{
  "fix": "OPENSUSE-SU-2025:20091-1",
  "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
  "summary": "OPENSUSE-SU-2025:20091-1, released November 26, 2025, fixes 83 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 12 packages",
  "released": "2025-11-26T17:04:24Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-40000, rated Critical",
  "supported": true,
  "cveCount": 83,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00644,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2025:20091-1",
  "appliesTo": [
    {
      "product": "dtb-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-40000",
      "url": "https://patchblox.com/security/cve/CVE-2025-40000",
      "title": "wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39996",
      "url": "https://patchblox.com/security/cve/CVE-2025-39996",
      "title": "media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39985",
      "url": "https://patchblox.com/security/cve/CVE-2025-39985",
      "title": "can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39986",
      "url": "https://patchblox.com/security/cve/CVE-2025-39986",
      "title": "can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39967",
      "url": "https://patchblox.com/security/cve/CVE-2025-39967",
      "title": "fbcon: fix integer overflow in fbcon_do_set_font",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39994",
      "url": "https://patchblox.com/security/cve/CVE-2025-39994",
      "title": "media: tuner: xc5000: Fix use-after-free in xc5000_release",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39970",
      "url": "https://patchblox.com/security/cve/CVE-2025-39970",
      "title": "i40e: fix input validation logic for action_meta",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39971",
      "url": "https://patchblox.com/security/cve/CVE-2025-39971",
      "title": "i40e: fix idx validation in config queues msg",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39972",
      "url": "https://patchblox.com/security/cve/CVE-2025-39972",
      "title": "i40e: fix idx validation in i40e_validate_queue_map",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39973",
      "url": "https://patchblox.com/security/cve/CVE-2025-39973",
      "title": "i40e: add validation for ring_len param",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39978",
      "url": "https://patchblox.com/security/cve/CVE-2025-39978",
      "title": "octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39968",
      "url": "https://patchblox.com/security/cve/CVE-2025-39968",
      "title": "i40e: add max boundary check for VF filters",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40048",
      "url": "https://patchblox.com/security/cve/CVE-2025-40048",
      "title": "uio_hv_generic: Let userspace take care of interrupt mask",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40087",
      "url": "https://patchblox.com/security/cve/CVE-2025-40087",
      "title": "NFSD: Define a proc_layoutcommit for the FlexFiles layout type",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39702",
      "url": "https://patchblox.com/security/cve/CVE-2025-39702",
      "title": "ipv6: sr: Fix MAC comparison to be constant-time",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40043",
      "url": "https://patchblox.com/security/cve/CVE-2025-40043",
      "title": "net: nfc: nci: Add parameter validation for packet data",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39866",
      "url": "https://patchblox.com/security/cve/CVE-2025-39866",
      "title": "fs: writeback: fix use-after-free in __mark_inode_dirty()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40019",
      "url": "https://patchblox.com/security/cve/CVE-2025-40019",
      "title": "crypto: essiv - Check ssize for decryption and in-place encryption",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40364",
      "url": "https://patchblox.com/security/cve/CVE-2025-40364",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring: fix io_req_prep_async with provided bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39982",
      "url": "https://patchblox.com/security/cve/CVE-2025-39982",
      "title": "Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00282,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40009",
      "url": "https://patchblox.com/security/cve/CVE-2025-40009",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc/task_mmu: check p-\u003Evec_buf for NULL  Whe...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39995",
      "url": "https://patchblox.com/security/cve/CVE-2025-39995",
      "title": "media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40035",
      "url": "https://patchblox.com/security/cve/CVE-2025-40035",
      "title": "Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40036",
      "url": "https://patchblox.com/security/cve/CVE-2025-40036",
      "title": "misc: fastrpc: fix possible map leak in fastrpc_put_args",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40052",
      "url": "https://patchblox.com/security/cve/CVE-2025-40052",
      "title": "smb: client: fix crypto buffers in non-linear memory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40020",
      "url": "https://patchblox.com/security/cve/CVE-2025-40020",
      "title": "can: peak_usb: fix shift-out-of-bounds issue",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39965",
      "url": "https://patchblox.com/security/cve/CVE-2025-39965",
      "title": "xfrm: xfrm_alloc_spi shouldn\u0027t use 0 as SPI",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39992",
      "url": "https://patchblox.com/security/cve/CVE-2025-39992",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: swap: check for stable address space before...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40012",
      "url": "https://patchblox.com/security/cve/CVE-2025-40012",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix warning in smc_rx_splice() when cal...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39984",
      "url": "https://patchblox.com/security/cve/CVE-2025-39984",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39987",
      "url": "https://patchblox.com/security/cve/CVE-2025-39987",
      "title": "can: hi311x: populate ndo_change_mtu() to prevent buffer overflow",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39988",
      "url": "https://patchblox.com/security/cve/CVE-2025-39988",
      "title": "can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38653",
      "url": "https://patchblox.com/security/cve/CVE-2025-38653",
      "title": "proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40044",
      "url": "https://patchblox.com/security/cve/CVE-2025-40044",
      "title": "fs: udf: fix OOB read in lengthAllocDescs handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38718",
      "url": "https://patchblox.com/security/cve/CVE-2025-38718",
      "title": "sctp: linearize cloned gso packets in sctp_rcv",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39955",
      "url": "https://patchblox.com/security/cve/CVE-2025-39955",
      "title": "tcp: Clear tcp_sk(sk)-\u003Efastopen_rsk in tcp_disconnect().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40051",
      "url": "https://patchblox.com/security/cve/CVE-2025-40051",
      "title": "vhost: vringh: Modify the return value check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40058",
      "url": "https://patchblox.com/security/cve/CVE-2025-40058",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Disallow dirty tracking if incoheren...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39911",
      "url": "https://patchblox.com/security/cve/CVE-2025-39911",
      "title": "i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39797",
      "url": "https://patchblox.com/security/cve/CVE-2025-39797",
      "title": "xfrm: Duplicate SPI Handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39993",
      "url": "https://patchblox.com/security/cve/CVE-2025-39993",
      "title": "media: rc: fix races with imon_disconnect()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39969",
      "url": "https://patchblox.com/security/cve/CVE-2025-39969",
      "title": "i40e: fix validation of VF state in get resources",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39949",
      "url": "https://patchblox.com/security/cve/CVE-2025-39949",
      "title": "qed: Don\u0027t collect too many protection override GRC elements",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39963",
      "url": "https://patchblox.com/security/cve/CVE-2025-39963",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring: fix incorrect io_kiocb reference in io...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39881",
      "url": "https://patchblox.com/security/cve/CVE-2025-39881",
      "title": "kernfs: Fix UAF in polling when open file is released",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40096",
      "url": "https://patchblox.com/security/cve/CVE-2025-40096",
      "title": "drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39981",
      "url": "https://patchblox.com/security/cve/CVE-2025-39981",
      "title": "Bluetooth: MGMT: Fix possible UAFs",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40104",
      "url": "https://patchblox.com/security/cve/CVE-2025-40104",
      "title": "ixgbevf: fix mailbox API compatibility by negotiating supported features",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40018",
      "url": "https://patchblox.com/security/cve/CVE-2025-40018",
      "title": "ipvs: Defer ip_vs_ftp unregister during netns cleanup",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40061",
      "url": "https://patchblox.com/security/cve/CVE-2025-40061",
      "title": "RDMA/rxe: Fix race in do_task() when draining",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39979",
      "url": "https://patchblox.com/security/cve/CVE-2025-39979",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: fs, fix UAF in flow counter release  F...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39903",
      "url": "https://patchblox.com/security/cve/CVE-2025-39903",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nof_numa: fix uninitialized memory nodes causing k...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.3,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39948",
      "url": "https://patchblox.com/security/cve/CVE-2025-39948",
      "title": "kernel-docs: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.4,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40040",
      "url": "https://patchblox.com/security/cve/CVE-2025-40040",
      "title": "mm/ksm: fix flag-dropping behavior in ksm_madvise",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40011",
      "url": "https://patchblox.com/security/cve/CVE-2025-40011",
      "title": "drm/gma500: Fix null dereference in hdmi teardown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40016",
      "url": "https://patchblox.com/security/cve/CVE-2025-40016",
      "title": "media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.2,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40013",
      "url": "https://patchblox.com/security/cve/CVE-2025-40013",
      "title": "ASoC: qcom: audioreach: fix potential null pointer dereference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40078",
      "url": "https://patchblox.com/security/cve/CVE-2025-40078",
      "title": "bpf: Explicitly check accesses to bpf_sock_addr",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40049",
      "url": "https://patchblox.com/security/cve/CVE-2025-40049",
      "title": "Squashfs: fix uninit-value in squashfs_get_parent",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40029",
      "url": "https://patchblox.com/security/cve/CVE-2025-40029",
      "title": "bus: fsl-mc: Check return value of platform_get_resource()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40060",
      "url": "https://patchblox.com/security/cve/CVE-2025-40060",
      "title": "coresight: trbe: Return NULL pointer for allocation failures",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40032",
      "url": "https://patchblox.com/security/cve/CVE-2025-40032",
      "title": "PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40056",
      "url": "https://patchblox.com/security/cve/CVE-2025-40056",
      "title": "vhost: vringh: Fix copy_to_iter return value check",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40037",
      "url": "https://patchblox.com/security/cve/CVE-2025-40037",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fbdev: simplefb: Fix use after free in simplefb_...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39997",
      "url": "https://patchblox.com/security/cve/CVE-2025-39997",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: usb-audio: fix race condition to UAF in sn...",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40080",
      "url": "https://patchblox.com/security/cve/CVE-2025-40080",
      "title": "nbd: restrict sockets to TCP and UDP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21816",
      "url": "https://patchblox.com/security/cve/CVE-2025-21816",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  hrtimers: Force migrate away hrtimers queued aft...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40085",
      "url": "https://patchblox.com/security/cve/CVE-2025-40085",
      "title": "ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40005",
      "url": "https://patchblox.com/security/cve/CVE-2025-40005",
      "title": "spi: cadence-quadspi: Implement refcount to handle unbind during busy",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40071",
      "url": "https://patchblox.com/security/cve/CVE-2025-40071",
      "title": "tty: n_gsm: Don\u0027t block input queue by waiting MSC",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39991",
      "url": "https://patchblox.com/security/cve/CVE-2025-39991",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix NULL dereference in ath11k_qmi...",
      "priority": "Routine",
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40100",
      "url": "https://patchblox.com/security/cve/CVE-2025-40100",
      "title": "btrfs: do not assert we found block group item when creating free space tree",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40062",
      "url": "https://patchblox.com/security/cve/CVE-2025-40062",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: hisilicon/qm - set NULL to qm-\u003Edebug.qm_...",
      "priority": "Routine",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40091",
      "url": "https://patchblox.com/security/cve/CVE-2025-40091",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ixgbe: fix too early devlink_free() in ixgbe_rem...",
      "priority": "Routine",
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39676",
      "url": "https://patchblox.com/security/cve/CVE-2025-39676",
      "title": "scsi: qla4xxx: Prevent a potential error pointer dereference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39756",
      "url": "https://patchblox.com/security/cve/CVE-2025-39756",
      "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39812",
      "url": "https://patchblox.com/security/cve/CVE-2025-39812",
      "title": "sctp: initialize more fields in sctp_v6_from_sk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39956",
      "url": "https://patchblox.com/security/cve/CVE-2025-39956",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  igc: don\u0027t fail igc_probe() on LED setup error...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39779",
      "url": "https://patchblox.com/security/cve/CVE-2025-39779",
      "title": "btrfs: subpage: keep TOWRITE tag until folio is cleaned",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39876",
      "url": "https://patchblox.com/security/cve/CVE-2025-39876",
      "title": "net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39950",
      "url": "https://patchblox.com/security/cve/CVE-2025-39950",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp: Fix a NULL pointer dereference when usi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39895",
      "url": "https://patchblox.com/security/cve/CVE-2025-39895",
      "title": "sched: Fix sched_numa_find_nth_cpu() if mask offline",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39947",
      "url": "https://patchblox.com/security/cve/CVE-2025-39947",
      "title": "net/mlx5e: Harden uplink netdev access against device unbind",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}