# ELSA-2026-50006: Security update for 35 packages ELSA-2026-50006, released January 13, 2026, fixes 102 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/elsa-2026-50006 - Platform: Linux - Released: Jan 13, 2026 - Priority: Urgent (Closes CVE-2025-68192, rated Critical) - CVEs: 102, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2026-50006.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-107.59.3.2.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-107.59.3.2.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-68192](https://patchblox.com/security/data/cve/CVE-2025-68192.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 | | | [CVE-2025-40350](https://patchblox.com/security/data/cve/CVE-2025-40350.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea... | 9.8 | 0.0055 | | | [CVE-2025-40212](https://patchblox.com/security/data/cve/CVE-2025-40212.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsd_set_fh_dentry()... | 9.8 | 0.0043 | | | [CVE-2025-40320](https://patchblox.com/security/data/cve/CVE-2025-40320.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0042 | | | [CVE-2025-40242](https://patchblox.com/security/data/cve/CVE-2025-40242.md) | Urgent | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 | | | [CVE-2025-40343](https://patchblox.com/security/data/cve/CVE-2025-40343.md) | High | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0065 | | | [CVE-2025-40240](https://patchblox.com/security/data/cve/CVE-2025-40240.md) | High | sctp: avoid NULL dereference when chunk data buffer is missing | 8.6 | 0.0064 | | | [CVE-2025-40337](https://patchblox.com/security/data/cve/CVE-2025-40337.md) | High | net: stmmac: Correctly handle Rx checksum offload errors | 8.2 | 0.0048 | | | [CVE-2025-68241](https://patchblox.com/security/data/cve/CVE-2025-68241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 | | | [CVE-2025-40328](https://patchblox.com/security/data/cve/CVE-2025-40328.md) | High | smb: client: fix potential UAF in smb2_close_cached_fid() | 8.8 | 0.0046 | | | [CVE-2025-40273](https://patchblox.com/security/data/cve/CVE-2025-40273.md) | High | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 | | | [CVE-2025-40324](https://patchblox.com/security/data/cve/CVE-2025-40324.md) | High | NFSD: Fix crash in nfsd4_read_release() | 7.5 | 0.0046 | | | [CVE-2025-68321](https://patchblox.com/security/data/cve/CVE-2025-68321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allo... | 7.5 | 0.0045 | | | [CVE-2025-40342](https://patchblox.com/security/data/cve/CVE-2025-40342.md) | High | nvme-fc: use lock accessing port_state and rport state | 8.8 | 0.0037 | | | [CVE-2025-40301](https://patchblox.com/security/data/cve/CVE-2025-40301.md) | High | Bluetooth: hci_event: validate skb length for unknown CC opcode | 7.8 | 0.0027 | | | [CVE-2025-40318](https://patchblox.com/security/data/cve/CVE-2025-40318.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0027 | | | [CVE-2025-40277](https://patchblox.com/security/data/cve/CVE-2025-40277.md) | High | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 | | | [CVE-2025-40309](https://patchblox.com/security/data/cve/CVE-2025-40309.md) | High | Bluetooth: SCO: Fix UAF on sco_conn_free | 8.0 | 0.0025 | | | [CVE-2025-40281](https://patchblox.com/security/data/cve/CVE-2025-40281.md) | High | sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto | 7.0 | 0.0023 | | | [CVE-2025-68188](https://patchblox.com/security/data/cve/CVE-2025-68188.md) | High | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() | 7.8 | 0.0022 | | | [CVE-2025-40329](https://patchblox.com/security/data/cve/CVE-2025-40329.md) | High | drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | 7.0 | 0.0022 | | | [CVE-2025-22121](https://patchblox.com/security/data/cve/CVE-2025-22121.md) | High | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | 7.1 | 0.0022 | | | [CVE-2025-40237](https://patchblox.com/security/data/cve/CVE-2025-40237.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.1 | 0.0022 | | | [CVE-2025-40211](https://patchblox.com/security/data/cve/CVE-2025-40211.md) | High | ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | 7.8 | 0.0021 | | | [CVE-2025-68190](https://patchblox.com/security/data/cve/CVE-2025-68190.md) | High | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 7.8 | 0.0021 | | | [CVE-2025-40294](https://patchblox.com/security/data/cve/CVE-2025-40294.md) | High | Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() | 7.8 | 0.0020 | | | [CVE-2025-40293](https://patchblox.com/security/data/cve/CVE-2025-40293.md) | High | iommufd: Don't overflow during division for dirty tracking | 7.0 | 0.0020 | | | [CVE-2025-40348](https://patchblox.com/security/data/cve/CVE-2025-40348.md) | High | kernel-uek: [6.12.0-107.59.3.2] - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) {CVE-2025-40215} [6.12.0-107.59.3.1]... | 7.0 | 0.0020 | | | [CVE-2025-68180](https://patchblox.com/security/data/cve/CVE-2025-68180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odm_c... | n/a | 0.0020 | | | [CVE-2025-68202](https://patchblox.com/security/data/cve/CVE-2025-68202.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_st... | n/a | 0.0020 | | | [CVE-2025-40213](https://patchblox.com/security/data/cve/CVE-2025-40213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and... | 7.8 | 0.0019 | | | [CVE-2025-40214](https://patchblox.com/security/data/cve/CVE-2025-40214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge() | 7.8 | 0.0019 | | | [CVE-2025-40269](https://patchblox.com/security/data/cve/CVE-2025-40269.md) | High | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 | | | [CVE-2025-40331](https://patchblox.com/security/data/cve/CVE-2025-40331.md) | High | sctp: Prevent TOCTOU out-of-bounds write | 7.8 | 0.0019 | | | [CVE-2025-40344](https://patchblox.com/security/data/cve/CVE-2025-40344.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work w... | 7.8 | 0.0018 | | | [CVE-2025-40305](https://patchblox.com/security/data/cve/CVE-2025-40305.md) | High | 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN | 7.0 | 0.0017 | | | [CVE-2025-40292](https://patchblox.com/security/data/cve/CVE-2025-40292.md) | High | virtio-net: fix received length check in big packets | 8.4 | 0.0017 | | | [CVE-2025-40250](https://patchblox.com/security/data/cve/CVE-2025-40250.md) | High | net/mlx5: Clean up only new IRQ glue on request_irq() failure | 7.8 | 0.0017 | | | [CVE-2025-40233](https://patchblox.com/security/data/cve/CVE-2025-40233.md) | High | ocfs2: clear extent cache after moving/defragmenting extents | 7.8 | 0.0017 | | | [CVE-2025-40362](https://patchblox.com/security/data/cve/CVE-2025-40362.md) | High | ceph: fix multifs mds auth caps issue | 8.8 | 0.0016 | | | [CVE-2025-40280](https://patchblox.com/security/data/cve/CVE-2025-40280.md) | High | tipc: Fix use-after-free in tipc_mon_reinit_self(). | 7.8 | 0.0016 | | | [CVE-2025-40297](https://patchblox.com/security/data/cve/CVE-2025-40297.md) | High | net: bridge: fix use-after-free due to MST port state bypass | 7.8 | 0.0016 | | | [CVE-2025-68171](https://patchblox.com/security/data/cve/CVE-2025-68171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se... | 7.8 | 0.0015 | | | [CVE-2025-68183](https://patchblox.com/security/data/cve/CVE-2025-68183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or... | 7.8 | 0.0015 | | | [CVE-2025-68208](https://patchblox.com/security/data/cve/CVE-2025-68208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth i... | 7.8 | 0.0015 | | | [CVE-2025-39981](https://patchblox.com/security/data/cve/CVE-2025-39981.md) | High | Bluetooth: MGMT: Fix possible UAFs | 7.8 | 0.0015 | | | [CVE-2025-40272](https://patchblox.com/security/data/cve/CVE-2025-40272.md) | High | mm/secretmem: fix use-after-free race in fault handler | 7.8 | 0.0015 | | | [CVE-2025-40283](https://patchblox.com/security/data/cve/CVE-2025-40283.md) | High | Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF | 7.8 | 0.0015 | | | [CVE-2025-40354](https://patchblox.com/security/data/cve/CVE-2025-40354.md) | High | drm/amd/display: increase max link count and fix link->enc NULL pointer access | 7.8 | 0.0015 | | | [CVE-2025-68167](https://patchblox.com/security/data/cve/CVE-2025-68167.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs... | 7.8 | 0.0015 | | | [CVE-2025-68170](https://patchblox.com/security/data/cve/CVE-2025-68170.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev... | 7.8 | 0.0015 | | | [CVE-2025-40274](https://patchblox.com/security/data/cve/CVE-2025-40274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del... | 7.8 | 0.0015 | | | [CVE-2025-40284](https://patchblox.com/security/data/cve/CVE-2025-40284.md) | High | Bluetooth: MGMT: cancel mesh send timer when hdev removed | 7.8 | 0.0015 | | | [CVE-2025-68181](https://patchblox.com/security/data/cve/CVE-2025-68181.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since... | 7.8 | 0.0015 | | | [CVE-2025-68211](https://patchblox.com/security/data/cve/CVE-2025-68211.md) | High | ksm: use range-walk function to jump over holes in scan_get_next_rmap_item | 8.1 | 0.0015 | | | [CVE-2025-40307](https://patchblox.com/security/data/cve/CVE-2025-40307.md) | High | exfat: validate cluster allocation bits of the allocation bitmap | 7.8 | 0.0015 | | | [CVE-2025-40304](https://patchblox.com/security/data/cve/CVE-2025-40304.md) | High | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0014 | | | [CVE-2025-40319](https://patchblox.com/security/data/cve/CVE-2025-40319.md) | High | bpf: Sync pending IRQ work before freeing ring buffer | 7.8 | 0.0014 | | | [CVE-2025-40322](https://patchblox.com/security/data/cve/CVE-2025-40322.md) | High | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0014 | | | [CVE-2025-68317](https://patchblox.com/security/data/cve/CVE-2025-68317.md) | High | io_uring/zctx: check chained notif contexts | 7.8 | 0.0014 | | | [CVE-2025-40323](https://patchblox.com/security/data/cve/CVE-2025-40323.md) | High | fbcon: Set fb_display[i]->mode to NULL when the mode is released | 8.8 | 0.0014 | | | [CVE-2025-68313](https://patchblox.com/security/data/cve/CVE-2025-68313.md) | High | x86/CPU/AMD: Add RDSEED fix for Zen5 | 7.1 | 0.0014 | | | [CVE-2025-37860](https://patchblox.com/security/data/cve/CVE-2025-37860.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0032 | | | [CVE-2025-40289](https://patchblox.com/security/data/cve/CVE-2025-40289.md) | Routine | drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM | 5.5 | 0.0024 | | | [CVE-2025-40341](https://patchblox.com/security/data/cve/CVE-2025-40341.md) | Routine | futex: Don't leak robust_list pointer on exec race | 5.5 | 0.0023 | | | [CVE-2025-40230](https://patchblox.com/security/data/cve/CVE-2025-40230.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting TH... | 5.9 | 0.0023 | | | [CVE-2025-40339](https://patchblox.com/security/data/cve/CVE-2025-40339.md) | Routine | drm/amdgpu: fix nullptr err of vm_handle_moved | 5.5 | 0.0023 | | | [CVE-2025-68201](https://patchblox.com/security/data/cve/CVE-2025-68201.md) | Routine | drm/amdgpu: remove two invalid BUG_ON()s | 4.0 | 0.0022 | | | [CVE-2025-40231](https://patchblox.com/security/data/cve/CVE-2025-40231.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transp... | 5.5 | 0.0022 | | | [CVE-2025-40332](https://patchblox.com/security/data/cve/CVE-2025-40332.md) | Routine | drm/amdkfd: Fix mmap write lock not release | 5.5 | 0.0022 | | | [CVE-2025-40239](https://patchblox.com/security/data/cve/CVE-2025-40239.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared->phydev for... | 5.5 | 0.0021 | | | [CVE-2025-40238](https://patchblox.com/security/data/cve/CVE-2025-40238.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device Whe... | 4.7 | 0.0021 | | | [CVE-2025-40363](https://patchblox.com/security/data/cve/CVE-2025-40363.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in... | 5.5 | 0.0021 | | | [CVE-2025-40279](https://patchblox.com/security/data/cve/CVE-2025-40279.md) | Routine | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | 6.1 | 0.0021 | | | [CVE-2025-40235](https://patchblox.com/security/data/cve/CVE-2025-40235.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fs_in... | 5.5 | 0.0021 | | | [CVE-2025-40275](https://patchblox.com/security/data/cve/CVE-2025-40275.md) | Routine | ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd | 5.5 | 0.0021 | | | [CVE-2025-68185](https://patchblox.com/security/data/cve/CVE-2025-68185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for -... | 5.5 | 0.0021 | | | [CVE-2025-68194](https://patchblox.com/security/data/cve/CVE-2025-68194.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syz... | 5.5 | 0.0021 | | | [CVE-2025-40346](https://patchblox.com/security/data/cve/CVE-2025-40346.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topo... | 5.5 | 0.0021 | | | [CVE-2025-40360](https://patchblox.com/security/data/cve/CVE-2025-40360.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in pl... | 5.5 | 0.0021 | | | [CVE-2025-68200](https://patchblox.com/security/data/cve/CVE-2025-68200.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot fo... | 5.5 | 0.0021 | | | [CVE-2025-40083](https://patchblox.com/security/data/cve/CVE-2025-40083.md) | Routine | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 5.9 | 0.0021 | | | [CVE-2025-68191](https://patchblox.com/security/data/cve/CVE-2025-68191.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_... | 3.3 | 0.0021 | | | [CVE-2025-40321](https://patchblox.com/security/data/cve/CVE-2025-40321.md) | Routine | wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | 6.5 | 0.0020 | | | [CVE-2025-68245](https://patchblox.com/security/data/cve/CVE-2025-68245.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: netpoll: fix incorrect refcount handling ca... | 6.1 | 0.0020 | | | [CVE-2025-40268](https://patchblox.com/security/data/cve/CVE-2025-40268.md) | Routine | cifs: client: fix memory leak in smb3_fs_context_parse_param | 5.5 | 0.0020 | | | [CVE-2025-68173](https://patchblox.com/security/data/cve/CVE-2025-68173.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable... | 5.5 | 0.0020 | | | [CVE-2025-68178](https://patchblox.com/security/data/cve/CVE-2025-68178.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configur... | 5.5 | 0.0020 | | | [CVE-2025-40287](https://patchblox.com/security/data/cve/CVE-2025-40287.md) | Routine | exfat: fix improper check of dentry.stream.valid_size | 5.5 | 0.0020 | | | [CVE-2025-40359](https://patchblox.com/security/data/cve/CVE-2025-40359.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds w... | 5.5 | 0.0020 | | | [CVE-2025-68198](https://patchblox.com/security/data/cve/CVE-2025-68198.md) | Routine | crash: fix crashkernel resource shrink | 5.5 | 0.0020 | | | [CVE-2025-40288](https://patchblox.com/security/data/cve/CVE-2025-40288.md) | Routine | drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices | 4.7 | 0.0020 | | | [CVE-2025-68199](https://patchblox.com/security/data/cve/CVE-2025-68199.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in... | 5.8 | 0.0020 | | | [CVE-2025-40209](https://patchblox.com/security/data/cve/CVE-2025-40209.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_a... | 4.4 | 0.0020 | | | [CVE-2025-40308](https://patchblox.com/security/data/cve/CVE-2025-40308.md) | Routine | Bluetooth: bcsp: receive data only if registered | 5.5 | 0.0020 | | | [CVE-2025-68312](https://patchblox.com/security/data/cve/CVE-2025-68312.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root ca... | 4.7 | 0.0020 | | | [CVE-2025-68244](https://patchblox.com/security/data/cve/CVE-2025-68244.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to G... | 4.7 | 0.0019 | | | [CVE-2025-23129](https://patchblox.com/security/data/cve/CVE-2025-23129.md) | Routine | kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 5.5 | 0.0019 | | | [CVE-2025-38643](https://patchblox.com/security/data/cve/CVE-2025-38643.md) | Routine | wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() | 5.5 | 0.0019 | | | [CVE-2025-40310](https://patchblox.com/security/data/cve/CVE-2025-40310.md) | Routine | amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw | 5.5 | 0.0019 | | | [CVE-2025-68242](https://patchblox.com/security/data/cve/CVE-2025-68242.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are d... | 4.5 | 0.0018 | | | [CVE-2025-40361](https://patchblox.com/security/data/cve/CVE-2025-40361.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid... | 5.5 | n/a | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo