# OPENSUSE-SU-2025:20172-1: Security update for 12 packages

OPENSUSE-SU-2025:20172-1, released December 19, 2025, fixes 100 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2025-20172-1
- Platform: Linux
- Released: Dec 19, 2025
- Priority: Urgent (Closes CVE-2025-40172, rated Critical)
- CVEs: 100, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2025:20172-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1.160000.2.5 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.8.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40172](https://patchblox.com/security/data/cve/CVE-2025-40172.md) | Urgent | accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() | 9.8 | 0.0015 |  |
| [CVE-2025-40165](https://patchblox.com/security/data/cve/CVE-2025-40165.md) | Urgent | media: nxp: imx8-isi: m2m: Fix streaming cleanup on release | 9.8 | 0.0015 |  |
| [CVE-2025-40135](https://patchblox.com/security/data/cve/CVE-2025-40135.md) | High | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 |  |
| [CVE-2025-40187](https://patchblox.com/security/data/cve/CVE-2025-40187.md) | High | net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | 7.5 | 0.0064 |  |
| [CVE-2025-40053](https://patchblox.com/security/data/cve/CVE-2025-40053.md) | High | net: dlink: handle copy_thresh allocation failure | 7.5 | 0.0063 |  |
| [CVE-2025-40183](https://patchblox.com/security/data/cve/CVE-2025-40183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_... | 7.5 | 0.0063 |  |
| [CVE-2025-40186](https://patchblox.com/security/data/cve/CVE-2025-40186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don't call reqsk_fastopen_remove() in tcp_c... | 8.1 | 0.0059 |  |
| [CVE-2025-40129](https://patchblox.com/security/data/cve/CVE-2025-40129.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len... | 7.5 | 0.0057 |  |
| [CVE-2025-40158](https://patchblox.com/security/data/cve/CVE-2025-40158.md) | High | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 |  |
| [CVE-2025-40133](https://patchblox.com/security/data/cve/CVE-2025-40133.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: Use __sk_dst_get() and dst_dev_rcu() in m... | 8.1 | 0.0051 |  |
| [CVE-2025-40075](https://patchblox.com/security/data/cve/CVE-2025-40075.md) | High | tcp_metrics: use dst_dev_net_rcu() | 8.1 | 0.0049 |  |
| [CVE-2025-40176](https://patchblox.com/security/data/cve/CVE-2025-40176.md) | High | tls: wait for pending async decryptions if tls_strp_msg_hold fails | 9.8 | 0.0049 |  |
| [CVE-2025-40171](https://patchblox.com/security/data/cve/CVE-2025-40171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_... | 7.5 | 0.0048 |  |
| [CVE-2025-40204](https://patchblox.com/security/data/cve/CVE-2025-40204.md) | High | sctp: Fix MAC comparison to be constant-time | 8.1 | 0.0047 |  |
| [CVE-2025-40074](https://patchblox.com/security/data/cve/CVE-2025-40074.md) | High | ipv4: start using dst_dev_rcu() | 9.8 | 0.0046 |  |
| [CVE-2025-40168](https://patchblox.com/security/data/cve/CVE-2025-40168.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). | 8.1 | 0.0042 |  |
| [CVE-2025-38728](https://patchblox.com/security/data/cve/CVE-2025-38728.md) | High | smb3: fix for slab out of bounds on mount to ksmbd | 7.1 | 0.0036 |  |
| [CVE-2025-40141](https://patchblox.com/security/data/cve/CVE-2025-40141.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre... | 8.0 | 0.0032 |  |
| [CVE-2025-40140](https://patchblox.com/security/data/cve/CVE-2025-40140.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in... | 8.8 | 0.0032 |  |
| [CVE-2025-40001](https://patchblox.com/security/data/cve/CVE-2025-40001.md) | High | scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | 7.8 | 0.0026 |  |
| [CVE-2025-40003](https://patchblox.com/security/data/cve/CVE-2025-40003.md) | High | net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work | 7.8 | 0.0026 |  |
| [CVE-2025-39980](https://patchblox.com/security/data/cve/CVE-2025-39980.md) | High | nexthop: Forbid FDB status change while nexthop is in a group | 7.1 | 0.0023 |  |
| [CVE-2025-37916](https://patchblox.com/security/data/cve/CVE-2025-37916.md) | High | pds_core: remove write-after-free of client_id | 7.8 | 0.0023 |  |
| [CVE-2025-40121](https://patchblox.com/security/data/cve/CVE-2025-40121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: bytcr_rt5651: Fix invalid quirk inp... | 7.0 | 0.0023 |  |
| [CVE-2025-40055](https://patchblox.com/security/data/cve/CVE-2025-40055.md) | High | ocfs2: fix double free in user_cluster_connect() | 7.8 | 0.0023 |  |
| [CVE-2025-40102](https://patchblox.com/security/data/cve/CVE-2025-40102.md) | High | KVM: arm64: Prevent access to vCPU events before init | 7.1 | 0.0022 |  |
| [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 |  |
| [CVE-2025-40185](https://patchblox.com/security/data/cve/CVE-2025-40185.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 7.8 | 0.0021 |  |
| [CVE-2025-40154](https://patchblox.com/security/data/cve/CVE-2025-40154.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 7.8 | 0.0021 |  |
| [CVE-2025-40006](https://patchblox.com/security/data/cve/CVE-2025-40006.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix folio is still mapped when delet... | 7.8 | 0.0021 |  |
| [CVE-2025-40196](https://patchblox.com/security/data/cve/CVE-2025-40196.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs: quota: create dedicated workqueue for quota_... | n/a | 0.0021 |  |
| [CVE-2025-39990](https://patchblox.com/security/data/cve/CVE-2025-39990.md) | High | bpf: Check the helper function is valid in get_helper_proto | 7.8 | 0.0020 |  |
| [CVE-2025-40101](https://patchblox.com/security/data/cve/CVE-2025-40101.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix memory leaks when rejecting a non SIN... | n/a | 0.0020 |  |
| [CVE-2025-39859](https://patchblox.com/security/data/cve/CVE-2025-39859.md) | High | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 7.8 | 0.0020 |  |
| [CVE-2025-40038](https://patchblox.com/security/data/cve/CVE-2025-40038.md) | High | KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid | 7.1 | 0.0018 |  |
| [CVE-2025-40149](https://patchblox.com/security/data/cve/CVE-2025-40149.md) | High | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). | 8.8 | 0.0017 |  |
| [CVE-2025-40105](https://patchblox.com/security/data/cve/CVE-2025-40105.md) | High | vfs: Don't leak disconnected dentries on umount | 7.8 | 0.0017 |  |
| [CVE-2025-40118](https://patchblox.com/security/data/cve/CVE-2025-40118.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o... | 7.8 | 0.0017 |  |
| [CVE-2025-40139](https://patchblox.com/security/data/cve/CVE-2025-40139.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). | 8.4 | 0.0017 |  |
| [CVE-2025-40198](https://patchblox.com/security/data/cve/CVE-2025-40198.md) | High | ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() | 7.8 | 0.0017 |  |
| [CVE-2025-40047](https://patchblox.com/security/data/cve/CVE-2025-40047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 |  |
| [CVE-2025-40027](https://patchblox.com/security/data/cve/CVE-2025-40027.md) | High | net/9p: fix double req put in p9_fd_cancelled | 7.8 | 0.0016 |  |
| [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 |  |
| [CVE-2025-39917](https://patchblox.com/security/data/cve/CVE-2025-39917.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix out-of-bounds dynptr write in bpf_crypt... | 7.8 | 0.0015 |  |
| [CVE-2025-40024](https://patchblox.com/security/data/cve/CVE-2025-40024.md) | High | vhost: Take a reference on the task in struct vhost_task. | 7.8 | 0.0015 |  |
| [CVE-2025-40081](https://patchblox.com/security/data/cve/CVE-2025-40081.md) | High | perf: arm_spe: Prevent overflow in PERF_IDX2OFF() | 7.8 | 0.0015 |  |
| [CVE-2025-40169](https://patchblox.com/security/data/cve/CVE-2025-40169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v... | 7.8 | 0.0015 |  |
| [CVE-2025-40173](https://patchblox.com/security/data/cve/CVE-2025-40173.md) | High | net/ip6_tunnel: Prevent perpetual tunnel growth | 7.8 | 0.0015 |  |
| [CVE-2025-40205](https://patchblox.com/security/data/cve/CVE-2025-40205.md) | High | btrfs: avoid potential out-of-bounds in btrfs_encode_fh() | 7.8 | 0.0015 |  |
| [CVE-2025-40206](https://patchblox.com/security/data/cve/CVE-2025-40206.md) | High | netfilter: nft_objref: validate objref and objrefmap expressions | 7.8 | 0.0015 |  |
| [CVE-2025-39944](https://patchblox.com/security/data/cve/CVE-2025-39944.md) | High | octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() | 7.8 | 0.0015 |  |
| [CVE-2025-40201](https://patchblox.com/security/data/cve/CVE-2025-40201.md) | High | kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths | 7.8 | 0.0015 |  |
| [CVE-2025-40159](https://patchblox.com/security/data/cve/CVE-2025-40159.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati... | 7.8 | 0.0015 |  |
| [CVE-2025-40166](https://patchblox.com/security/data/cve/CVE-2025-40166.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Check GuC running state before dereg... | 7.8 | 0.0015 |  |
| [CVE-2025-40203](https://patchblox.com/security/data/cve/CVE-2025-40203.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  listmount: don't call path_put() under namespace... | 7.8 | 0.0015 |  |
| [CVE-2025-40064](https://patchblox.com/security/data/cve/CVE-2025-40064.md) | High | smc: Fix use-after-free in __pnet_find_base_ndev(). | 8.8 | 0.0015 |  |
| [CVE-2025-40111](https://patchblox.com/security/data/cve/CVE-2025-40111.md) | High | drm/vmwgfx: Fix Use-after-free in validation | 7.8 | 0.0015 |  |
| [CVE-2025-39819](https://patchblox.com/security/data/cve/CVE-2025-39819.md) | High | fs/smb: Fix inconsistent refcnt update | 7.6 | 0.0015 |  |
| [CVE-2025-40202](https://patchblox.com/security/data/cve/CVE-2025-40202.md) | High | ipmi: Rework user message limit handling | 7.8 | 0.0015 |  |
| [CVE-2025-39897](https://patchblox.com/security/data/cve/CVE-2025-39897.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: xilinx: axienet: Add error handling for RX... | 5.5 | 0.0028 |  |
| [CVE-2025-40180](https://patchblox.com/security/data/cve/CVE-2025-40180.md) | Routine | mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop | 5.5 | 0.0025 |  |
| [CVE-2025-40157](https://patchblox.com/security/data/cve/CVE-2025-40157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/i10nm: Skip DIMM enumeration on a disabled... | 4.4 | 0.0025 |  |
| [CVE-2025-40070](https://patchblox.com/security/data/cve/CVE-2025-40070.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pps: fix warning in pps_register_cdev when regis... | 5.5 | 0.0024 |  |
| [CVE-2025-40115](https://patchblox.com/security/data/cve/CVE-2025-40115.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix crash in transport port remov... | 5.5 | 0.0023 |  |
| [CVE-2025-40188](https://patchblox.com/security/data/cve/CVE-2025-40188.md) | Routine | pwm: berlin: Fix wrong register in suspend/resume | 5.5 | 0.0023 |  |
| [CVE-2025-40134](https://patchblox.com/security/data/cve/CVE-2025-40134.md) | Routine | kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 4.7 | 0.0023 |  |
| [CVE-2025-40086](https://patchblox.com/security/data/cve/CVE-2025-40086.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe: Don't allow evicting of BOs in same VM i... | n/a | 0.0023 |  |
| [CVE-2025-40116](https://patchblox.com/security/data/cve/CVE-2025-40116.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: host: max3421-hcd: Fix error pointer derefe... | n/a | 0.0023 |  |
| [CVE-2025-40109](https://patchblox.com/security/data/cve/CVE-2025-40109.md) | Routine | crypto: rng - Ensure set_ent is always present | 5.5 | 0.0023 |  |
| [CVE-2025-40178](https://patchblox.com/security/data/cve/CVE-2025-40178.md) | Routine | pid: Add a judgment for ns null in pid_nr_ns | 5.5 | 0.0023 |  |
| [CVE-2025-40120](https://patchblox.com/security/data/cve/CVE-2025-40120.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: asix: hold PM usage ref to avoid PM/MD... | 4.7 | 0.0022 |  |
| [CVE-2025-40127](https://patchblox.com/security/data/cve/CVE-2025-40127.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  hwrng: ks-sa - fix division by zero in ks_sa_rng... | n/a | 0.0022 |  |
| [CVE-2025-40033](https://patchblox.com/security/data/cve/CVE-2025-40033.md) | Routine | remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() | 5.5 | 0.0021 |  |
| [CVE-2025-40059](https://patchblox.com/security/data/cve/CVE-2025-40059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  coresight: Fix incorrect handling for return val... | n/a | 0.0021 |  |
| [CVE-2025-40194](https://patchblox.com/security/data/cve/CVE-2025-40194.md) | Routine | cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() | 5.8 | 0.0021 |  |
| [CVE-2025-40031](https://patchblox.com/security/data/cve/CVE-2025-40031.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tee: fix register_shm_helper()  In register_shm_... | 5.5 | 0.0021 |  |
| [CVE-2025-40153](https://patchblox.com/security/data/cve/CVE-2025-40153.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm: hugetlb: avoid soft lockup when mprotect to... | 5.5 | 0.0021 |  |
| [CVE-2025-40200](https://patchblox.com/security/data/cve/CVE-2025-40200.md) | Routine | Squashfs: reject negative file sizes in squashfs_read_inode() | 5.5 | 0.0021 |  |
| [CVE-2025-40132](https://patchblox.com/security/data/cve/CVE-2025-40132.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: sof_sdw: Prevent jump to NULL add_s... | n/a | 0.0021 |  |
| [CVE-2025-40142](https://patchblox.com/security/data/cve/CVE-2025-40142.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: pcm: Disable bottom softirqs as part of sp... | n/a | 0.0021 |  |
| [CVE-2025-40197](https://patchblox.com/security/data/cve/CVE-2025-40197.md) | Routine | media: mc: Clear minor number before put device | 5.5 | 0.0021 |  |
| [CVE-2025-40083](https://patchblox.com/security/data/cve/CVE-2025-40083.md) | Routine | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 5.9 | 0.0021 |  |
| [CVE-2025-40021](https://patchblox.com/security/data/cve/CVE-2025-40021.md) | Routine | tracing: dynevent: Add a missing lockdown check on dynevent | 5.5 | 0.0021 |  |
| [CVE-2025-40110](https://patchblox.com/security/data/cve/CVE-2025-40110.md) | Routine | drm/vmwgfx: Fix a null-ptr access in the cursor snooper | 4.7 | 0.0021 |  |
| [CVE-2025-40107](https://patchblox.com/security/data/cve/CVE-2025-40107.md) | Routine | can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled | 5.5 | 0.0020 |  |
| [CVE-2025-40207](https://patchblox.com/security/data/cve/CVE-2025-40207.md) | Routine | media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() | 5.5 | 0.0020 |  |
| [CVE-2025-40156](https://patchblox.com/security/data/cve/CVE-2025-40156.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  PM / devfreq: mtk-cci: Fix potential error point... | n/a | 0.0020 |  |
| [CVE-2025-38321](https://patchblox.com/security/data/cve/CVE-2025-38321.md) | Routine | smb: Log an error when close_all_cached_dirs fails | 5.5 | 0.0020 |  |
| [CVE-2025-40192](https://patchblox.com/security/data/cve/CVE-2025-40192.md) | Routine | Revert "ipmi: fix msg stack when IPMI is disconnected" | 5.5 | 0.0020 |  |
| [CVE-2025-40098](https://patchblox.com/security/data/cve/CVE-2025-40098.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference... | n/a | 0.0020 |  |
| [CVE-2025-40161](https://patchblox.com/security/data/cve/CVE-2025-40161.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mailbox: zynqmp-ipi: Fix SGI cleanup on unbind... | n/a | 0.0020 |  |
| [CVE-2025-40162](https://patchblox.com/security/data/cve/CVE-2025-40162.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: amd/sdw_utils: avoid NULL deref when devm_... | n/a | 0.0020 |  |
| [CVE-2025-40177](https://patchblox.com/security/data/cve/CVE-2025-40177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  accel/qaic: Fix bootlog initialization ordering... | n/a | 0.0020 |  |
| [CVE-2025-40164](https://patchblox.com/security/data/cve/CVE-2025-40164.md) | Routine | usbnet: Fix using smp_processor_id() in preemptible code warnings | 5.5 | 0.0019 |  |
| [CVE-2025-40175](https://patchblox.com/security/data/cve/CVE-2025-40175.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: cleanup remaining SKBs in PTP flows  When... | n/a | 0.0019 |  |
| [CVE-2022-50253](https://patchblox.com/security/data/cve/CVE-2022-50253.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 5.5 | 0.0016 |  |
| [CVE-2025-39805](https://patchblox.com/security/data/cve/CVE-2025-39805.md) | Routine | net: macb: fix unregister_netdev call order in macb_remove() | 5.5 | 0.0016 |  |
| [CVE-2025-39831](https://patchblox.com/security/data/cve/CVE-2025-39831.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fbnic: Move phylink resume out of service_task a... | 5.5 | 0.0015 |  |
| [CVE-2025-39822](https://patchblox.com/security/data/cve/CVE-2025-39822.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: fix signedness in this_len calcul... | 5.5 | 0.0013 |  |
| [CVE-2025-39961](https://patchblox.com/security/data/cve/CVE-2025-39961.md) | Routine | iommu/amd/pgtbl: Fix possible race while increase page table level | 5.8 | 0.0012 |  |

---

Data as of 2026-11-10T01:44:33Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.