validate cluster allocation bits of the allocation bitmap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40304", "url": "https://patchblox.com/security/cve/CVE-2025-40304", "title": "fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40319", "url": "https://patchblox.com/security/cve/CVE-2025-40319", "title": "bpf: Sync pending IRQ work before freeing ring buffer", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40322", "url": "https://patchblox.com/security/cve/CVE-2025-40322", "title": "fbdev: bitblit: bound-check glyph index in bit_putcs*", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68317", "url": "https://patchblox.com/security/cve/CVE-2025-68317", "title": "io_uring/zctx: check chained notif contexts", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40323", "url": "https://patchblox.com/security/cve/CVE-2025-40323", "title": "fbcon: Set fb_display[i]-\u003Emode to NULL when the mode is released", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68313", "url": "https://patchblox.com/security/cve/CVE-2025-68313", "title": "x86/CPU/AMD: Add RDSEED fix for Zen5", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37860", "url": "https://patchblox.com/security/cve/CVE-2025-37860", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00315, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40289", "url": "https://patchblox.com/security/cve/CVE-2025-40289", "title": "drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40341", "url": "https://patchblox.com/security/cve/CVE-2025-40341", "title": "futex: Don\u0027t leak robust_list pointer on exec race", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40230", "url": "https://patchblox.com/security/cve/CVE-2025-40230", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting TH...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.9, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40339", "url": "https://patchblox.com/security/cve/CVE-2025-40339", "title": "drm/amdgpu: fix nullptr err of vm_handle_moved", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68201", "url": "https://patchblox.com/security/cve/CVE-2025-68201", "title": "drm/amdgpu: remove two invalid BUG_ON()s", "priority": "Routine", "severity": "Low", "cvss": 4, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40231", "url": "https://patchblox.com/security/cve/CVE-2025-40231", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transp...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40332", "url": "https://patchblox.com/security/cve/CVE-2025-40332", "title": "drm/amdkfd: Fix mmap write lock not release", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40239", "url": "https://patchblox.com/security/cve/CVE-2025-40239", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared-\u003Ephydev for...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40238", "url": "https://patchblox.com/security/cve/CVE-2025-40238", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device Whe...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40363", "url": "https://patchblox.com/security/cve/CVE-2025-40363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40279", "url": "https://patchblox.com/security/cve/CVE-2025-40279", "title": "net: sched: act_connmark: initialize struct tc_ife to fix kernel leak", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40235", "url": "https://patchblox.com/security/cve/CVE-2025-40235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fs_in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40275", "url": "https://patchblox.com/security/cve/CVE-2025-40275", "title": "ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68185", "url": "https://patchblox.com/security/cve/CVE-2025-68185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for -...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68194", "url": "https://patchblox.com/security/cve/CVE-2025-68194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syz...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40346", "url": "https://patchblox.com/security/cve/CVE-2025-40346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topo...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40360", "url": "https://patchblox.com/security/cve/CVE-2025-40360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in pl...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68200", "url": "https://patchblox.com/security/cve/CVE-2025-68200", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot fo...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40083", "url": "https://patchblox.com/security/cve/CVE-2025-40083", "title": "net/sched: sch_qfq: Fix null-deref in agg_dequeue", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68191", "url": "https://patchblox.com/security/cve/CVE-2025-68191", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40321", "url": "https://patchblox.com/security/cve/CVE-2025-40321", "title": "wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68245", "url": "https://patchblox.com/security/cve/CVE-2025-68245", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: netpoll: fix incorrect refcount handling ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40268", "url": "https://patchblox.com/security/cve/CVE-2025-40268", "title": "cifs: client: fix memory leak in smb3_fs_context_parse_param", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68173", "url": "https://patchblox.com/security/cve/CVE-2025-68173", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68178", "url": "https://patchblox.com/security/cve/CVE-2025-68178", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configur...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40287", "url": "https://patchblox.com/security/cve/CVE-2025-40287", "title": "exfat: fix improper check of dentry.stream.valid_size", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40359", "url": "https://patchblox.com/security/cve/CVE-2025-40359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds w...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68198", "url": "https://patchblox.com/security/cve/CVE-2025-68198", "title": "crash: fix crashkernel resource shrink", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40288", "url": "https://patchblox.com/security/cve/CVE-2025-40288", "title": "drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68199", "url": "https://patchblox.com/security/cve/CVE-2025-68199", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40209", "url": "https://patchblox.com/security/cve/CVE-2025-40209", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40308", "url": "https://patchblox.com/security/cve/CVE-2025-40308", "title": "Bluetooth: bcsp: receive data only if registered", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68312", "url": "https://patchblox.com/security/cve/CVE-2025-68312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68244", "url": "https://patchblox.com/security/cve/CVE-2025-68244", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to G...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23129", "url": "https://patchblox.com/security/cve/CVE-2025-23129", "title": "kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: c...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38643", "url": "https://patchblox.com/security/cve/CVE-2025-38643", "title": "wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40310", "url": "https://patchblox.com/security/cve/CVE-2025-40310", "title": "amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68242", "url": "https://patchblox.com/security/cve/CVE-2025-68242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are d...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40361", "url": "https://patchblox.com/security/cve/CVE-2025-40361", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-07T06:34:28Z" }