{ "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "summary": "OPENSUSE-SU-2026:20145-1, released February 2, 2026, fixes 214 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 13 packages", "released": "2026-02-02T11:54:26Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2025-68206, rated Critical", "supported": true, "cveCount": 214, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00712, "maxCvss": 9.8, "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2026:20145-1", "appliesTo": [ { "product": "dtb-aarch64", "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-azure", "productUrl": "https://patchblox.com/security/product/linux/kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1.160000.2.6", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-kvmsmall", "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-obs-qa", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-rt", "productUrl": "https://patchblox.com/security/product/linux/kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "supported": true } ], "cves": [ { "cveId": "CVE-2025-68206", "url": "https://patchblox.com/security/cve/CVE-2025-68206", "title": "netfilter: nft_ct: add seqadj extension for natted connections", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68192", "url": "https://patchblox.com/security/cve/CVE-2025-68192", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00611, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40350", "url": "https://patchblox.com/security/cve/CVE-2025-40350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00548, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40320", "url": "https://patchblox.com/security/cve/CVE-2025-40320", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00448, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40212", "url": "https://patchblox.com/security/cve/CVE-2025-40212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsd_set_fh_dentry()...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0043, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40251", "url": "https://patchblox.com/security/cve/CVE-2025-40251", "title": "devlink: rate: Unset parent pointer in devl_rate_nodes_destroy", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40242", "url": "https://patchblox.com/security/cve/CVE-2025-40242", "title": "gfs2: Fix unlikely race in gdlm_put_lock", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40262", "url": "https://patchblox.com/security/cve/CVE-2025-40262", "title": "Input: imx_sc_key - fix memory corruption on unload", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40343", "url": "https://patchblox.com/security/cve/CVE-2025-40343", "title": "nvmet-fc: avoid scheduling association deletion twice", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40252", "url": "https://patchblox.com/security/cve/CVE-2025-40252", "title": "net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00645, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40240", "url": "https://patchblox.com/security/cve/CVE-2025-40240", "title": "sctp: avoid NULL dereference when chunk data buffer is missing", "priority": "High", "severity": "Important", "cvss": 8.6, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68284", "url": "https://patchblox.com/security/cve/CVE-2025-68284", "title": "libceph: prevent potential out-of-bounds writes in handle_auth_session_key()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00588, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68285", "url": "https://patchblox.com/security/cve/CVE-2025-68285", "title": "libceph: fix potential use-after-free in have_mon_and_osd_map()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40347", "url": "https://patchblox.com/security/cve/CVE-2025-40347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00528, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68283", "url": "https://patchblox.com/security/cve/CVE-2025-68283", "title": "libceph: replace BUG_ON with bounds check for map-\u003Emax_osd", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00528, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40337", "url": "https://patchblox.com/security/cve/CVE-2025-40337", "title": "net: stmmac: Correctly handle Rx checksum offload errors", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00516, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40258", "url": "https://patchblox.com/security/cve/CVE-2025-40258", "title": "mptcp: fix race condition in mptcp_schedule_work()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00498, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40328", "url": "https://patchblox.com/security/cve/CVE-2025-40328", "title": "smb: client: fix potential UAF in smb2_close_cached_fid()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00494, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40271", "url": "https://patchblox.com/security/cve/CVE-2025-40271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00488, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40324", "url": "https://patchblox.com/security/cve/CVE-2025-40324", "title": "NFSD: Fix crash in nfsd4_read_release()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00488, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68301", "url": "https://patchblox.com/security/cve/CVE-2025-68301", "title": "net: atlantic: fix fragment overflow handling in RX path", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40273", "url": "https://patchblox.com/security/cve/CVE-2025-40273", "title": "NFSD: free copynotify stateid in nfs4_free_ol_stateid()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00456, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68302", "url": "https://patchblox.com/security/cve/CVE-2025-68302", "title": "net: sxgbe: fix potential NULL dereference in sxgbe_rx()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40342", "url": "https://patchblox.com/security/cve/CVE-2025-40342", "title": "nvme-fc: use lock accessing port_state and rport state", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00392, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68255", "url": "https://patchblox.com/security/cve/CVE-2025-68255", "title": "staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00369, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40282", "url": "https://patchblox.com/security/cve/CVE-2025-40282", "title": "Bluetooth: 6lowpan: reset link-local header on ipv6 recv path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40318", "url": "https://patchblox.com/security/cve/CVE-2025-40318", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0029, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40301", "url": "https://patchblox.com/security/cve/CVE-2025-40301", "title": "Bluetooth: hci_event: validate skb length for unknown CC opcode", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0029, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68254", "url": "https://patchblox.com/security/cve/CVE-2025-68254", "title": "staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00276, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68256", "url": "https://patchblox.com/security/cve/CVE-2025-68256", "title": "staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40309", "url": "https://patchblox.com/security/cve/CVE-2025-40309", "title": "Bluetooth: SCO: Fix UAF on sco_conn_free", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40338", "url": "https://patchblox.com/security/cve/CVE-2025-40338", "title": "ASoC: Intel: avs: Do not share the name pointer between components", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40277", "url": "https://patchblox.com/security/cve/CVE-2025-40277", "title": "drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40329", "url": "https://patchblox.com/security/cve/CVE-2025-40329", "title": "drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40340", "url": "https://patchblox.com/security/cve/CVE-2025-40340", "title": "drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68287", "url": "https://patchblox.com/security/cve/CVE-2025-68287", "title": "usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68209", "url": "https://patchblox.com/security/cve/CVE-2025-68209", "title": "mlx5: Fix default values in create CQ", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68311", "url": "https://patchblox.com/security/cve/CVE-2025-68311", "title": "tty: serial: ip22zilog: Use platform device for probing", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40223", "url": "https://patchblox.com/security/cve/CVE-2025-40223", "title": "most: usb: Fix use-after-free in hdm_disconnect", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40256", "url": "https://patchblox.com/security/cve/CVE-2025-40256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at dest...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40294", "url": "https://patchblox.com/security/cve/CVE-2025-40294", "title": "Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40237", "url": "https://patchblox.com/security/cve/CVE-2025-40237", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40293", "url": "https://patchblox.com/security/cve/CVE-2025-40293", "title": "iommufd: Don\u0027t overflow during division for dirty tracking", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40246", "url": "https://patchblox.com/security/cve/CVE-2025-40246", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix out of bounds memory read error in syml...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40211", "url": "https://patchblox.com/security/cve/CVE-2025-40211", "title": "ACPI: video: Fix use-after-free in acpi_video_switch_brightness()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40314", "url": "https://patchblox.com/security/cve/CVE-2025-40314", "title": "usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68190", "url": "https://patchblox.com/security/cve/CVE-2025-68190", "title": "drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68290", "url": "https://patchblox.com/security/cve/CVE-2025-68290", "title": "most: usb: fix double free on late probe failure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40331", "url": "https://patchblox.com/security/cve/CVE-2025-40331", "title": "sctp: Prevent TOCTOU out-of-bounds write", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40160", "url": "https://patchblox.com/security/cve/CVE-2025-40160", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Chan...", "priority": "High", "severity": "important", "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40357", "url": "https://patchblox.com/security/cve/CVE-2025-40357", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_d...", "priority": "High", "severity": "important", "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68180", "url": "https://patchblox.com/security/cve/CVE-2025-68180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odm_c...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68759", "url": "https://patchblox.com/security/cve/CVE-2025-68759", "title": "wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40345", "url": "https://patchblox.com/security/cve/CVE-2025-40345", "title": "usb: storage: sddr55: Reject out-of-bound new_pba", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68202", "url": "https://patchblox.com/security/cve/CVE-2025-68202", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_st...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68210", "url": "https://patchblox.com/security/cve/CVE-2025-68210", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zst...", "priority": "High", "severity": "important", "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40170", "url": "https://patchblox.com/security/cve/CVE-2025-40170", "title": "net: use dst_dev_rcu() in sk_setup_caps()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40213", "url": "https://patchblox.com/security/cve/CVE-2025-40213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40344", "url": "https://patchblox.com/security/cve/CVE-2025-40344", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work w...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68766", "url": "https://patchblox.com/security/cve/CVE-2025-68766", "title": "irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68307", "url": "https://patchblox.com/security/cve/CVE-2025-68307", "title": "can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40214", "url": "https://patchblox.com/security/cve/CVE-2025-40214", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68327", "url": "https://patchblox.com/security/cve/CVE-2025-68327", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Fix synchronous external abo...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68330", "url": "https://patchblox.com/security/cve/CVE-2025-68330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regressio...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40269", "url": "https://patchblox.com/security/cve/CVE-2025-40269", "title": "ALSA: usb-audio: Fix potential overflow of PCM transfer buffer", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38704", "url": "https://patchblox.com/security/cve/CVE-2025-38704", "title": "rcu/nocb: Fix possible invalid rdp\u0027s-\u003Enocb_cb_kthread pointer access", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68305", "url": "https://patchblox.com/security/cve/CVE-2025-68305", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68237", "url": "https://patchblox.com/security/cve/CVE-2025-68237", "title": "mtdchar: fix integer overflow in read/write ioctls", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68235", "url": "https://patchblox.com/security/cve/CVE-2025-68235", "title": "nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40292", "url": "https://patchblox.com/security/cve/CVE-2025-40292", "title": "virtio-net: fix received length check in big packets", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40190", "url": "https://patchblox.com/security/cve/CVE-2025-40190", "title": "ext4: guard against EA inode refcount underflow in xattr update", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68347", "url": "https://patchblox.com/security/cve/CVE-2025-68347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwde...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68753", "url": "https://patchblox.com/security/cve/CVE-2025-68753", "title": "ALSA: firewire-motu: add bounds check in put_user loop for DSP events", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40250", "url": "https://patchblox.com/security/cve/CVE-2025-40250", "title": "net/mlx5: Clean up only new IRQ glue on request_irq() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40297", "url": "https://patchblox.com/security/cve/CVE-2025-40297", "title": "net: bridge: fix use-after-free due to MST port state bypass", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40248", "url": "https://patchblox.com/security/cve/CVE-2025-40248", "title": "vsock: Ignore signal/timeout on connect() if already established", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40123", "url": "https://patchblox.com/security/cve/CVE-2025-40123", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40233", "url": "https://patchblox.com/security/cve/CVE-2025-40233", "title": "ocfs2: clear extent cache after moving/defragmenting extents", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40167", "url": "https://patchblox.com/security/cve/CVE-2025-40167", "title": "ext4: detect invalid INLINE_DATA \u002B EXTENTS flag combination", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40362", "url": "https://patchblox.com/security/cve/CVE-2025-40362", "title": "ceph: fix multifs mds auth caps issue", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40266", "url": "https://patchblox.com/security/cve/CVE-2025-40266", "title": "KVM: arm64: Check the untrusted offset in FF-A memory share", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40280", "url": "https://patchblox.com/security/cve/CVE-2025-40280", "title": "tipc: Fix use-after-free in tipc_mon_reinit_self().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40307", "url": "https://patchblox.com/security/cve/CVE-2025-40307", "title": "exfat: validate cluster allocation bits of the allocation bitmap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68286", "url": "https://patchblox.com/security/cve/CVE-2025-68286", "title": "drm/amd/display: Check NULL before accessing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39977", "url": "https://patchblox.com/security/cve/CVE-2025-39977", "title": "futex: Prevent use-after-free during requeue-PI", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40215", "url": "https://patchblox.com/security/cve/CVE-2025-40215", "title": "xfrm: delete x-\u003Etunnel as we delete x", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40304", "url": "https://patchblox.com/security/cve/CVE-2025-40304", "title": "fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40317", "url": "https://patchblox.com/security/cve/CVE-2025-40317", "title": "regmap: slimbus: fix bus_context pointer in regmap init calls", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40319", "url": "https://patchblox.com/security/cve/CVE-2025-40319", "title": "bpf: Sync pending IRQ work before freeing ring buffer", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68171", "url": "https://patchblox.com/security/cve/CVE-2025-68171", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68183", "url": "https://patchblox.com/security/cve/CVE-2025-68183", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ima: don\u0027t clear IMA_DIGSIG flag when setting or...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68208", "url": "https://patchblox.com/security/cve/CVE-2025-68208", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40322", "url": "https://patchblox.com/security/cve/CVE-2025-40322", "title": "fbdev: bitblit: bound-check glyph index in bit_putcs*", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68352", "url": "https://patchblox.com/security/cve/CVE-2025-68352", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40272", "url": "https://patchblox.com/security/cve/CVE-2025-40272", "title": "mm/secretmem: fix use-after-free race in fault handler", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40283", "url": "https://patchblox.com/security/cve/CVE-2025-40283", "title": "Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40354", "url": "https://patchblox.com/security/cve/CVE-2025-40354", "title": "drm/amd/display: increase max link count and fix link-\u003Eenc NULL pointer access", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68167", "url": "https://patchblox.com/security/cve/CVE-2025-68167", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68170", "url": "https://patchblox.com/security/cve/CVE-2025-68170", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68207", "url": "https://patchblox.com/security/cve/CVE-2025-68207", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40302", "url": "https://patchblox.com/security/cve/CVE-2025-40302", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40323", "url": "https://patchblox.com/security/cve/CVE-2025-40323", "title": "fbcon: Set fb_display[i]-\u003Emode to NULL when the mode is released", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68184", "url": "https://patchblox.com/security/cve/CVE-2025-68184", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek D...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68340", "url": "https://patchblox.com/security/cve/CVE-2025-68340", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: team: Move team device type change at the end of...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40276", "url": "https://patchblox.com/security/cve/CVE-2025-40276", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping b...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40274", "url": "https://patchblox.com/security/cve/CVE-2025-40274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40284", "url": "https://patchblox.com/security/cve/CVE-2025-40284", "title": "Bluetooth: MGMT: cancel mesh send timer when hdev removed", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40303", "url": "https://patchblox.com/security/cve/CVE-2025-40303", "title": "btrfs: ensure no dirty metadata is written back for an fs with errors", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68181", "url": "https://patchblox.com/security/cve/CVE-2025-68181", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68736", "url": "https://patchblox.com/security/cve/CVE-2025-68736", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directori...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68303", "url": "https://patchblox.com/security/cve/CVE-2025-68303", "title": "platform/x86: intel: punit_ipc: fix memory corruption", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68746", "url": "https://patchblox.com/security/cve/CVE-2025-68746", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When t...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68747", "url": "https://patchblox.com/security/cve/CVE-2025-68747", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If t...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68748", "url": "https://patchblox.com/security/cve/CVE-2025-68748", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68215", "url": "https://patchblox.com/security/cve/CVE-2025-68215", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68724", "url": "https://patchblox.com/security/cve/CVE-2025-68724", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68317", "url": "https://patchblox.com/security/cve/CVE-2025-68317", "title": "io_uring/zctx: check chained notif contexts", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68313", "url": "https://patchblox.com/security/cve/CVE-2025-68313", "title": "x86/CPU/AMD: Add RDSEED fix for Zen5", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71096", "url": "https://patchblox.com/security/cve/CVE-2025-71096", "title": "RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40225", "url": "https://patchblox.com/security/cve/CVE-2025-40225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix kernel panic on partial unmap o...", "priority": "Routine", "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40254", "url": "https://patchblox.com/security/cve/CVE-2025-40254", "title": "net: openvswitch: remove never-working support for setting nsh fields", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40339", "url": "https://patchblox.com/security/cve/CVE-2025-40339", "title": "drm/amdgpu: fix nullptr err of vm_handle_moved", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40219", "url": "https://patchblox.com/security/cve/CVE-2025-40219", "title": "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.0024, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40130", "url": "https://patchblox.com/security/cve/CVE-2025-40130", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM...", "priority": "Routine", "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40289", "url": "https://patchblox.com/security/cve/CVE-2025-40289", "title": "drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40332", "url": "https://patchblox.com/security/cve/CVE-2025-40332", "title": "drm/amdkfd: Fix mmap write lock not release", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68346", "url": "https://patchblox.com/security/cve/CVE-2025-68346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.8, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40264", "url": "https://patchblox.com/security/cve/CVE-2025-40264", "title": "be2net: pass wrb_params in case of OS2BMC", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40278", "url": "https://patchblox.com/security/cve/CVE-2025-40278", "title": "net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40330", "url": "https://patchblox.com/security/cve/CVE-2025-40330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Shutdown FW DMA in bnxt_shutdown() The...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.2, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68345", "url": "https://patchblox.com/security/cve/CVE-2025-68345", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference...", "priority": "Routine", "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40042", "url": "https://patchblox.com/security/cve/CVE-2025-40042", "title": "tracing: Fix race condition in kprobe initialization causing NULL pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68264", "url": "https://patchblox.com/security/cve/CVE-2025-68264", "title": "ext4: refresh inline data size before write operations", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68201", "url": "https://patchblox.com/security/cve/CVE-2025-68201", "title": "drm/amdgpu: remove two invalid BUG_ON()s", "priority": "Routine", "severity": "Low", "cvss": 4, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40179", "url": "https://patchblox.com/security/cve/CVE-2025-40179", "title": "ext4: verify orphan file size is not too big", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40231", "url": "https://patchblox.com/security/cve/CVE-2025-40231", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transp...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40355", "url": "https://patchblox.com/security/cve/CVE-2025-40355", "title": "sysfs: check visibility before changing group attribute ownership", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68353", "url": "https://patchblox.com/security/cve/CVE-2025-68353", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one...", "priority": "Routine", "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68378", "url": "https://patchblox.com/security/cve/CVE-2025-68378", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_st...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68217", "url": "https://patchblox.com/security/cve/CVE-2025-68217", "title": "Input: pegasus-notetaker - fix potential out-of-bounds access", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40321", "url": "https://patchblox.com/security/cve/CVE-2025-40321", "title": "wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40315", "url": "https://patchblox.com/security/cve/CVE-2025-40315", "title": "usb: gadget: f_fs: Fix epfile null pointer access after ep enable.", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40226", "url": "https://patchblox.com/security/cve/CVE-2025-40226", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Account for failed debug ini...", "priority": "Routine", "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68230", "url": "https://patchblox.com/security/cve/CVE-2025-68230", "title": "drm/amdgpu: fix gpu page fault after hibernation on PF passthrough", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40239", "url": "https://patchblox.com/security/cve/CVE-2025-40239", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared-\u003Ephydev for...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40238", "url": "https://patchblox.com/security/cve/CVE-2025-40238", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device Whe...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68362", "url": "https://patchblox.com/security/cve/CVE-2025-68362", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer und...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68742", "url": "https://patchblox.com/security/cve/CVE-2025-68742", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-\u003Estats access when update_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68354", "url": "https://patchblox.com/security/cve/CVE-2025-68354", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68363", "url": "https://patchblox.com/security/cve/CVE-2025-68363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb-\u003Etransport_header is set in bpf_s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68344", "url": "https://patchblox.com/security/cve/CVE-2025-68344", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample...", "priority": "Routine", "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40279", "url": "https://patchblox.com/security/cve/CVE-2025-40279", "title": "net: sched: act_connmark: initialize struct tc_ife to fix kernel leak", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40235", "url": "https://patchblox.com/security/cve/CVE-2025-40235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fs_in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40275", "url": "https://patchblox.com/security/cve/CVE-2025-40275", "title": "ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40308", "url": "https://patchblox.com/security/cve/CVE-2025-40308", "title": "Bluetooth: bcsp: receive data only if registered", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68185", "url": "https://patchblox.com/security/cve/CVE-2025-68185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for -...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68194", "url": "https://patchblox.com/security/cve/CVE-2025-68194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syz...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68331", "url": "https://patchblox.com/security/cve/CVE-2025-68331", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas d...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68222", "url": "https://patchblox.com/security/cve/CVE-2025-68222", "title": "pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40346", "url": "https://patchblox.com/security/cve/CVE-2025-40346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topo...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40360", "url": "https://patchblox.com/security/cve/CVE-2025-40360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in pl...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68740", "url": "https://patchblox.com/security/cve/CVE-2025-68740", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by ima_filter_ru...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68176", "url": "https://patchblox.com/security/cve/CVE-2025-68176", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pc...", "priority": "Routine", "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40220", "url": "https://patchblox.com/security/cve/CVE-2025-40220", "title": "fuse: fix livelock in synchronous file put from fuseblk workers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40263", "url": "https://patchblox.com/security/cve/CVE-2025-40263", "title": "Input: cros_ec_keyb - fix an invalid memory access", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68213", "url": "https://patchblox.com/security/cve/CVE-2025-68213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vport_config NULL pointer der...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68293", "url": "https://patchblox.com/security/cve/CVE-2025-68293", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68289", "url": "https://patchblox.com/security/cve/CVE-2025-68289", "title": "usb: gadget: f_eem: Fix memory leak in eem_unwrap", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40316", "url": "https://patchblox.com/security/cve/CVE-2025-40316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix device use-after-free on unbin...", "priority": "Routine", "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68380", "url": "https://patchblox.com/security/cve/CVE-2025-68380", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS assignment In ath...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40268", "url": "https://patchblox.com/security/cve/CVE-2025-40268", "title": "cifs: client: fix memory leak in smb3_fs_context_parse_param", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40218", "url": "https://patchblox.com/security/cve/CVE-2025-40218", "title": "mm/damon/vaddr: do not repeat pte_offset_map_lock() until success", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68172", "url": "https://patchblox.com/security/cve/CVE-2025-68172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm...", "priority": "Routine", "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40255", "url": "https://patchblox.com/security/cve/CVE-2025-40255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: core: prevent NULL deref in generic_hwtstam...", "priority": "Routine", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40287", "url": "https://patchblox.com/security/cve/CVE-2025-40287", "title": "exfat: fix improper check of dentry.stream.valid_size", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40310", "url": "https://patchblox.com/security/cve/CVE-2025-40310", "title": "amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40311", "url": "https://patchblox.com/security/cve/CVE-2025-40311", "title": "accel/habanalabs: support mapping cb with vmalloc-backed coherent memory", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40359", "url": "https://patchblox.com/security/cve/CVE-2025-40359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds w...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68198", "url": "https://patchblox.com/security/cve/CVE-2025-68198", "title": "crash: fix crashkernel resource shrink", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40288", "url": "https://patchblox.com/security/cve/CVE-2025-40288", "title": "drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40353", "url": "https://patchblox.com/security/cve/CVE-2025-40353", "title": "arm64: mte: Do not warn if the page is already tagged in copy_highpage()", "priority": "Routine", "severity": "Low", "cvss": 4, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68757", "url": "https://patchblox.com/security/cve/CVE-2025-68757", "title": "drm/vgem-fence: Fix potential deadlock on release", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68758", "url": "https://patchblox.com/security/cve/CVE-2025-68758", "title": "backlight: led-bl: Add devlink to supplier LEDs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68239", "url": "https://patchblox.com/security/cve/CVE-2025-68239", "title": "binfmt_misc: restore write access before closing files opened by open_exec()", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68257", "url": "https://patchblox.com/security/cve/CVE-2025-68257", "title": "comedi: check device\u0027s attached status in compat ioctls", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68258", "url": "https://patchblox.com/security/cve/CVE-2025-68258", "title": "comedi: multiq3: sanitize config options in multiq3_attach()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40209", "url": "https://patchblox.com/security/cve/CVE-2025-40209", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40221", "url": "https://patchblox.com/security/cve/CVE-2025-40221", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan dat...", "priority": "Routine", "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68332", "url": "https://patchblox.com/security/cve/CVE-2025-68332", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: comedi: c6xdigio: Fix invalid PNP driver unregis...", "priority": "Routine", "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68750", "url": "https://patchblox.com/security/cve/CVE-2025-68750", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg...", "priority": "Routine", "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68312", "url": "https://patchblox.com/security/cve/CVE-2025-68312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68259", "url": "https://patchblox.com/security/cve/CVE-2025-68259", "title": "KVM: SVM: Don\u0027t skip unrelated instruction if INT3/INTO is replaced", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68732", "url": "https://patchblox.com/security/cve/CVE-2025-68732", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68765", "url": "https://patchblox.com/security/cve/CVE-2025-68765", "title": "mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68335", "url": "https://patchblox.com/security/cve/CVE-2025-68335", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: comedi: pcl818: fix null-ptr-deref in pcl818_ai_...", "priority": "Routine", "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68306", "url": "https://patchblox.com/security/cve/CVE-2025-68306", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash whe...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68308", "url": "https://patchblox.com/security/cve/CVE-2025-68308", "title": "can: kvaser_usb: leaf: Fix potential infinite loop in command parsers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68244", "url": "https://patchblox.com/security/cve/CVE-2025-68244", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to G...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68238", "url": "https://patchblox.com/security/cve/CVE-2025-68238", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL point...", "priority": "Routine", "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68249", "url": "https://patchblox.com/security/cve/CVE-2025-68249", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: most: usb: hdm_probe: Fix calling put_device() b...", "priority": "Routine", "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68328", "url": "https://patchblox.com/security/cve/CVE-2025-68328", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving contr...", "priority": "Routine", "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68339", "url": "https://patchblox.com/security/cve/CVE-2025-68339", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: atm/fore200e: Fix possible data race in fore200e...", "priority": "Routine", "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68744", "url": "https://patchblox.com/security/cve/CVE-2025-68744", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]perc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68233", "url": "https://patchblox.com/security/cve/CVE-2025-68233", "title": "drm/tegra: Add call to put_pid()", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68342", "url": "https://patchblox.com/security/cve/CVE-2025-68342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): che...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68343", "url": "https://patchblox.com/security/cve/CVE-2025-68343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): che...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68252", "url": "https://patchblox.com/security/cve/CVE-2025-68252", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68197", "url": "https://patchblox.com/security/cve/CVE-2025-68197", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix null pointer dereference in bnxt_bs...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68298", "url": "https://patchblox.com/security/cve/CVE-2025-68298", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_clai...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68242", "url": "https://patchblox.com/security/cve/CVE-2025-68242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are d...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68351", "url": "https://patchblox.com/security/cve/CVE-2025-68351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refc...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68223", "url": "https://patchblox.com/security/cve/CVE-2025-68223", "title": "drm/radeon: delete radeon_fence_process in is_signaled, no deadlock", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68749", "url": "https://patchblox.com/security/cve/CVE-2025-68749", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BO...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68195", "url": "https://patchblox.com/security/cve/CVE-2025-68195", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T07:50:38Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }