# OPENSUSE-SU-2025:20081-1: Security update for 12 packages OPENSUSE-SU-2025:20081-1, released November 25, 2025, fixes 570 CVEs across 12 products. 2 of them are being exploited (CVE-2025-39682); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2025-20081-1 - Platform: Linux - Released: Nov 25, 2025 - Priority: Patch now (Closes CVE-2025-39682, exploited (CISA KEV)) - CVEs: 570, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1.160000.2.4 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.6.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-39682](https://patchblox.com/security/data/cve/CVE-2025-39682.md) | Patch now | tls: fix handling of zero-length records on the rx_list | 9.8 | 0.0331 | CISA KEV | | [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV | | [CVE-2025-39907](https://patchblox.com/security/data/cve/CVE-2025-39907.md) | Urgent | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer | 9.8 | 0.0015 | | | [CVE-2025-39925](https://patchblox.com/security/data/cve/CVE-2025-39925.md) | Urgent | can: j1939: implement NETDEV_UNREGISTER notification handler | 9.8 | 0.0015 | | | [CVE-2025-39898](https://patchblox.com/security/data/cve/CVE-2025-39898.md) | Urgent | e1000e: fix heap overflow in e1000_set_eeprom | 9.8 | n/a | | | [CVE-2025-39946](https://patchblox.com/security/data/cve/CVE-2025-39946.md) | High | tls: make sure to abort the stream if headers are bogus | 7.0 | 0.1026 | | | [CVE-2025-38488](https://patchblox.com/security/data/cve/CVE-2025-38488.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_0: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues The following security... | 7.8 | 0.0077 | | | [CVE-2025-38566](https://patchblox.com/security/data/cve/CVE-2025-38566.md) | High | sunrpc: fix handling of server side tls alerts | 8.1 | 0.0067 | | | [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 | | | [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 | | | [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 | | | [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 | | | [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 | | | [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 | | | [CVE-2025-38146](https://patchblox.com/security/data/cve/CVE-2025-38146.md) | High | net: openvswitch: Fix the dead loop of MPLS parse | 7.8 | 0.0049 | | | [CVE-2025-38734](https://patchblox.com/security/data/cve/CVE-2025-38734.md) | High | net/smc: fix UAF on smcsk after smc_listen_out() | 7.8 | 0.0048 | | | [CVE-2025-39841](https://patchblox.com/security/data/cve/CVE-2025-39841.md) | High | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 7.8 | 0.0048 | | | [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0047 | | | [CVE-2025-38429](https://patchblox.com/security/data/cve/CVE-2025-38429.md) | High | bus: mhi: ep: Update read pointer only after buffer is written | 7.1 | 0.0047 | | | [CVE-2025-38472](https://patchblox.com/security/data/cve/CVE-2025-38472.md) | High | netfilter: nf_conntrack: fix crash due to removal of uninitialised entry | 7.5 | 0.0046 | | | [CVE-2025-38075](https://patchblox.com/security/data/cve/CVE-2025-38075.md) | High | scsi: target: iscsi: Fix timeout on deleted connection | 7.0 | 0.0046 | | | [CVE-2025-38527](https://patchblox.com/security/data/cve/CVE-2025-38527.md) | High | smb: client: fix use-after-free in cifs_oplock_break | 7.8 | 0.0046 | | | [CVE-2025-38264](https://patchblox.com/security/data/cve/CVE-2025-38264.md) | High | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 | | | [CVE-2025-38563](https://patchblox.com/security/data/cve/CVE-2025-38563.md) | High | perf/core: Prevent VMA split of buffer mappings | 7.8 | 0.0044 | | | [CVE-2025-38608](https://patchblox.com/security/data/cve/CVE-2025-38608.md) | High | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 7.1 | 0.0044 | | | [CVE-2025-38617](https://patchblox.com/security/data/cve/CVE-2025-38617.md) | High | net/packet: fix a race in packet_set_ring() and packet_notifier() | 7.0 | 0.0043 | | | [CVE-2025-38676](https://patchblox.com/security/data/cve/CVE-2025-38676.md) | High | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 7.8 | 0.0042 | | | [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 | | | [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0041 | | | [CVE-2025-38724](https://patchblox.com/security/data/cve/CVE-2025-38724.md) | High | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | 7.8 | 0.0041 | | | [CVE-2025-38660](https://patchblox.com/security/data/cve/CVE-2025-38660.md) | High | [ceph] parse_longname(): strrchr() expects NUL-terminated string | 7.1 | 0.0041 | | | [CVE-2025-39851](https://patchblox.com/security/data/cve/CVE-2025-39851.md) | High | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 7.0 | 0.0040 | | | [CVE-2025-38476](https://patchblox.com/security/data/cve/CVE-2025-38476.md) | High | rpl: Fix use-after-free in rpl_do_srh_inline(). | 7.8 | 0.0040 | | | [CVE-2025-39703](https://patchblox.com/security/data/cve/CVE-2025-39703.md) | High | net, hsr: reject HSR frame if skb can't hold tag | 7.0 | 0.0039 | | | [CVE-2025-22077](https://patchblox.com/security/data/cve/CVE-2025-22077.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock aft... | 7.1 | 0.0039 | | | [CVE-2025-40300](https://patchblox.com/security/data/cve/CVE-2025-40300.md) | High | x86/vmscape: Add conditional IBPB mitigation | 7.3 | 0.0038 | | | [CVE-2025-38495](https://patchblox.com/security/data/cve/CVE-2025-38495.md) | High | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 | | | [CVE-2025-38571](https://patchblox.com/security/data/cve/CVE-2025-38571.md) | High | sunrpc: fix client side handling of tls alerts | 8.1 | 0.0037 | | | [CVE-2025-38490](https://patchblox.com/security/data/cve/CVE-2025-38490.md) | High | net: libwx: remove duplicate page_pool_put_full_page() | 9.8 | 0.0036 | | | [CVE-2025-38552](https://patchblox.com/security/data/cve/CVE-2025-38552.md) | High | mptcp: plug races between subflow fail and subflow creation | 7.8 | 0.0035 | | | [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 | | | [CVE-2025-38533](https://patchblox.com/security/data/cve/CVE-2025-38533.md) | High | net: libwx: fix the using of Rx buffer DMA | 7.8 | 0.0033 | | | [CVE-2025-37861](https://patchblox.com/security/data/cve/CVE-2025-37861.md) | High | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | 7.8 | 0.0033 | | | [CVE-2025-39673](https://patchblox.com/security/data/cve/CVE-2025-39673.md) | High | ppp: fix race conditions in ppp_fill_forward_path | 7.0 | 0.0032 | | | [CVE-2025-38292](https://patchblox.com/security/data/cve/CVE-2025-38292.md) | High | wifi: ath12k: fix invalid access to memory | 7.3 | 0.0031 | | | [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 | | | [CVE-2025-39952](https://patchblox.com/security/data/cve/CVE-2025-39952.md) | High | wifi: wilc1000: avoid buffer overflow in WID string configuration | 7.8 | 0.0029 | | | [CVE-2025-38678](https://patchblox.com/security/data/cve/CVE-2025-38678.md) | High | netfilter: nf_tables: reject duplicate device on updates | 7.1 | 0.0029 | | | [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 | | | [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 | | | [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 | | | [CVE-2025-38601](https://patchblox.com/security/data/cve/CVE-2025-38601.md) | High | wifi: ath11k: clear initialized flag for deinit-ed srng lists | 7.0 | 0.0027 | | | [CVE-2024-57951](https://patchblox.com/security/data/cve/CVE-2024-57951.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug... | 7.8 | 0.0027 | | | [CVE-2025-38494](https://patchblox.com/security/data/cve/CVE-2025-38494.md) | High | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 | | | [CVE-2025-39839](https://patchblox.com/security/data/cve/CVE-2025-39839.md) | High | batman-adv: fix OOB read/write in network-coding decode | 7.1 | 0.0026 | | | [CVE-2025-38244](https://patchblox.com/security/data/cve/CVE-2025-38244.md) | High | smb: client: fix potential deadlock when reconnecting channels | 7.0 | 0.0025 | | | [CVE-2025-38585](https://patchblox.com/security/data/cve/CVE-2025-38585.md) | High | staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() | 7.8 | 0.0025 | | | [CVE-2025-38416](https://patchblox.com/security/data/cve/CVE-2025-38416.md) | High | NFC: nci: uart: Set tty->disc_data only in success path | 7.8 | 0.0025 | | | [CVE-2025-39723](https://patchblox.com/security/data/cve/CVE-2025-39723.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If a... | 7.8 | 0.0024 | | | [CVE-2025-38491](https://patchblox.com/security/data/cve/CVE-2025-38491.md) | High | mptcp: make fallback action and fallback decision atomic | 7.0 | 0.0024 | | | [CVE-2025-38201](https://patchblox.com/security/data/cve/CVE-2025-38201.md) | High | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX | 7.8 | 0.0024 | | | [CVE-2025-38290](https://patchblox.com/security/data/cve/CVE-2025-38290.md) | High | wifi: ath12k: fix node corruption in ar->arvifs list | 7.8 | 0.0024 | | | [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64k-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0024 | | | [CVE-2025-38361](https://patchblox.com/security/data/cve/CVE-2025-38361.md) | High | drm/amd/display: Check dce_hwseq before dereferencing it | 7.8 | 0.0024 | | | [CVE-2025-39750](https://patchblox.com/security/data/cve/CVE-2025-39750.md) | High | wifi: ath12k: Correct tid cleanup when tid setup fails | 7.1 | 0.0024 | | | [CVE-2025-39761](https://patchblox.com/security/data/cve/CVE-2025-39761.md) | High | wifi: ath12k: Decrement TID on RX peer frag setup error handling | 7.1 | 0.0024 | | | [CVE-2025-38421](https://patchblox.com/security/data/cve/CVE-2025-38421.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed alloca... | 7.8 | 0.0024 | | | [CVE-2025-39864](https://patchblox.com/security/data/cve/CVE-2025-39864.md) | High | wifi: cfg80211: fix use-after-free in cmp_bss() | 7.8 | 0.0024 | | | [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 | | | [CVE-2025-38137](https://patchblox.com/security/data/cve/CVE-2025-38137.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when... | 7.8 | 0.0023 | | | [CVE-2025-38466](https://patchblox.com/security/data/cve/CVE-2025-38466.md) | High | perf: Revert to requiring CAP_SYS_ADMIN for uprobes | 7.8 | 0.0023 | | | [CVE-2025-39860](https://patchblox.com/security/data/cve/CVE-2025-39860.md) | High | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 7.8 | 0.0023 | | | [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 | | | [CVE-2025-38096](https://patchblox.com/security/data/cve/CVE-2025-38096.md) | High | wifi: iwlwifi: don't warn when if there is a FW error | 7.0 | 0.0023 | | | [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 | | | [CVE-2025-38582](https://patchblox.com/security/data/cve/CVE-2025-38582.md) | High | RDMA/hns: Fix double destruction of rsv_qp | 7.8 | 0.0023 | | | [CVE-2025-38595](https://patchblox.com/security/data/cve/CVE-2025-38595.md) | High | xen: fix UAF in dmabuf_exp_from_pages() | 7.8 | 0.0023 | | | [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 | | | [CVE-2025-38140](https://patchblox.com/security/data/cve/CVE-2025-38140.md) | High | dm: limit swapping tables for devices with zone write plugs | 7.0 | 0.0023 | | | [CVE-2025-38414](https://patchblox.com/security/data/cve/CVE-2025-38414.md) | High | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 7.0 | 0.0023 | | | [CVE-2025-38184](https://patchblox.com/security/data/cve/CVE-2025-38184.md) | High | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 7.0 | 0.0022 | | | [CVE-2025-39849](https://patchblox.com/security/data/cve/CVE-2025-39849.md) | High | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 | | | [CVE-2025-38372](https://patchblox.com/security/data/cve/CVE-2025-38372.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit... | 7.0 | 0.0022 | | | [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 | | | [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | | | [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 | | | [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 | | | [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 | | | [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 | | | [CVE-2025-38428](https://patchblox.com/security/data/cve/CVE-2025-38428.md) | High | Input: ims-pcu - check record size in ims_pcu_flash_firmware() | 7.8 | 0.0022 | | | [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 | | | [CVE-2025-39826](https://patchblox.com/security/data/cve/CVE-2025-39826.md) | High | net: rose: convert 'use' field to refcount_t | 7.0 | 0.0022 | | | [CVE-2025-39677](https://patchblox.com/security/data/cve/CVE-2025-39677.md) | High | net/sched: Fix backlog accounting in qdisc_dequeue_internal | 7.0 | 0.0021 | | | [CVE-2025-38019](https://patchblox.com/security/data/cve/CVE-2025-38019.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when... | 7.8 | 0.0021 | | | [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 | | | [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 | | | [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 | | | [CVE-2025-38267](https://patchblox.com/security/data/cve/CVE-2025-38267.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2025-38286](https://patchblox.com/security/data/cve/CVE-2025-38286.md) | High | pinctrl: at91: Fix possible out-of-boundary access | 7.1 | 0.0021 | | | [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 | | | [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 | | | [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 | | | [CVE-2025-38616](https://patchblox.com/security/data/cve/CVE-2025-38616.md) | High | tls: handle data disappearing from under the TLS ULP | 7.1 | 0.0021 | | | [CVE-2025-38605](https://patchblox.com/security/data/cve/CVE-2025-38605.md) | High | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | 7.0 | 0.0021 | | | [CVE-2025-38656](https://patchblox.com/security/data/cve/CVE-2025-38656.md) | High | wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() | 7.8 | 0.0021 | | | [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 | | | [CVE-2025-39732](https://patchblox.com/security/data/cve/CVE-2025-39732.md) | High | wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() | 7.0 | 0.0021 | | | [CVE-2025-39918](https://patchblox.com/security/data/cve/CVE-2025-39918.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.6 | 0.0021 | | | [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 | | | [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 | | | [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 | | | [CVE-2025-38722](https://patchblox.com/security/data/cve/CVE-2025-38722.md) | High | habanalabs: fix UAF in export_dmabuf() | 7.8 | 0.0021 | | | [CVE-2025-38317](https://patchblox.com/security/data/cve/CVE-2025-38317.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0020 | | | [CVE-2025-38101](https://patchblox.com/security/data/cve/CVE-2025-38101.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_s... | 7.8 | 0.0020 | | | [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 | | | [CVE-2025-38565](https://patchblox.com/security/data/cve/CVE-2025-38565.md) | High | perf/core: Exit early on perf_mmap() fail | 7.8 | 0.0020 | | | [CVE-2025-38572](https://patchblox.com/security/data/cve/CVE-2025-38572.md) | High | ipv6: reject malicious packets in ipv6_gso_segment() | 7.8 | 0.0020 | | | [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 | | | [CVE-2025-38153](https://patchblox.com/security/data/cve/CVE-2025-38153.md) | High | net: usb: aqc111: fix error handling of usbnet read calls | 7.1 | 0.0020 | | | [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 | | | [CVE-2025-38425](https://patchblox.com/security/data/cve/CVE-2025-38425.md) | High | i2c: tegra: check msg length in SMBUS block read | 7.8 | 0.0020 | | | [CVE-2025-39698](https://patchblox.com/security/data/cve/CVE-2025-39698.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.5 | 0.0020 | | | [CVE-2025-38385](https://patchblox.com/security/data/cve/CVE-2025-38385.md) | High | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 7.8 | 0.0020 | | | [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 | | | [CVE-2025-38449](https://patchblox.com/security/data/cve/CVE-2025-38449.md) | High | drm/gem: Acquire references on GEM handles for framebuffers | 7.8 | 0.0020 | | | [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 | | | [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 | | | [CVE-2025-38278](https://patchblox.com/security/data/cve/CVE-2025-38278.md) | High | octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback | 7.1 | 0.0020 | | | [CVE-2025-38118](https://patchblox.com/security/data/cve/CVE-2025-38118.md) | High | Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete | 7.8 | 0.0020 | | | [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 | | | [CVE-2025-39810](https://patchblox.com/security/data/cve/CVE-2025-39810.md) | High | bnxt_en: Fix memory corruption when FW resources change during ifdown | 7.8 | 0.0020 | | | [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 | | | [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0020 | | | [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 | | | [CVE-2025-38270](https://patchblox.com/security/data/cve/CVE-2025-38270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from... | 7.8 | 0.0020 | | | [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 | | | [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 | | | [CVE-2025-38125](https://patchblox.com/security/data/cve/CVE-2025-38125.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring EST | 7.0 | 0.0020 | | | [CVE-2025-38141](https://patchblox.com/security/data/cve/CVE-2025-38141.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 7.8 | 0.0020 | | | [CVE-2025-38288](https://patchblox.com/security/data/cve/CVE-2025-38288.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0020 | | | [CVE-2025-38555](https://patchblox.com/security/data/cve/CVE-2025-38555.md) | High | usb: gadget : fix use-after-free in composite_dev_cleanup() | 7.8 | 0.0020 | | | [CVE-2025-39686](https://patchblox.com/security/data/cve/CVE-2025-39686.md) | High | comedi: Make insn_rw_emulate_bits() do insn->n samples | 7.8 | 0.0020 | | | [CVE-2025-39701](https://patchblox.com/security/data/cve/CVE-2025-39701.md) | High | ACPI: pfr_update: Fix the driver update version check | 7.8 | 0.0020 | | | [CVE-2025-38322](https://patchblox.com/security/data/cve/CVE-2025-38322.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 7.0 | 0.0020 | | | [CVE-2025-38413](https://patchblox.com/security/data/cve/CVE-2025-38413.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length chec... | 7.0 | 0.0020 | | | [CVE-2025-39850](https://patchblox.com/security/data/cve/CVE-2025-39850.md) | High | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 7.0 | 0.0020 | | | [CVE-2025-38090](https://patchblox.com/security/data/cve/CVE-2025-38090.md) | High | drivers/rapidio/rio_cm.c: prevent possible heap overwrite | 7.8 | 0.0020 | | | [CVE-2025-38106](https://patchblox.com/security/data/cve/CVE-2025-38106.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0020 | | | [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 | | | [CVE-2025-38088](https://patchblox.com/security/data/cve/CVE-2025-38088.md) | High | powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap | 7.1 | 0.0020 | | | [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 | | | [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 | | | [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 | | | [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 | | | [CVE-2025-38062](https://patchblox.com/security/data/cve/CVE-2025-38062.md) | High | genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie | 7.8 | 0.0020 | | | [CVE-2025-38614](https://patchblox.com/security/data/cve/CVE-2025-38614.md) | High | eventpoll: Fix semi-unbounded recursion | 7.5 | 0.0020 | | | [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 | | | [CVE-2025-38119](https://patchblox.com/security/data/cve/CVE-2025-38119.md) | High | scsi: core: ufs: Fix a hang in the error handler | 7.0 | 0.0020 | | | [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 | | | [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 | | | [CVE-2025-38584](https://patchblox.com/security/data/cve/CVE-2025-38584.md) | High | padata: Fix pd UAF once and for all | 7.8 | 0.0019 | | | [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 | | | [CVE-2025-38581](https://patchblox.com/security/data/cve/CVE-2025-38581.md) | High | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 7.0 | 0.0019 | | | [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 | | | [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 | | | [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 | | | [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 | | | [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 | | | [CVE-2025-38182](https://patchblox.com/security/data/cve/CVE-2025-38182.md) | High | ublk: santizize the arguments from userspace when adding a device | 7.8 | 0.0019 | | | [CVE-2025-38351](https://patchblox.com/security/data/cve/CVE-2025-38351.md) | High | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 7.5 | 0.0019 | | | [CVE-2025-39683](https://patchblox.com/security/data/cve/CVE-2025-39683.md) | High | tracing: Limit access to parser->buffer when trace_get_user failed | 7.1 | 0.0019 | | | [CVE-2025-38099](https://patchblox.com/security/data/cve/CVE-2025-38099.md) | High | Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken | 7.0 | 0.0019 | | | [CVE-2025-38160](https://patchblox.com/security/data/cve/CVE-2025-38160.md) | High | clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() | 7.0 | 0.0019 | | | [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0019 | | | [CVE-2025-38277](https://patchblox.com/security/data/cve/CVE-2025-38277.md) | High | mtd: nand: ecc-mxic: Fix use of uninitialized variable ret | 7.1 | 0.0019 | | | [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 | | | [CVE-2025-38038](https://patchblox.com/security/data/cve/CVE-2025-38038.md) | High | cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost | 7.0 | 0.0019 | | | [CVE-2025-38134](https://patchblox.com/security/data/cve/CVE-2025-38134.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in u... | 7.0 | 0.0019 | | | [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0019 | | | [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 | | | [CVE-2025-38289](https://patchblox.com/security/data/cve/CVE-2025-38289.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0019 | | | [CVE-2025-38456](https://patchblox.com/security/data/cve/CVE-2025-38456.md) | High | ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() | 7.8 | 0.0019 | | | [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 | | | [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 | | | [CVE-2025-38313](https://patchblox.com/security/data/cve/CVE-2025-38313.md) | High | bus: fsl-mc: fix double-free on mc_dev | 7.8 | 0.0019 | | | [CVE-2025-38560](https://patchblox.com/security/data/cve/CVE-2025-38560.md) | High | x86/sev: Evict cache lines during SNP memory validation | 7.5 | 0.0019 | | | [CVE-2025-38392](https://patchblox.com/security/data/cve/CVE-2025-38392.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.3 | 0.0019 | | | [CVE-2025-38409](https://patchblox.com/security/data/cve/CVE-2025-38409.md) | High | drm/msm: Fix another leak in the submit error path | 7.1 | 0.0019 | | | [CVE-2025-38417](https://patchblox.com/security/data/cve/CVE-2025-38417.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.1 | 0.0019 | | | [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 | | | [CVE-2025-38427](https://patchblox.com/security/data/cve/CVE-2025-38427.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0019 | | | [CVE-2025-38463](https://patchblox.com/security/data/cve/CVE-2025-38463.md) | High | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 | | | [CVE-2025-38117](https://patchblox.com/security/data/cve/CVE-2025-38117.md) | High | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 7.8 | 0.0019 | | | [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 | | | [CVE-2025-38453](https://patchblox.com/security/data/cve/CVE-2025-38453.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | | | [CVE-2025-38568](https://patchblox.com/security/data/cve/CVE-2025-38568.md) | High | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 7.8 | 0.0019 | | | [CVE-2025-38593](https://patchblox.com/security/data/cve/CVE-2025-38593.md) | High | Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' | 7.8 | 0.0019 | | | [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 | | | [CVE-2025-38438](https://patchblox.com/security/data/cve/CVE-2025-38438.md) | High | ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. | 7.1 | 0.0019 | | | [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 | | | [CVE-2025-39687](https://patchblox.com/security/data/cve/CVE-2025-39687.md) | High | iio: light: as73211: Ensure buffer holes are zeroed | 7.1 | 0.0019 | | | [CVE-2025-38058](https://patchblox.com/security/data/cve/CVE-2025-38058.md) | High | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0019 | | | [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 | | | [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 | | | [CVE-2025-38499](https://patchblox.com/security/data/cve/CVE-2025-38499.md) | High | clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns | 8.2 | 0.0019 | | | [CVE-2025-38227](https://patchblox.com/security/data/cve/CVE-2025-38227.md) | High | media: vidtv: Terminating the subsequent process of initialization failure | 7.8 | 0.0019 | | | [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 | | | [CVE-2025-38341](https://patchblox.com/security/data/cve/CVE-2025-38341.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DM... | 7.8 | 0.0019 | | | [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 | | | [CVE-2025-38349](https://patchblox.com/security/data/cve/CVE-2025-38349.md) | High | eventpoll: don't decrement ep refcount while still holding the ep mutex | 8.4 | 0.0018 | | | [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 | | | [CVE-2025-38618](https://patchblox.com/security/data/cve/CVE-2025-38618.md) | High | vsock: Do not allow binding to VMADDR_PORT_ANY | 7.8 | 0.0018 | | | [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 | | | [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 | | | [CVE-2025-39727](https://patchblox.com/security/data/cve/CVE-2025-39727.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_... | 7.8 | 0.0018 | | | [CVE-2025-38493](https://patchblox.com/security/data/cve/CVE-2025-38493.md) | High | tracing/osnoise: Fix crash in timerlat_dump_stack() | 7.0 | 0.0018 | | | [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 | | | [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 | | | [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 | | | [CVE-2025-38732](https://patchblox.com/security/data/cve/CVE-2025-38732.md) | High | netfilter: nf_reject: don't leak dst refcount for loopback packets | 7.0 | 0.0018 | | | [CVE-2025-38446](https://patchblox.com/security/data/cve/CVE-2025-38446.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: clk: imx: Fix an out-of-bounds access in dispmix... | 7.1 | 0.0018 | | | [CVE-2025-38208](https://patchblox.com/security/data/cve/CVE-2025-38208.md) | High | smb: client: add NULL check in automount_fullpath | 7.0 | 0.0018 | | | [CVE-2025-38556](https://patchblox.com/security/data/cve/CVE-2025-38556.md) | High | HID: core: Harden s32ton() against conversion to 0 bits | 8.0 | 0.0018 | | | [CVE-2025-39823](https://patchblox.com/security/data/cve/CVE-2025-39823.md) | High | KVM: x86: use array_index_nospec with indices that come from guest | 7.8 | 0.0018 | | | [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 | | | [CVE-2025-38500](https://patchblox.com/security/data/cve/CVE-2025-38500.md) | High | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 7.8 | 0.0018 | | | [CVE-2025-38736](https://patchblox.com/security/data/cve/CVE-2025-38736.md) | High | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization | 7.1 | 0.0018 | | | [CVE-2025-38186](https://patchblox.com/security/data/cve/CVE-2025-38186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop(... | 7.0 | 0.0018 | | | [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 | | | [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 | | | [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 | | | [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 | | | [CVE-2025-38087](https://patchblox.com/security/data/cve/CVE-2025-38087.md) | High | net/sched: fix use-after-free in taprio_dev_notifier | 7.8 | 0.0018 | | | [CVE-2025-38257](https://patchblox.com/security/data/cve/CVE-2025-38257.md) | High | s390/pkey: Prevent overflow in size calculation for memdup_user() | 7.8 | 0.0018 | | | [CVE-2025-38224](https://patchblox.com/security/data/cve/CVE-2025-38224.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: kvaser_pciefd: refine error prone echo_skb_... | 7.1 | 0.0018 | | | [CVE-2025-38587](https://patchblox.com/security/data/cve/CVE-2025-38587.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0018 | | | [CVE-2025-38091](https://patchblox.com/security/data/cve/CVE-2025-38091.md) | High | drm/amd/display: check stream id dml21 wrapper to get plane_id | 7.8 | 0.0018 | | | [CVE-2025-38172](https://patchblox.com/security/data/cve/CVE-2025-38172.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0018 | | | [CVE-2025-38216](https://patchblox.com/security/data/cve/CVE-2025-38216.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0018 | | | [CVE-2025-38735](https://patchblox.com/security/data/cve/CVE-2025-38735.md) | High | gve: prevent ethtool ops after shutdown | 7.0 | 0.0018 | | | [CVE-2025-38609](https://patchblox.com/security/data/cve/CVE-2025-38609.md) | High | PM / devfreq: Check governor before using governor->name | 7.8 | 0.0018 | | | [CVE-2025-38703](https://patchblox.com/security/data/cve/CVE-2025-38703.md) | High | drm/xe: Make dma-fences compliant with the safe access rules | 7.8 | 0.0018 | | | [CVE-2025-38169](https://patchblox.com/security/data/cve/CVE-2025-38169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD sta... | 7.0 | 0.0018 | | | [CVE-2025-38304](https://patchblox.com/security/data/cve/CVE-2025-38304.md) | High | Bluetooth: Fix NULL pointer deference on eir_get_service_data | 7.0 | 0.0018 | | | [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 | | | [CVE-2025-38259](https://patchblox.com/security/data/cve/CVE-2025-38259.md) | High | ASoC: codecs: wcd9335: Fix missing free of regulator supplies | 7.8 | 0.0018 | | | [CVE-2025-39738](https://patchblox.com/security/data/cve/CVE-2025-39738.md) | High | btrfs: do not allow relocation of partially dropped subvolumes | 7.8 | 0.0018 | | | [CVE-2025-38484](https://patchblox.com/security/data/cve/CVE-2025-38484.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer... | 7.8 | 0.0017 | | | [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 | | | [CVE-2025-38730](https://patchblox.com/security/data/cve/CVE-2025-38730.md) | High | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 | | | [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 | | | [CVE-2025-38485](https://patchblox.com/security/data/cve/CVE-2025-38485.md) | High | iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush | 7.8 | 0.0017 | | | [CVE-2025-38662](https://patchblox.com/security/data/cve/CVE-2025-38662.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-dai-i2s: pass correct siz... | 7.8 | 0.0017 | | | [CVE-2025-39788](https://patchblox.com/security/data/cve/CVE-2025-39788.md) | High | scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE | 7.8 | 0.0017 | | | [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 | | | [CVE-2025-39835](https://patchblox.com/security/data/cve/CVE-2025-39835.md) | High | xfs: do not propagate ENODATA disk errors into xattr code | 7.8 | 0.0017 | | | [CVE-2025-38679](https://patchblox.com/security/data/cve/CVE-2025-38679.md) | High | media: venus: Fix OOB read due to missing payload bound check | 7.1 | 0.0017 | | | [CVE-2025-39685](https://patchblox.com/security/data/cve/CVE-2025-39685.md) | High | comedi: pcl726: Prevent invalid irq number | 7.1 | 0.0017 | | | [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 | | | [CVE-2025-39694](https://patchblox.com/security/data/cve/CVE-2025-39694.md) | High | s390/sclp: Fix SCCB present check | 7.3 | 0.0017 | | | [CVE-2025-38170](https://patchblox.com/security/data/cve/CVE-2025-38170.md) | High | arm64/fpsimd: Discard stale CPU state when handling SME traps | 7.0 | 0.0017 | | | [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 | | | [CVE-2025-38496](https://patchblox.com/security/data/cve/CVE-2025-38496.md) | High | dm-bufio: fix sched in atomic context | 7.0 | 0.0017 | | | [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 | | | [CVE-2025-39718](https://patchblox.com/security/data/cve/CVE-2025-39718.md) | High | vsock/virtio: Validate length in packet header before skb_put() | 7.8 | 0.0017 | | | [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 | | | [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 | | | [CVE-2025-39902](https://patchblox.com/security/data/cve/CVE-2025-39902.md) | High | mm/slub: avoid accessing metadata when pointer is invalid in object_err() | 7.8 | 0.0017 | | | [CVE-2025-38670](https://patchblox.com/security/data/cve/CVE-2025-38670.md) | High | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | 7.1 | 0.0017 | | | [CVE-2025-39853](https://patchblox.com/security/data/cve/CVE-2025-39853.md) | High | i40e: Fix potential invalid access when MAC list is empty | 7.1 | 0.0017 | | | [CVE-2025-39891](https://patchblox.com/security/data/cve/CVE-2025-39891.md) | High | wifi: mwifiex: Initialize the chan_stats array to zero | 7.1 | 0.0017 | | | [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 | | | [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 | | | [CVE-2025-38692](https://patchblox.com/security/data/cve/CVE-2025-38692.md) | High | exfat: add cluster chain loop check for dir | 7.0 | 0.0017 | | | [CVE-2025-39744](https://patchblox.com/security/data/cve/CVE-2025-39744.md) | High | rcu: Fix rcu_read_unlock() deadloop due to IRQ work | 7.1 | 0.0016 | | | [CVE-2025-39869](https://patchblox.com/security/data/cve/CVE-2025-39869.md) | High | dmaengine: ti: edma: Fix memory allocation size for queue_priority_map | 7.1 | 0.0016 | | | [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 | | | [CVE-2025-38710](https://patchblox.com/security/data/cve/CVE-2025-38710.md) | High | gfs2: Validate i_depth for exhash directories | 7.0 | 0.0016 | | | [CVE-2025-39865](https://patchblox.com/security/data/cve/CVE-2025-39865.md) | High | tee: fix NULL pointer dereference in tee_shm_put | 7.0 | 0.0016 | | | [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 | | | [CVE-2025-39873](https://patchblox.com/security/data/cve/CVE-2025-39873.md) | High | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB | 7.8 | 0.0016 | | | [CVE-2025-39790](https://patchblox.com/security/data/cve/CVE-2025-39790.md) | High | bus: mhi: host: Detect events pointing to unexpected TREs | 7.8 | 0.0016 | | | [CVE-2025-39945](https://patchblox.com/security/data/cve/CVE-2025-39945.md) | High | cnic: Fix use-after-free bugs in cnic_delete_task | 7.8 | 0.0016 | | | [CVE-2025-39719](https://patchblox.com/security/data/cve/CVE-2025-39719.md) | High | iio: imu: bno055: fix OOB access of hw_xlate array | 7.1 | 0.0016 | | | [CVE-2025-39739](https://patchblox.com/security/data/cve/CVE-2025-39739.md) | High | iommu/arm-smmu-qcom: Add SM6115 MDSS compatible | 7.0 | 0.0016 | | | [CVE-2025-39838](https://patchblox.com/security/data/cve/CVE-2025-39838.md) | High | cifs: prevent NULL pointer dereference in UTF16 conversion | 7.0 | 0.0016 | | | [CVE-2025-39697](https://patchblox.com/security/data/cve/CVE-2025-39697.md) | High | NFS: Fix a race when updating an existing write | 7.6 | 0.0016 | | | [CVE-2025-39746](https://patchblox.com/security/data/cve/CVE-2025-39746.md) | High | wifi: ath10k: shutdown driver when hardware is unreliable | 7.0 | 0.0016 | | | [CVE-2025-39711](https://patchblox.com/security/data/cve/CVE-2025-39711.md) | High | media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls | 7.8 | 0.0016 | | | [CVE-2025-39870](https://patchblox.com/security/data/cve/CVE-2025-39870.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_w... | 7.8 | 0.0016 | | | [CVE-2025-39861](https://patchblox.com/security/data/cve/CVE-2025-39861.md) | High | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 7.8 | 0.0016 | | | [CVE-2025-39882](https://patchblox.com/security/data/cve/CVE-2025-39882.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-fr... | 7.8 | 0.0016 | | | [CVE-2025-39957](https://patchblox.com/security/data/cve/CVE-2025-39957.md) | High | wifi: mac80211: increase scan_ies_len for S1G | 7.8 | 0.0016 | | | [CVE-2025-38665](https://patchblox.com/security/data/cve/CVE-2025-38665.md) | High | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 7.0 | 0.0016 | | | [CVE-2025-38709](https://patchblox.com/security/data/cve/CVE-2025-38709.md) | High | loop: Avoid updating block size under exclusive owner | 7.0 | 0.0016 | | | [CVE-2025-39836](https://patchblox.com/security/data/cve/CVE-2025-39836.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation metho... | 7.8 | 0.0015 | | | [CVE-2025-39871](https://patchblox.com/security/data/cve/CVE-2025-39871.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The... | 7.8 | 0.0015 | | | [CVE-2025-39877](https://patchblox.com/security/data/cve/CVE-2025-39877.md) | High | mm/damon/sysfs: fix use-after-free in state_show() | 7.8 | 0.0015 | | | [CVE-2025-39854](https://patchblox.com/security/data/cve/CVE-2025-39854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ll_ts_... | 7.8 | 0.0015 | | | [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0015 | | | [CVE-2025-39721](https://patchblox.com/security/data/cve/CVE-2025-39721.md) | High | crypto: qat - flush misc workqueue during device shutdown | 7.0 | 0.0015 | | | [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 | | | [CVE-2025-39922](https://patchblox.com/security/data/cve/CVE-2025-39922.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0015 | | | [CVE-2025-39896](https://patchblox.com/security/data/cve/CVE-2025-39896.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery work from being que... | 7.8 | 0.0015 | | | [CVE-2025-39833](https://patchblox.com/security/data/cve/CVE-2025-39833.md) | High | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 7.0 | 0.0015 | | | [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 | | | [CVE-2025-38302](https://patchblox.com/security/data/cve/CVE-2025-38302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in bl... | 7.0 | 0.0015 | | | [CVE-2025-39900](https://patchblox.com/security/data/cve/CVE-2025-39900.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 7.0 | 0.0015 | | | [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 | | | [CVE-2025-38440](https://patchblox.com/security/data/cve/CVE-2025-38440.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0014 | | | [CVE-2025-38008](https://patchblox.com/security/data/cve/CVE-2025-38008.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 7.0 | 0.0014 | | | [CVE-2025-38306](https://patchblox.com/security/data/cve/CVE-2025-38306.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_c... | 7.0 | 0.0014 | | | [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 | | | [CVE-2025-38383](https://patchblox.com/security/data/cve/CVE-2025-38383.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0013 | | | [CVE-2025-38373](https://patchblox.com/security/data/cve/CVE-2025-38373.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0013 | | | [CVE-2025-39825](https://patchblox.com/security/data/cve/CVE-2025-39825.md) | High | smb: client: fix race with concurrent opens in rename(2) | 7.6 | 0.0012 | | | [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 | | | [CVE-2025-39832](https://patchblox.com/security/data/cve/CVE-2025-39832.md) | High | net/mlx5: Fix lockdep assertion on sync reset unload event | 7.0 | 0.0012 | | | [CVE-2025-38311](https://patchblox.com/security/data/cve/CVE-2025-38311.md) | High | iavf: get rid of the crit lock | 7.0 | 0.0011 | | | [CVE-2025-39751](https://patchblox.com/security/data/cve/CVE-2025-39751.md) | High | ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control | 7.8 | n/a | | | [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a | | | [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0052 | | | [CVE-2025-38123](https://patchblox.com/security/data/cve/CVE-2025-38123.md) | Routine | net: wwan: t7xx: Fix napi rx poll issue | 5.5 | 0.0047 | | | [CVE-2025-38405](https://patchblox.com/security/data/cve/CVE-2025-38405.md) | Routine | kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0043 | | | [CVE-2025-39758](https://patchblox.com/security/data/cve/CVE-2025-39758.md) | Routine | RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages | 5.5 | 0.0042 | | | [CVE-2025-38526](https://patchblox.com/security/data/cve/CVE-2025-38526.md) | Routine | ice: add NULL check in eswitch lag check | 5.5 | 0.0041 | | | [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 | | | [CVE-2025-38514](https://patchblox.com/security/data/cve/CVE-2025-38514.md) | Routine | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 6.5 | 0.0039 | | | [CVE-2025-39770](https://patchblox.com/security/data/cve/CVE-2025-39770.md) | Routine | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0038 | | | [CVE-2025-38209](https://patchblox.com/security/data/cve/CVE-2025-38209.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | n/a | 0.0037 | | | [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 | | | [CVE-2025-38365](https://patchblox.com/security/data/cve/CVE-2025-38365.md) | Routine | btrfs: fix a race between renames and directory logging | 5.5 | 0.0036 | | | [CVE-2025-38246](https://patchblox.com/security/data/cve/CVE-2025-38246.md) | Routine | bnxt: properly flush XDP redirect lists | 5.5 | 0.0034 | | | [CVE-2025-38287](https://patchblox.com/security/data/cve/CVE-2025-38287.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | n/a | 0.0034 | | | [CVE-2025-38524](https://patchblox.com/security/data/cve/CVE-2025-38524.md) | Routine | rxrpc: Fix recv-recv race of completed call | 4.7 | 0.0032 | | | [CVE-2025-39857](https://patchblox.com/security/data/cve/CVE-2025-39857.md) | Routine | net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() | 5.8 | 0.0031 | | | [CVE-2025-37856](https://patchblox.com/security/data/cve/CVE-2025-37856.md) | Routine | btrfs: harden block_group::bg_list against list_del() races | 5.5 | 0.0031 | | | [CVE-2025-38545](https://patchblox.com/security/data/cve/CVE-2025-38545.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size... | 5.5 | 0.0031 | | | [CVE-2025-37864](https://patchblox.com/security/data/cve/CVE-2025-37864.md) | Routine | net: dsa: clean up FDB, MDB, VLAN entries on unbind | 5.5 | 0.0030 | | | [CVE-2025-22034](https://patchblox.com/security/data/cve/CVE-2025-22034.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs... | 5.5 | 0.0028 | | | [CVE-2024-53164](https://patchblox.com/security/data/cve/CVE-2024-53164.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0027 | | | [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0025 | | | [CVE-2025-39726](https://patchblox.com/security/data/cve/CVE-2025-39726.md) | Routine | s390/ism: fix concurrency management in ism_cmd() | 5.5 | 0.0025 | | | [CVE-2025-38343](https://patchblox.com/security/data/cve/CVE-2025-38343.md) | Routine | wifi: mt76: mt7996: drop fragments with multicast or broadcast RA | 5.5 | 0.0025 | | | [CVE-2025-39848](https://patchblox.com/security/data/cve/CVE-2025-39848.md) | Routine | ax25: properly unshare skbs in ax25_kiss_rcv() | 5.5 | 0.0024 | | | [CVE-2025-38303](https://patchblox.com/security/data/cve/CVE-2025-38303.md) | Routine | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | 5.5 | 0.0024 | | | [CVE-2024-58090](https://patchblox.com/security/data/cve/CVE-2024-58090.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0023 | | | [CVE-2025-38253](https://patchblox.com/security/data/cve/CVE-2025-38253.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handl... | 5.5 | 0.0023 | | | [CVE-2025-38272](https://patchblox.com/security/data/cve/CVE-2025-38272.md) | Routine | net: dsa: b53: do not enable EEE on bcm63xx | 5.5 | 0.0023 | | | [CVE-2025-39827](https://patchblox.com/security/data/cve/CVE-2025-39827.md) | Routine | net: rose: include node references in rose_neigh refcount | 5.5 | 0.0023 | | | [CVE-2025-38291](https://patchblox.com/security/data/cve/CVE-2025-38291.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | n/a | 0.0022 | | | [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0022 | | | [CVE-2025-38591](https://patchblox.com/security/data/cve/CVE-2025-38591.md) | Routine | bpf: Reject narrower access to pointer ctx fields | 5.5 | 0.0022 | | | [CVE-2024-57952](https://patchblox.com/security/data/cve/CVE-2024-57952.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for... | 5.5 | 0.0022 | | | [CVE-2025-38034](https://patchblox.com/security/data/cve/CVE-2025-38034.md) | Routine | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 5.5 | 0.0022 | | | [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 | | | [CVE-2025-38597](https://patchblox.com/security/data/cve/CVE-2025-38597.md) | Routine | drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port | 5.5 | 0.0022 | | | [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 | | | [CVE-2025-38135](https://patchblox.com/security/data/cve/CVE-2025-38135.md) | Routine | serial: Fix potential null-ptr-deref in mlb_usio_probe() | 5.5 | 0.0021 | | | [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 | | | [CVE-2025-38145](https://patchblox.com/security/data/cve/CVE-2025-38145.md) | Routine | soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() | 5.5 | 0.0021 | | | [CVE-2025-38138](https://patchblox.com/security/data/cve/CVE-2025-38138.md) | Routine | dmaengine: ti: Add NULL check in udma_probe() | 5.5 | 0.0021 | | | [CVE-2025-38143](https://patchblox.com/security/data/cve/CVE-2025-38143.md) | Routine | backlight: pm8941: Add NULL check in wled_configure() | 5.5 | 0.0021 | | | [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 | | | [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 | | | [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 | | | [CVE-2025-38275](https://patchblox.com/security/data/cve/CVE-2025-38275.md) | Routine | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 5.5 | 0.0021 | | | [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0021 | | | [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0021 | | | [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 | | | [CVE-2025-38190](https://patchblox.com/security/data/cve/CVE-2025-38190.md) | Routine | atm: Revert atm_account_tx() if copy_from_iter_full() fails. | 5.5 | 0.0021 | | | [CVE-2025-38705](https://patchblox.com/security/data/cve/CVE-2025-38705.md) | Routine | drm/amd/pm: fix null pointer access | 5.5 | 0.0020 | | | [CVE-2025-38706](https://patchblox.com/security/data/cve/CVE-2025-38706.md) | Routine | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 5.5 | 0.0020 | | | [CVE-2025-39705](https://patchblox.com/security/data/cve/CVE-2025-39705.md) | Routine | drm/amd/display: fix a Null pointer dereference vulnerability | 5.5 | 0.0020 | | | [CVE-2025-38127](https://patchblox.com/security/data/cve/CVE-2025-38127.md) | Routine | ice: fix Tx scheduler error handling in XDP callback | 5.5 | 0.0020 | | | [CVE-2025-38408](https://patchblox.com/security/data/cve/CVE-2025-38408.md) | Routine | genirq/irq_sim: Initialize work context pointers properly | 5.5 | 0.0020 | | | [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 | | | [CVE-2025-38185](https://patchblox.com/security/data/cve/CVE-2025-38185.md) | Routine | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 5.5 | 0.0020 | | | [CVE-2025-38382](https://patchblox.com/security/data/cve/CVE-2025-38382.md) | Routine | btrfs: fix iteration of extrefs during log replay | 5.5 | 0.0020 | | | [CVE-2025-38098](https://patchblox.com/security/data/cve/CVE-2025-38098.md) | Routine | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 5.5 | 0.0020 | | | [CVE-2025-38173](https://patchblox.com/security/data/cve/CVE-2025-38173.md) | Routine | crypto: marvell/cesa - Handle zero-length skcipher requests | 5.5 | 0.0020 | | | [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 | | | [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 | | | [CVE-2025-38006](https://patchblox.com/security/data/cve/CVE-2025-38006.md) | Routine | net: mctp: Don't access ifa_index when missing | 5.5 | 0.0020 | | | [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 | | | [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 | | | [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 | | | [CVE-2025-38658](https://patchblox.com/security/data/cve/CVE-2025-38658.md) | Routine | kernel-64kb: The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixe... | n/a | 0.0020 | | | [CVE-2025-38142](https://patchblox.com/security/data/cve/CVE-2025-38142.md) | Routine | hwmon: (asus-ec-sensors) check sensor index in read_string() | 5.5 | 0.0020 | | | [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 | | | [CVE-2025-38612](https://patchblox.com/security/data/cve/CVE-2025-38612.md) | Routine | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | 5.5 | 0.0019 | | | [CVE-2025-38441](https://patchblox.com/security/data/cve/CVE-2025-38441.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0019 | | | [CVE-2025-38189](https://patchblox.com/security/data/cve/CVE-2025-38189.md) | Routine | drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` | 5.5 | 0.0019 | | | [CVE-2025-38384](https://patchblox.com/security/data/cve/CVE-2025-38384.md) | Routine | mtd: spinand: fix memory leak of ECC engine conf | 5.5 | 0.0019 | | | [CVE-2025-38418](https://patchblox.com/security/data/cve/CVE-2025-38418.md) | Routine | remoteproc: core: Release rproc->clean_table after rproc_attach() fails | 5.5 | 0.0019 | | | [CVE-2025-38419](https://patchblox.com/security/data/cve/CVE-2025-38419.md) | Routine | remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() | 5.5 | 0.0019 | | | [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 | | | [CVE-2025-38265](https://patchblox.com/security/data/cve/CVE-2025-38265.md) | Routine | serial: jsm: fix NPE during jsm_uart_port_init | 5.5 | 0.0019 | | | [CVE-2025-38426](https://patchblox.com/security/data/cve/CVE-2025-38426.md) | Routine | drm/amdgpu: Add basic validation for RAS header | 5.5 | 0.0019 | | | [CVE-2025-38455](https://patchblox.com/security/data/cve/CVE-2025-38455.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0019 | | | [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 | | | [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 | | | [CVE-2025-38604](https://patchblox.com/security/data/cve/CVE-2025-38604.md) | Routine | wifi: rtl818x: Kill URBs before clearing tx status queue | 5.5 | 0.0019 | | | [CVE-2025-38274](https://patchblox.com/security/data/cve/CVE-2025-38274.md) | Routine | fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() | 5.5 | 0.0019 | | | [CVE-2025-38354](https://patchblox.com/security/data/cve/CVE-2025-38354.md) | Routine | drm/msm/gpu: Fix crash when throttling GPU immediately during boot | 5.5 | 0.0019 | | | [CVE-2025-38364](https://patchblox.com/security/data/cve/CVE-2025-38364.md) | Routine | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 5.5 | 0.0019 | | | [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 | | | [CVE-2025-38355](https://patchblox.com/security/data/cve/CVE-2025-38355.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0019 | | | [CVE-2025-38356](https://patchblox.com/security/data/cve/CVE-2025-38356.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0019 | | | [CVE-2025-38360](https://patchblox.com/security/data/cve/CVE-2025-38360.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0019 | | | [CVE-2025-38390](https://patchblox.com/security/data/cve/CVE-2025-38390.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix memory leak by freeing no... | 5.5 | 0.0019 | | | [CVE-2025-38586](https://patchblox.com/security/data/cve/CVE-2025-38586.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception... | 5.5 | 0.0019 | | | [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 | | | [CVE-2025-39684](https://patchblox.com/security/data/cve/CVE-2025-39684.md) | Routine | comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() | 5.5 | 0.0019 | | | [CVE-2025-39775](https://patchblox.com/security/data/cve/CVE-2025-39775.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix WARN with uffd that has remap eve... | 5.5 | 0.0019 | | | [CVE-2025-39830](https://patchblox.com/security/data/cve/CVE-2025-39830.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_pool_buddy... | 5.5 | 0.0019 | | | [CVE-2025-39834](https://patchblox.com/security/data/cve/CVE-2025-39834.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get... | 5.5 | 0.0019 | | | [CVE-2025-37821](https://patchblox.com/security/data/cve/CVE-2025-37821.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se->slice being set to U64_MAX a... | 5.5 | 0.0019 | | | [CVE-2025-38643](https://patchblox.com/security/data/cve/CVE-2025-38643.md) | Routine | wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() | 5.5 | 0.0019 | | | [CVE-2025-38554](https://patchblox.com/security/data/cve/CVE-2025-38554.md) | Routine | kernel-64kb: The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixe... | n/a | 0.0019 | | | [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 | | | [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 | | | [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion wi... | 5.5 | 0.0018 | | | [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-39681](https://patchblox.com/security/data/cve/CVE-2025-39681.md) | Routine | x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | 5.5 | 0.0018 | | | [CVE-2025-38148](https://patchblox.com/security/data/cve/CVE-2025-38148.md) | Routine | net: phy: mscc: Fix memory leak when using one step timestamping | 5.5 | 0.0018 | | | [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0018 | | | [CVE-2025-38205](https://patchblox.com/security/data/cve/CVE-2025-38205.md) | Routine | drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 | 5.5 | 0.0018 | | | [CVE-2025-38487](https://patchblox.com/security/data/cve/CVE-2025-38487.md) | Routine | soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled | 5.5 | 0.0018 | | | [CVE-2025-38573](https://patchblox.com/security/data/cve/CVE-2025-38573.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43: Property entry should be a null-te... | 5.5 | 0.0018 | | | [CVE-2025-38576](https://patchblox.com/security/data/cve/CVE-2025-38576.md) | Routine | powerpc/eeh: Make EEH driver device hotplug safe | 5.5 | 0.0018 | | | [CVE-2025-38528](https://patchblox.com/security/data/cve/CVE-2025-38528.md) | Routine | bpf: Reject %p% format string in bprintf-like helpers | 5.5 | 0.0018 | | | [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 | | | [CVE-2025-38635](https://patchblox.com/security/data/cve/CVE-2025-38635.md) | Routine | clk: davinci: Add NULL check in davinci_lpsc_clk_register() | 5.5 | 0.0018 | | | [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 | | | [CVE-2024-57891](https://patchblox.com/security/data/cve/CVE-2024-57891.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix invalid irq restore in scx_ops_by... | 5.5 | 0.0018 | | | [CVE-2025-38188](https://patchblox.com/security/data/cve/CVE-2025-38188.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calli... | 5.5 | 0.0018 | | | [CVE-2025-38444](https://patchblox.com/security/data/cve/CVE-2025-38444.md) | Routine | raid10: cleanup memleak at raid10_make_request | 5.5 | 0.0018 | | | [CVE-2025-38602](https://patchblox.com/security/data/cve/CVE-2025-38602.md) | Routine | iwlwifi: Add missing check for alloc_ordered_workqueue | 5.5 | 0.0018 | | | [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 | | | [CVE-2025-38251](https://patchblox.com/security/data/cve/CVE-2025-38251.md) | Routine | atm: clip: prevent NULL deref in clip_push() | 5.5 | 0.0018 | | | [CVE-2025-38263](https://patchblox.com/security/data/cve/CVE-2025-38263.md) | Routine | bcache: fix NULL pointer in cache_set_flush() | 5.5 | 0.0018 | | | [CVE-2025-38300](https://patchblox.com/security/data/cve/CVE-2025-38300.md) | Routine | crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() | 5.5 | 0.0018 | | | [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 | | | [CVE-2025-38368](https://patchblox.com/security/data/cve/CVE-2025-38368.md) | Routine | misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() | 5.5 | 0.0018 | | | [CVE-2025-38376](https://patchblox.com/security/data/cve/CVE-2025-38376.md) | Routine | usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume | 5.5 | 0.0018 | | | [CVE-2025-38451](https://patchblox.com/security/data/cve/CVE-2025-38451.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The... | 5.5 | 0.0018 | | | [CVE-2025-38588](https://patchblox.com/security/data/cve/CVE-2025-38588.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0018 | | | [CVE-2025-38610](https://patchblox.com/security/data/cve/CVE-2025-38610.md) | Routine | powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() | 5.5 | 0.0018 | | | [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38299](https://patchblox.com/security/data/cve/CVE-2025-38299.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0018 | | | [CVE-2025-38402](https://patchblox.com/security/data/cve/CVE-2025-38402.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0018 | | | [CVE-2025-38531](https://patchblox.com/security/data/cve/CVE-2025-38531.md) | Routine | iio: common: st_sensors: Fix use of uninitialize device structs | 5.5 | 0.0018 | | | [CVE-2025-38557](https://patchblox.com/security/data/cve/CVE-2025-38557.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count... | 5.5 | 0.0018 | | | [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 | | | [CVE-2025-38168](https://patchblox.com/security/data/cve/CVE-2025-38168.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure... | 5.5 | 0.0018 | | | [CVE-2025-38307](https://patchblox.com/security/data/cve/CVE-2025-38307.md) | Routine | ASoC: Intel: avs: Verify content returned by parse_int_array() | 5.5 | 0.0018 | | | [CVE-2025-38374](https://patchblox.com/security/data/cve/CVE-2025-38374.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-... | 5.5 | 0.0018 | | | [CVE-2025-38381](https://patchblox.com/security/data/cve/CVE-2025-38381.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL derefe... | 5.5 | 0.0018 | | | [CVE-2025-38450](https://patchblox.com/security/data/cve/CVE-2025-38450.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer derefer... | 5.5 | 0.0018 | | | [CVE-2025-38454](https://patchblox.com/security/data/cve/CVE-2025-38454.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: ad1816a: Fix potential NULL pointer deref... | 5.5 | 0.0018 | | | [CVE-2025-38559](https://patchblox.com/security/data/cve/CVE-2025-38559.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL poin... | 5.5 | 0.0018 | | | [CVE-2025-38583](https://patchblox.com/security/data/cve/CVE-2025-38583.md) | Routine | clk: xilinx: vcu: unregister pll_post only if registered correctly | 5.5 | 0.0018 | | | [CVE-2025-38619](https://patchblox.com/security/data/cve/CVE-2025-38619.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix list_del corruption... | 5.5 | 0.0018 | | | [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 | | | [CVE-2025-38301](https://patchblox.com/security/data/cve/CVE-2025-38301.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanu... | 5.5 | 0.0018 | | | [CVE-2025-38318](https://patchblox.com/security/data/cve/CVE-2025-38318.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Fix missing platform_set_drvdata()... | 5.5 | 0.0017 | | | [CVE-2025-38475](https://patchblox.com/security/data/cve/CVE-2025-38475.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0017 | | | [CVE-2025-38630](https://patchblox.com/security/data/cve/CVE-2025-38630.md) | Routine | fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | 5.5 | 0.0017 | | | [CVE-2025-38640](https://patchblox.com/security/data/cve/CVE-2025-38640.md) | Routine | bpf: Disable migration in nf_hook_run_bpf(). | 5.5 | 0.0017 | | | [CVE-2025-38564](https://patchblox.com/security/data/cve/CVE-2025-38564.md) | Routine | kernel-64kb: The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixe... | n/a | 0.0017 | | | [CVE-2025-39748](https://patchblox.com/security/data/cve/CVE-2025-39748.md) | Routine | bpf: Forget ranges when refining tnum after JSET | 5.5 | 0.0017 | | | [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0017 | | | [CVE-2025-38155](https://patchblox.com/security/data/cve/CVE-2025-38155.md) | Routine | wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() | 5.5 | 0.0017 | | | [CVE-2025-38234](https://patchblox.com/security/data/cve/CVE-2025-38234.md) | Routine | sched/rt: Fix race in push_rt_task | 5.5 | 0.0017 | | | [CVE-2025-38659](https://patchblox.com/security/data/cve/CVE-2025-38659.md) | Routine | gfs2: No more self recovery | 5.5 | 0.0017 | | | [CVE-2025-38733](https://patchblox.com/security/data/cve/CVE-2025-38733.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mappin... | 5.5 | 0.0017 | | | [CVE-2025-39787](https://patchblox.com/security/data/cve/CVE-2025-39787.md) | Routine | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | 5.5 | 0.0017 | | | [CVE-2025-38232](https://patchblox.com/security/data/cve/CVE-2025-38232.md) | Routine | NFSD: fix race between nfsd registration and exports_proc | 4.7 | 0.0017 | | | [CVE-2025-38359](https://patchblox.com/security/data/cve/CVE-2025-38359.md) | Routine | s390/mm: Fix in_atomic() handling in do_secure_storage_access() | 5.5 | 0.0017 | | | [CVE-2025-39842](https://patchblox.com/security/data/cve/CVE-2025-39842.md) | Routine | ocfs2: prevent release journal inode after journal shutdown | 5.5 | 0.0017 | | | [CVE-2025-38225](https://patchblox.com/security/data/cve/CVE-2025-38225.md) | Routine | media: imx-jpeg: Cleanup after an allocation error | 5.5 | 0.0017 | | | [CVE-2025-38623](https://patchblox.com/security/data/cve/CVE-2025-38623.md) | Routine | PCI: pnv_php: Fix surprise plug detection and recovery | 5.5 | 0.0017 | | | [CVE-2025-38624](https://patchblox.com/security/data/cve/CVE-2025-38624.md) | Routine | PCI: pnv_php: Clean up allocated IRQs on unplug | 5.5 | 0.0017 | | | [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 | | | [CVE-2025-38156](https://patchblox.com/security/data/cve/CVE-2025-38156.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996... | 5.5 | 0.0017 | | | [CVE-2025-38671](https://patchblox.com/security/data/cve/CVE-2025-38671.md) | Routine | i2c: qup: jump out of the loop in case of timeout | 5.5 | 0.0017 | | | [CVE-2025-38228](https://patchblox.com/security/data/cve/CVE-2025-38228.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak... | 5.5 | 0.0017 | | | [CVE-2025-39675](https://patchblox.com/security/data/cve/CVE-2025-39675.md) | Routine | drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() | 5.5 | 0.0017 | | | [CVE-2025-39693](https://patchblox.com/security/data/cve/CVE-2025-39693.md) | Routine | drm/amd/display: Avoid a NULL pointer dereference | 5.5 | 0.0017 | | | [CVE-2025-38489](https://patchblox.com/security/data/cve/CVE-2025-38489.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0017 | | | [CVE-2025-38628](https://patchblox.com/security/data/cve/CVE-2025-38628.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0017 | | | [CVE-2025-38631](https://patchblox.com/security/data/cve/CVE-2025-38631.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When... | 5.5 | 0.0017 | | | [CVE-2025-38644](https://patchblox.com/security/data/cve/CVE-2025-38644.md) | Routine | wifi: mac80211: reject TDLS operations when station is not associated | 5.5 | 0.0017 | | | [CVE-2025-38255](https://patchblox.com/security/data/cve/CVE-2025-38255.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0017 | | | [CVE-2025-38258](https://patchblox.com/security/data/cve/CVE-2025-38258.md) | Routine | mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write | 5.5 | 0.0017 | | | [CVE-2025-38634](https://patchblox.com/security/data/cve/CVE-2025-38634.md) | Routine | power: supply: cpcap-charger: Fix null check for power_supply_get_by_name | 5.5 | 0.0017 | | | [CVE-2025-38646](https://patchblox.com/security/data/cve/CVE-2025-38646.md) | Routine | wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band | 6.5 | 0.0017 | | Showing 500 of 570 CVEs; the web page lists them all. --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.