{
  "fix": "OPENSUSE-SU-2025:20172-1",
  "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20172-1",
  "summary": "OPENSUSE-SU-2025:20172-1, released December 19, 2025, fixes 100 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 12 packages",
  "released": "2025-12-19T17:38:16Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-40172, rated Critical",
  "supported": true,
  "cveCount": 100,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0071,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2025:20172-1",
  "appliesTo": [
    {
      "product": "dtb-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1.160000.2.5",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-40172",
      "url": "https://patchblox.com/security/cve/CVE-2025-40172",
      "title": "accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40165",
      "url": "https://patchblox.com/security/cve/CVE-2025-40165",
      "title": "media: nxp: imx8-isi: m2m: Fix streaming cleanup on release",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40135",
      "url": "https://patchblox.com/security/cve/CVE-2025-40135",
      "title": "ipv6: use RCU in ip6_xmit()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.0071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40187",
      "url": "https://patchblox.com/security/cve/CVE-2025-40187",
      "title": "net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40053",
      "url": "https://patchblox.com/security/cve/CVE-2025-40053",
      "title": "net: dlink: handle copy_thresh allocation failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40183",
      "url": "https://patchblox.com/security/cve/CVE-2025-40183",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40186",
      "url": "https://patchblox.com/security/cve/CVE-2025-40186",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don\u0027t call reqsk_fastopen_remove() in tcp_c...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40129",
      "url": "https://patchblox.com/security/cve/CVE-2025-40129",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00566,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40158",
      "url": "https://patchblox.com/security/cve/CVE-2025-40158",
      "title": "ipv6: use RCU in ip6_output()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00555,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40133",
      "url": "https://patchblox.com/security/cve/CVE-2025-40133",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: Use __sk_dst_get() and dst_dev_rcu() in m...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40075",
      "url": "https://patchblox.com/security/cve/CVE-2025-40075",
      "title": "tcp_metrics: use dst_dev_net_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40176",
      "url": "https://patchblox.com/security/cve/CVE-2025-40176",
      "title": "tls: wait for pending async decryptions if tls_strp_msg_hold fails",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40171",
      "url": "https://patchblox.com/security/cve/CVE-2025-40171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40204",
      "url": "https://patchblox.com/security/cve/CVE-2025-40204",
      "title": "sctp: Fix MAC comparison to be constant-time",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40074",
      "url": "https://patchblox.com/security/cve/CVE-2025-40074",
      "title": "ipv4: start using dst_dev_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40168",
      "url": "https://patchblox.com/security/cve/CVE-2025-40168",
      "title": "smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38728",
      "url": "https://patchblox.com/security/cve/CVE-2025-38728",
      "title": "smb3: fix for slab out of bounds on mount to ksmbd",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00356,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40141",
      "url": "https://patchblox.com/security/cve/CVE-2025-40141",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre...",
      "priority": "High",
      "severity": "high",
      "cvss": 8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40140",
      "url": "https://patchblox.com/security/cve/CVE-2025-40140",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40001",
      "url": "https://patchblox.com/security/cve/CVE-2025-40001",
      "title": "scsi: mvsas: Fix use-after-free bugs in mvs_work_queue",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40003",
      "url": "https://patchblox.com/security/cve/CVE-2025-40003",
      "title": "net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39980",
      "url": "https://patchblox.com/security/cve/CVE-2025-39980",
      "title": "nexthop: Forbid FDB status change while nexthop is in a group",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37916",
      "url": "https://patchblox.com/security/cve/CVE-2025-37916",
      "title": "pds_core: remove write-after-free of client_id",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40121",
      "url": "https://patchblox.com/security/cve/CVE-2025-40121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: bytcr_rt5651: Fix invalid quirk inp...",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40055",
      "url": "https://patchblox.com/security/cve/CVE-2025-40055",
      "title": "ocfs2: fix double free in user_cluster_connect()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40102",
      "url": "https://patchblox.com/security/cve/CVE-2025-40102",
      "title": "KVM: arm64: Prevent access to vCPU events before init",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38084",
      "url": "https://patchblox.com/security/cve/CVE-2025-38084",
      "title": "mm/hugetlb: unshare page tables during VMA split, not before",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40185",
      "url": "https://patchblox.com/security/cve/CVE-2025-40185",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40154",
      "url": "https://patchblox.com/security/cve/CVE-2025-40154",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40006",
      "url": "https://patchblox.com/security/cve/CVE-2025-40006",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix folio is still mapped when delet...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40196",
      "url": "https://patchblox.com/security/cve/CVE-2025-40196",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs: quota: create dedicated workqueue for quota_...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39990",
      "url": "https://patchblox.com/security/cve/CVE-2025-39990",
      "title": "bpf: Check the helper function is valid in get_helper_proto",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40101",
      "url": "https://patchblox.com/security/cve/CVE-2025-40101",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix memory leaks when rejecting a non SIN...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39859",
      "url": "https://patchblox.com/security/cve/CVE-2025-39859",
      "title": "ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40038",
      "url": "https://patchblox.com/security/cve/CVE-2025-40038",
      "title": "KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn\u0027t valid",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40149",
      "url": "https://patchblox.com/security/cve/CVE-2025-40149",
      "title": "tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40105",
      "url": "https://patchblox.com/security/cve/CVE-2025-40105",
      "title": "vfs: Don\u0027t leak disconnected dentries on umount",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40118",
      "url": "https://patchblox.com/security/cve/CVE-2025-40118",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40139",
      "url": "https://patchblox.com/security/cve/CVE-2025-40139",
      "title": "smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40198",
      "url": "https://patchblox.com/security/cve/CVE-2025-40198",
      "title": "ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40047",
      "url": "https://patchblox.com/security/cve/CVE-2025-40047",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40027",
      "url": "https://patchblox.com/security/cve/CVE-2025-40027",
      "title": "net/9p: fix double req put in p9_fd_cancelled",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38085",
      "url": "https://patchblox.com/security/cve/CVE-2025-38085",
      "title": "mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39917",
      "url": "https://patchblox.com/security/cve/CVE-2025-39917",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix out-of-bounds dynptr write in bpf_crypt...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40024",
      "url": "https://patchblox.com/security/cve/CVE-2025-40024",
      "title": "vhost: Take a reference on the task in struct vhost_task.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40081",
      "url": "https://patchblox.com/security/cve/CVE-2025-40081",
      "title": "perf: arm_spe: Prevent overflow in PERF_IDX2OFF()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40169",
      "url": "https://patchblox.com/security/cve/CVE-2025-40169",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40173",
      "url": "https://patchblox.com/security/cve/CVE-2025-40173",
      "title": "net/ip6_tunnel: Prevent perpetual tunnel growth",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40205",
      "url": "https://patchblox.com/security/cve/CVE-2025-40205",
      "title": "btrfs: avoid potential out-of-bounds in btrfs_encode_fh()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40206",
      "url": "https://patchblox.com/security/cve/CVE-2025-40206",
      "title": "netfilter: nft_objref: validate objref and objrefmap expressions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39944",
      "url": "https://patchblox.com/security/cve/CVE-2025-39944",
      "title": "octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40201",
      "url": "https://patchblox.com/security/cve/CVE-2025-40201",
      "title": "kernel/sys.c: fix the racy usage of task_lock(tsk-\u003Egroup_leader) in sys_prlimit64() paths",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40159",
      "url": "https://patchblox.com/security/cve/CVE-2025-40159",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40166",
      "url": "https://patchblox.com/security/cve/CVE-2025-40166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Check GuC running state before dereg...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40203",
      "url": "https://patchblox.com/security/cve/CVE-2025-40203",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  listmount: don\u0027t call path_put() under namespace...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40064",
      "url": "https://patchblox.com/security/cve/CVE-2025-40064",
      "title": "smc: Fix use-after-free in __pnet_find_base_ndev().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40111",
      "url": "https://patchblox.com/security/cve/CVE-2025-40111",
      "title": "drm/vmwgfx: Fix Use-after-free in validation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39819",
      "url": "https://patchblox.com/security/cve/CVE-2025-39819",
      "title": "fs/smb: Fix inconsistent refcnt update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40202",
      "url": "https://patchblox.com/security/cve/CVE-2025-40202",
      "title": "ipmi: Rework user message limit handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39897",
      "url": "https://patchblox.com/security/cve/CVE-2025-39897",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: xilinx: axienet: Add error handling for RX...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40180",
      "url": "https://patchblox.com/security/cve/CVE-2025-40180",
      "title": "mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40157",
      "url": "https://patchblox.com/security/cve/CVE-2025-40157",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/i10nm: Skip DIMM enumeration on a disabled...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.4,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40070",
      "url": "https://patchblox.com/security/cve/CVE-2025-40070",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pps: fix warning in pps_register_cdev when regis...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40115",
      "url": "https://patchblox.com/security/cve/CVE-2025-40115",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix crash in transport port remov...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40188",
      "url": "https://patchblox.com/security/cve/CVE-2025-40188",
      "title": "pwm: berlin: Fix wrong register in suspend/resume",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40134",
      "url": "https://patchblox.com/security/cve/CVE-2025-40134",
      "title": "kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 4.7,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40086",
      "url": "https://patchblox.com/security/cve/CVE-2025-40086",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe: Don\u0027t allow evicting of BOs in same VM i...",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40116",
      "url": "https://patchblox.com/security/cve/CVE-2025-40116",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: host: max3421-hcd: Fix error pointer derefe...",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40109",
      "url": "https://patchblox.com/security/cve/CVE-2025-40109",
      "title": "crypto: rng - Ensure set_ent is always present",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40178",
      "url": "https://patchblox.com/security/cve/CVE-2025-40178",
      "title": "pid: Add a judgment for ns null in pid_nr_ns",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40120",
      "url": "https://patchblox.com/security/cve/CVE-2025-40120",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: asix: hold PM usage ref to avoid PM/MD...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40127",
      "url": "https://patchblox.com/security/cve/CVE-2025-40127",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  hwrng: ks-sa - fix division by zero in ks_sa_rng...",
      "priority": "Routine",
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40033",
      "url": "https://patchblox.com/security/cve/CVE-2025-40033",
      "title": "remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40059",
      "url": "https://patchblox.com/security/cve/CVE-2025-40059",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  coresight: Fix incorrect handling for return val...",
      "priority": "Routine",
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40194",
      "url": "https://patchblox.com/security/cve/CVE-2025-40194",
      "title": "cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40031",
      "url": "https://patchblox.com/security/cve/CVE-2025-40031",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tee: fix register_shm_helper()  In register_shm_...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40153",
      "url": "https://patchblox.com/security/cve/CVE-2025-40153",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: hugetlb: avoid soft lockup when mprotect to...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40200",
      "url": "https://patchblox.com/security/cve/CVE-2025-40200",
      "title": "Squashfs: reject negative file sizes in squashfs_read_inode()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40132",
      "url": "https://patchblox.com/security/cve/CVE-2025-40132",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: sof_sdw: Prevent jump to NULL add_s...",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40142",
      "url": "https://patchblox.com/security/cve/CVE-2025-40142",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: pcm: Disable bottom softirqs as part of sp...",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40197",
      "url": "https://patchblox.com/security/cve/CVE-2025-40197",
      "title": "media: mc: Clear minor number before put device",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40083",
      "url": "https://patchblox.com/security/cve/CVE-2025-40083",
      "title": "net/sched: sch_qfq: Fix null-deref in agg_dequeue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40021",
      "url": "https://patchblox.com/security/cve/CVE-2025-40021",
      "title": "tracing: dynevent: Add a missing lockdown check on dynevent",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40110",
      "url": "https://patchblox.com/security/cve/CVE-2025-40110",
      "title": "drm/vmwgfx: Fix a null-ptr access in the cursor snooper",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40107",
      "url": "https://patchblox.com/security/cve/CVE-2025-40107",
      "title": "can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40207",
      "url": "https://patchblox.com/security/cve/CVE-2025-40207",
      "title": "media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40156",
      "url": "https://patchblox.com/security/cve/CVE-2025-40156",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PM / devfreq: mtk-cci: Fix potential error point...",
      "priority": "Routine",
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38321",
      "url": "https://patchblox.com/security/cve/CVE-2025-38321",
      "title": "smb: Log an error when close_all_cached_dirs fails",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40192",
      "url": "https://patchblox.com/security/cve/CVE-2025-40192",
      "title": "Revert \u0022ipmi: fix msg stack when IPMI is disconnected\u0022",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40098",
      "url": "https://patchblox.com/security/cve/CVE-2025-40098",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference...",
      "priority": "Routine",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40161",
      "url": "https://patchblox.com/security/cve/CVE-2025-40161",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mailbox: zynqmp-ipi: Fix SGI cleanup on unbind...",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40162",
      "url": "https://patchblox.com/security/cve/CVE-2025-40162",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: amd/sdw_utils: avoid NULL deref when devm_...",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40177",
      "url": "https://patchblox.com/security/cve/CVE-2025-40177",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  accel/qaic: Fix bootlog initialization ordering...",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40164",
      "url": "https://patchblox.com/security/cve/CVE-2025-40164",
      "title": "usbnet: Fix using smp_processor_id() in preemptible code warnings",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40175",
      "url": "https://patchblox.com/security/cve/CVE-2025-40175",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: cleanup remaining SKBs in PTP flows  When...",
      "priority": "Routine",
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-50253",
      "url": "https://patchblox.com/security/cve/CVE-2022-50253",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39805",
      "url": "https://patchblox.com/security/cve/CVE-2025-39805",
      "title": "net: macb: fix unregister_netdev call order in macb_remove()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39831",
      "url": "https://patchblox.com/security/cve/CVE-2025-39831",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fbnic: Move phylink resume out of service_task a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39822",
      "url": "https://patchblox.com/security/cve/CVE-2025-39822",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: fix signedness in this_len calcul...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39961",
      "url": "https://patchblox.com/security/cve/CVE-2025-39961",
      "title": "iommu/amd/pgtbl: Fix possible race while increase page table level",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T01:44:33Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}