# OPENSUSE-SU-2026:20145-1: Security update for 13 packages

OPENSUSE-SU-2026:20145-1, released February 2, 2026, fixes 214 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1
- Platform: Linux
- Released: Feb 2, 2026
- Priority: Urgent (Closes CVE-2025-68206, rated Critical)
- CVEs: 214, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:20145-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1.160000.2.6 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.9.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-68206](https://patchblox.com/security/data/cve/CVE-2025-68206.md) | Urgent | netfilter: nft_ct: add seqadj extension for natted connections | 9.1 | 0.0071 |  |
| [CVE-2025-68192](https://patchblox.com/security/data/cve/CVE-2025-68192.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 |  |
| [CVE-2025-40350](https://patchblox.com/security/data/cve/CVE-2025-40350.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: RX, Fix generating skb from non-linea... | 9.8 | 0.0055 |  |
| [CVE-2025-40320](https://patchblox.com/security/data/cve/CVE-2025-40320.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0045 |  |
| [CVE-2025-40212](https://patchblox.com/security/data/cve/CVE-2025-40212.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: fix refcount leak in nfsd_set_fh_dentry()... | 9.8 | 0.0043 |  |
| [CVE-2025-40251](https://patchblox.com/security/data/cve/CVE-2025-40251.md) | Urgent | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 |  |
| [CVE-2025-40242](https://patchblox.com/security/data/cve/CVE-2025-40242.md) | Urgent | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 |  |
| [CVE-2025-40262](https://patchblox.com/security/data/cve/CVE-2025-40262.md) | Urgent | Input: imx_sc_key - fix memory corruption on unload | 9.8 | 0.0015 |  |
| [CVE-2025-40343](https://patchblox.com/security/data/cve/CVE-2025-40343.md) | High | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0070 |  |
| [CVE-2025-40252](https://patchblox.com/security/data/cve/CVE-2025-40252.md) | High | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | 9.8 | 0.0065 |  |
| [CVE-2025-40240](https://patchblox.com/security/data/cve/CVE-2025-40240.md) | High | sctp: avoid NULL dereference when chunk data buffer is missing | 8.6 | 0.0064 |  |
| [CVE-2025-68284](https://patchblox.com/security/data/cve/CVE-2025-68284.md) | High | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 |  |
| [CVE-2025-68285](https://patchblox.com/security/data/cve/CVE-2025-68285.md) | High | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 |  |
| [CVE-2025-40347](https://patchblox.com/security/data/cve/CVE-2025-40347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: enetc: fix the deadlock of enetc_mdio_lock... | 7.5 | 0.0053 |  |
| [CVE-2025-68283](https://patchblox.com/security/data/cve/CVE-2025-68283.md) | High | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 |  |
| [CVE-2025-40337](https://patchblox.com/security/data/cve/CVE-2025-40337.md) | High | net: stmmac: Correctly handle Rx checksum offload errors | 8.2 | 0.0052 |  |
| [CVE-2025-40258](https://patchblox.com/security/data/cve/CVE-2025-40258.md) | High | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 |  |
| [CVE-2025-40328](https://patchblox.com/security/data/cve/CVE-2025-40328.md) | High | smb: client: fix potential UAF in smb2_close_cached_fid() | 8.8 | 0.0049 |  |
| [CVE-2025-40271](https://patchblox.com/security/data/cve/CVE-2025-40271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc: fix uaf in proc_readdir_de()  Pde is er... | 7.8 | 0.0049 |  |
| [CVE-2025-40324](https://patchblox.com/security/data/cve/CVE-2025-40324.md) | High | NFSD: Fix crash in nfsd4_read_release() | 7.5 | 0.0049 |  |
| [CVE-2025-68301](https://patchblox.com/security/data/cve/CVE-2025-68301.md) | High | net: atlantic: fix fragment overflow handling in RX path | 9.8 | 0.0047 |  |
| [CVE-2025-40273](https://patchblox.com/security/data/cve/CVE-2025-40273.md) | High | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 |  |
| [CVE-2025-68302](https://patchblox.com/security/data/cve/CVE-2025-68302.md) | High | net: sxgbe: fix potential NULL dereference in sxgbe_rx() | 7.5 | 0.0046 |  |
| [CVE-2025-40342](https://patchblox.com/security/data/cve/CVE-2025-40342.md) | High | nvme-fc: use lock accessing port_state and rport state | 8.8 | 0.0039 |  |
| [CVE-2025-68255](https://patchblox.com/security/data/cve/CVE-2025-68255.md) | High | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | 8.8 | 0.0037 |  |
| [CVE-2025-40282](https://patchblox.com/security/data/cve/CVE-2025-40282.md) | High | Bluetooth: 6lowpan: reset link-local header on ipv6 recv path | 8.8 | 0.0030 |  |
| [CVE-2025-40318](https://patchblox.com/security/data/cve/CVE-2025-40318.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0029 |  |
| [CVE-2025-40301](https://patchblox.com/security/data/cve/CVE-2025-40301.md) | High | Bluetooth: hci_event: validate skb length for unknown CC opcode | 7.8 | 0.0029 |  |
| [CVE-2025-68254](https://patchblox.com/security/data/cve/CVE-2025-68254.md) | High | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | 7.1 | 0.0028 |  |
| [CVE-2025-68256](https://patchblox.com/security/data/cve/CVE-2025-68256.md) | High | staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser | 8.8 | 0.0027 |  |
| [CVE-2025-40309](https://patchblox.com/security/data/cve/CVE-2025-40309.md) | High | Bluetooth: SCO: Fix UAF on sco_conn_free | 8.0 | 0.0026 |  |
| [CVE-2025-40338](https://patchblox.com/security/data/cve/CVE-2025-40338.md) | High | ASoC: Intel: avs: Do not share the name pointer between components | 7.0 | 0.0026 |  |
| [CVE-2025-40277](https://patchblox.com/security/data/cve/CVE-2025-40277.md) | High | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 |  |
| [CVE-2025-40329](https://patchblox.com/security/data/cve/CVE-2025-40329.md) | High | drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | 7.0 | 0.0024 |  |
| [CVE-2025-40340](https://patchblox.com/security/data/cve/CVE-2025-40340.md) | High | drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. | 7.0 | 0.0024 |  |
| [CVE-2025-68287](https://patchblox.com/security/data/cve/CVE-2025-68287.md) | High | usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths | 7.8 | 0.0023 |  |
| [CVE-2025-68209](https://patchblox.com/security/data/cve/CVE-2025-68209.md) | High | mlx5: Fix default values in create CQ | 7.5 | 0.0022 |  |
| [CVE-2025-68311](https://patchblox.com/security/data/cve/CVE-2025-68311.md) | High | tty: serial: ip22zilog: Use platform device for probing | 7.8 | 0.0022 |  |
| [CVE-2025-40223](https://patchblox.com/security/data/cve/CVE-2025-40223.md) | High | most: usb: Fix use-after-free in hdm_disconnect | 7.8 | 0.0022 |  |
| [CVE-2025-40256](https://patchblox.com/security/data/cve/CVE-2025-40256.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: also call xfrm_state_delete_tunnel at dest... | 7.1 | 0.0022 |  |
| [CVE-2025-40294](https://patchblox.com/security/data/cve/CVE-2025-40294.md) | High | Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() | 7.8 | 0.0022 |  |
| [CVE-2025-40237](https://patchblox.com/security/data/cve/CVE-2025-40237.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.1 | 0.0022 |  |
| [CVE-2025-40293](https://patchblox.com/security/data/cve/CVE-2025-40293.md) | High | iommufd: Don't overflow during division for dirty tracking | 7.0 | 0.0022 |  |
| [CVE-2025-40246](https://patchblox.com/security/data/cve/CVE-2025-40246.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix out of bounds memory read error in syml... | 7.1 | 0.0021 |  |
| [CVE-2025-40211](https://patchblox.com/security/data/cve/CVE-2025-40211.md) | High | ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | 7.8 | 0.0021 |  |
| [CVE-2025-40314](https://patchblox.com/security/data/cve/CVE-2025-40314.md) | High | usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget | 7.8 | 0.0021 |  |
| [CVE-2025-68190](https://patchblox.com/security/data/cve/CVE-2025-68190.md) | High | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 7.8 | 0.0021 |  |
| [CVE-2025-68290](https://patchblox.com/security/data/cve/CVE-2025-68290.md) | High | most: usb: fix double free on late probe failure | 7.8 | 0.0021 |  |
| [CVE-2025-40331](https://patchblox.com/security/data/cve/CVE-2025-40331.md) | High | sctp: Prevent TOCTOU out-of-bounds write | 7.8 | 0.0020 |  |
| [CVE-2025-40160](https://patchblox.com/security/data/cve/CVE-2025-40160.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xen/events: Return -EEXIST for bound VIRQs  Chan... | n/a | 0.0020 |  |
| [CVE-2025-40357](https://patchblox.com/security/data/cve/CVE-2025-40357.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix general protection fault in __smc_d... | n/a | 0.0020 |  |
| [CVE-2025-68180](https://patchblox.com/security/data/cve/CVE-2025-68180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix NULL deref in debugfs odm_c... | n/a | 0.0020 |  |
| [CVE-2025-68759](https://patchblox.com/security/data/cve/CVE-2025-68759.md) | High | wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() | 7.1 | 0.0020 |  |
| [CVE-2025-40345](https://patchblox.com/security/data/cve/CVE-2025-40345.md) | High | usb: storage: sddr55: Reject out-of-bound new_pba | 7.3 | 0.0020 |  |
| [CVE-2025-68202](https://patchblox.com/security/data/cve/CVE-2025-68202.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix unsafe locking in the scx_dump_st... | n/a | 0.0020 |  |
| [CVE-2025-68210](https://patchblox.com/security/data/cve/CVE-2025-68210.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: avoid infinite loop due to incomplete zst... | n/a | 0.0020 |  |
| [CVE-2025-40170](https://patchblox.com/security/data/cve/CVE-2025-40170.md) | High | net: use dst_dev_rcu() in sk_setup_caps() | 8.1 | 0.0019 |  |
| [CVE-2025-40213](https://patchblox.com/security/data/cve/CVE-2025-40213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: fix crash in set_mesh_sync and... | 7.8 | 0.0019 |  |
| [CVE-2025-40344](https://patchblox.com/security/data/cve/CVE-2025-40344.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: avs: Disable periods-elapsed work w... | 7.8 | 0.0019 |  |
| [CVE-2025-68766](https://patchblox.com/security/data/cve/CVE-2025-68766.md) | High | irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() | 7.1 | 0.0019 |  |
| [CVE-2025-68307](https://patchblox.com/security/data/cve/CVE-2025-68307.md) | High | can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | 7.0 | 0.0019 |  |
| [CVE-2025-40214](https://patchblox.com/security/data/cve/CVE-2025-40214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Initialise scc_index in unix_add_edge() | 7.8 | 0.0019 |  |
| [CVE-2025-68327](https://patchblox.com/security/data/cve/CVE-2025-68327.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: renesas_usbhs: Fix synchronous external abo... | n/a | 0.0019 |  |
| [CVE-2025-68330](https://patchblox.com/security/data/cve/CVE-2025-68330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iio: accel: bmc150: Fix irq assumption regressio... | n/a | 0.0019 |  |
| [CVE-2025-40269](https://patchblox.com/security/data/cve/CVE-2025-40269.md) | High | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 |  |
| [CVE-2025-38704](https://patchblox.com/security/data/cve/CVE-2025-38704.md) | High | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 7.8 | 0.0019 |  |
| [CVE-2025-68305](https://patchblox.com/security/data/cve/CVE-2025-68305.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.8 | 0.0019 |  |
| [CVE-2025-68237](https://patchblox.com/security/data/cve/CVE-2025-68237.md) | High | mtdchar: fix integer overflow in read/write ioctls | 7.8 | 0.0019 |  |
| [CVE-2025-68235](https://patchblox.com/security/data/cve/CVE-2025-68235.md) | High | nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot | 7.1 | 0.0019 |  |
| [CVE-2025-40292](https://patchblox.com/security/data/cve/CVE-2025-40292.md) | High | virtio-net: fix received length check in big packets | 8.4 | 0.0018 |  |
| [CVE-2025-40190](https://patchblox.com/security/data/cve/CVE-2025-40190.md) | High | ext4: guard against EA inode refcount underflow in xattr update | 7.8 | 0.0018 |  |
| [CVE-2025-68347](https://patchblox.com/security/data/cve/CVE-2025-68347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: firewire-motu: fix buffer overflow in hwde... | 7.8 | 0.0018 |  |
| [CVE-2025-68753](https://patchblox.com/security/data/cve/CVE-2025-68753.md) | High | ALSA: firewire-motu: add bounds check in put_user loop for DSP events | 7.8 | 0.0017 |  |
| [CVE-2025-40250](https://patchblox.com/security/data/cve/CVE-2025-40250.md) | High | net/mlx5: Clean up only new IRQ glue on request_irq() failure | 7.8 | 0.0017 |  |
| [CVE-2025-40297](https://patchblox.com/security/data/cve/CVE-2025-40297.md) | High | net: bridge: fix use-after-free due to MST port state bypass | 7.8 | 0.0017 |  |
| [CVE-2025-40248](https://patchblox.com/security/data/cve/CVE-2025-40248.md) | High | vsock: Ignore signal/timeout on connect() if already established | 7.8 | 0.0017 |  |
| [CVE-2025-40123](https://patchblox.com/security/data/cve/CVE-2025-40123.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Enforce expected_attach_type for tailcall c... | 7.8 | 0.0017 |  |
| [CVE-2025-40233](https://patchblox.com/security/data/cve/CVE-2025-40233.md) | High | ocfs2: clear extent cache after moving/defragmenting extents | 7.8 | 0.0017 |  |
| [CVE-2025-40167](https://patchblox.com/security/data/cve/CVE-2025-40167.md) | High | ext4: detect invalid INLINE_DATA + EXTENTS flag combination | 7.8 | 0.0017 |  |
| [CVE-2025-40362](https://patchblox.com/security/data/cve/CVE-2025-40362.md) | High | ceph: fix multifs mds auth caps issue | 8.8 | 0.0016 |  |
| [CVE-2025-40266](https://patchblox.com/security/data/cve/CVE-2025-40266.md) | High | KVM: arm64: Check the untrusted offset in FF-A memory share | 8.2 | 0.0016 |  |
| [CVE-2025-40280](https://patchblox.com/security/data/cve/CVE-2025-40280.md) | High | tipc: Fix use-after-free in tipc_mon_reinit_self(). | 7.8 | 0.0016 |  |
| [CVE-2025-40307](https://patchblox.com/security/data/cve/CVE-2025-40307.md) | High | exfat: validate cluster allocation bits of the allocation bitmap | 7.8 | 0.0016 |  |
| [CVE-2025-68286](https://patchblox.com/security/data/cve/CVE-2025-68286.md) | High | drm/amd/display: Check NULL before accessing | 7.8 | 0.0016 |  |
| [CVE-2025-39977](https://patchblox.com/security/data/cve/CVE-2025-39977.md) | High | futex: Prevent use-after-free during requeue-PI | 7.8 | 0.0015 |  |
| [CVE-2025-40215](https://patchblox.com/security/data/cve/CVE-2025-40215.md) | High | xfrm: delete x->tunnel as we delete x | 7.8 | 0.0015 |  |
| [CVE-2025-40304](https://patchblox.com/security/data/cve/CVE-2025-40304.md) | High | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0015 |  |
| [CVE-2025-40317](https://patchblox.com/security/data/cve/CVE-2025-40317.md) | High | regmap: slimbus: fix bus_context pointer in regmap init calls | 7.8 | 0.0015 |  |
| [CVE-2025-40319](https://patchblox.com/security/data/cve/CVE-2025-40319.md) | High | bpf: Sync pending IRQ work before freeing ring buffer | 7.8 | 0.0015 |  |
| [CVE-2025-68171](https://patchblox.com/security/data/cve/CVE-2025-68171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/fpu: Ensure XFD state on signal delivery  Se... | 7.8 | 0.0015 |  |
| [CVE-2025-68183](https://patchblox.com/security/data/cve/CVE-2025-68183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ima: don't clear IMA_DIGSIG flag when setting or... | 7.8 | 0.0015 |  |
| [CVE-2025-68208](https://patchblox.com/security/data/cve/CVE-2025-68208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: account for current allocated stack depth i... | 7.8 | 0.0015 |  |
| [CVE-2025-40322](https://patchblox.com/security/data/cve/CVE-2025-40322.md) | High | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0015 |  |
| [CVE-2025-68352](https://patchblox.com/security/data/cve/CVE-2025-68352.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: ch341: fix out-of-bounds memory access in c... | 7.8 | 0.0015 |  |
| [CVE-2025-40272](https://patchblox.com/security/data/cve/CVE-2025-40272.md) | High | mm/secretmem: fix use-after-free race in fault handler | 7.8 | 0.0015 |  |
| [CVE-2025-40283](https://patchblox.com/security/data/cve/CVE-2025-40283.md) | High | Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF | 7.8 | 0.0015 |  |
| [CVE-2025-40354](https://patchblox.com/security/data/cve/CVE-2025-40354.md) | High | drm/amd/display: increase max link count and fix link->enc NULL pointer access | 7.8 | 0.0015 |  |
| [CVE-2025-68167](https://patchblox.com/security/data/cve/CVE-2025-68167.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  gpiolib: fix invalid pointer access in debugfs... | 7.8 | 0.0015 |  |
| [CVE-2025-68170](https://patchblox.com/security/data/cve/CVE-2025-68170.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/radeon: Do not kfree() devres managed rdev... | 7.8 | 0.0015 |  |
| [CVE-2025-68207](https://patchblox.com/security/data/cve/CVE-2025-68207.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Synchronize Dead CT worker with unbi... | 7.8 | 0.0015 |  |
| [CVE-2025-40302](https://patchblox.com/security/data/cve/CVE-2025-40302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  media: videobuf2: forbid remove_bufs when legacy... | 7.8 | 0.0015 |  |
| [CVE-2025-40323](https://patchblox.com/security/data/cve/CVE-2025-40323.md) | High | fbcon: Set fb_display[i]->mode to NULL when the mode is released | 8.8 | 0.0015 |  |
| [CVE-2025-68184](https://patchblox.com/security/data/cve/CVE-2025-68184.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/mediatek: Disable AFBC support on Mediatek D... | 7.1 | 0.0015 |  |
| [CVE-2025-68340](https://patchblox.com/security/data/cve/CVE-2025-68340.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  team: Move team device type change at the end of... | 7.0 | 0.0015 |  |
| [CVE-2025-40276](https://patchblox.com/security/data/cve/CVE-2025-40276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: Flush shmem writes before mapping b... | 7.3 | 0.0015 |  |
| [CVE-2025-40274](https://patchblox.com/security/data/cve/CVE-2025-40274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: guest_memfd: Remove bindings on memslot del... | 7.8 | 0.0015 |  |
| [CVE-2025-40284](https://patchblox.com/security/data/cve/CVE-2025-40284.md) | High | Bluetooth: MGMT: cancel mesh send timer when hdev removed | 7.8 | 0.0015 |  |
| [CVE-2025-40303](https://patchblox.com/security/data/cve/CVE-2025-40303.md) | High | btrfs: ensure no dirty metadata is written back for an fs with errors | 7.8 | 0.0015 |  |
| [CVE-2025-68181](https://patchblox.com/security/data/cve/CVE-2025-68181.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/radeon: Remove calls to drm_put_dev()  Since... | 7.8 | 0.0015 |  |
| [CVE-2025-68736](https://patchblox.com/security/data/cve/CVE-2025-68736.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  landlock: Fix handling of disconnected directori... | 8.8 | 0.0014 |  |
| [CVE-2025-68303](https://patchblox.com/security/data/cve/CVE-2025-68303.md) | High | platform/x86: intel: punit_ipc: fix memory corruption | 7.8 | 0.0014 |  |
| [CVE-2025-68746](https://patchblox.com/security/data/cve/CVE-2025-68746.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: tegra210-quad: Fix timeout handling  When t... | 7.8 | 0.0014 |  |
| [CVE-2025-68747](https://patchblox.com/security/data/cve/CVE-2025-68747.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: Fix UAF on kernel BO VA nodes  If t... | 7.8 | 0.0014 |  |
| [CVE-2025-68748](https://patchblox.com/security/data/cve/CVE-2025-68748.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: Fix UAF race between device unplug... | 7.8 | 0.0014 |  |
| [CVE-2025-68215](https://patchblox.com/security/data/cve/CVE-2025-68215.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix PTP cleanup on driver removal in error... | 7.0 | 0.0014 |  |
| [CVE-2025-68724](https://patchblox.com/security/data/cve/CVE-2025-68724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: asymmetric_keys - prevent overflow in as... | 8.1 | 0.0014 |  |
| [CVE-2025-68317](https://patchblox.com/security/data/cve/CVE-2025-68317.md) | High | io_uring/zctx: check chained notif contexts | 7.8 | 0.0014 |  |
| [CVE-2025-68313](https://patchblox.com/security/data/cve/CVE-2025-68313.md) | High | x86/CPU/AMD: Add RDSEED fix for Zen5 | 7.1 | 0.0014 |  |
| [CVE-2025-71096](https://patchblox.com/security/data/cve/CVE-2025-71096.md) | High | RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly | 7.1 | 0.0014 |  |
| [CVE-2025-40225](https://patchblox.com/security/data/cve/CVE-2025-40225.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: Fix kernel panic on partial unmap o... | n/a | 0.0026 |  |
| [CVE-2025-40254](https://patchblox.com/security/data/cve/CVE-2025-40254.md) | Routine | net: openvswitch: remove never-working support for setting nsh fields | 5.5 | 0.0026 |  |
| [CVE-2025-40339](https://patchblox.com/security/data/cve/CVE-2025-40339.md) | Routine | drm/amdgpu: fix nullptr err of vm_handle_moved | 5.5 | 0.0024 |  |
| [CVE-2025-40219](https://patchblox.com/security/data/cve/CVE-2025-40219.md) | Routine | PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV | 6.7 | 0.0024 |  |
| [CVE-2025-40130](https://patchblox.com/security/data/cve/CVE-2025-40130.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: ufs: core: Fix data race in CPU latency PM... | n/a | 0.0024 |  |
| [CVE-2025-40289](https://patchblox.com/security/data/cve/CVE-2025-40289.md) | Routine | drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM | 5.5 | 0.0024 |  |
| [CVE-2025-40332](https://patchblox.com/security/data/cve/CVE-2025-40332.md) | Routine | drm/amdkfd: Fix mmap write lock not release | 5.5 | 0.0024 |  |
| [CVE-2025-68346](https://patchblox.com/security/data/cve/CVE-2025-68346.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: dice: fix buffer overflow in detect_stream... | 6.8 | 0.0023 |  |
| [CVE-2025-40264](https://patchblox.com/security/data/cve/CVE-2025-40264.md) | Routine | be2net: pass wrb_params in case of OS2BMC | 5.5 | 0.0023 |  |
| [CVE-2025-40278](https://patchblox.com/security/data/cve/CVE-2025-40278.md) | Routine | net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak | 5.5 | 0.0023 |  |
| [CVE-2025-40330](https://patchblox.com/security/data/cve/CVE-2025-40330.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Shutdown FW DMA in bnxt_shutdown()  The... | 5.2 | 0.0023 |  |
| [CVE-2025-68345](https://patchblox.com/security/data/cve/CVE-2025-68345.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference... | n/a | 0.0023 |  |
| [CVE-2025-40042](https://patchblox.com/security/data/cve/CVE-2025-40042.md) | Routine | tracing: Fix race condition in kprobe initialization causing NULL pointer dereference | 5.5 | 0.0023 |  |
| [CVE-2025-68264](https://patchblox.com/security/data/cve/CVE-2025-68264.md) | Routine | ext4: refresh inline data size before write operations | 5.5 | 0.0022 |  |
| [CVE-2025-68201](https://patchblox.com/security/data/cve/CVE-2025-68201.md) | Routine | drm/amdgpu: remove two invalid BUG_ON()s | 4.0 | 0.0022 |  |
| [CVE-2025-40179](https://patchblox.com/security/data/cve/CVE-2025-40179.md) | Routine | ext4: verify orphan file size is not too big | 5.5 | 0.0022 |  |
| [CVE-2025-40231](https://patchblox.com/security/data/cve/CVE-2025-40231.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock: fix lock inversion in vsock_assign_transp... | 5.5 | 0.0022 |  |
| [CVE-2025-40355](https://patchblox.com/security/data/cve/CVE-2025-40355.md) | Routine | sysfs: check visibility before changing group attribute ownership | 5.5 | 0.0022 |  |
| [CVE-2025-68353](https://patchblox.com/security/data/cve/CVE-2025-68353.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: vxlan: prevent NULL deref in vxlan_xmit_one... | n/a | 0.0022 |  |
| [CVE-2025-68378](https://patchblox.com/security/data/cve/CVE-2025-68378.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix stackmap overflow check in __bpf_get_st... | 5.5 | 0.0022 |  |
| [CVE-2025-68217](https://patchblox.com/security/data/cve/CVE-2025-68217.md) | Routine | Input: pegasus-notetaker - fix potential out-of-bounds access | 6.2 | 0.0022 |  |
| [CVE-2025-40321](https://patchblox.com/security/data/cve/CVE-2025-40321.md) | Routine | wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | 6.5 | 0.0022 |  |
| [CVE-2025-40315](https://patchblox.com/security/data/cve/CVE-2025-40315.md) | Routine | usb: gadget: f_fs: Fix epfile null pointer access after ep enable. | 5.5 | 0.0022 |  |
| [CVE-2025-40226](https://patchblox.com/security/data/cve/CVE-2025-40226.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_scmi: Account for failed debug ini... | n/a | 0.0021 |  |
| [CVE-2025-68230](https://patchblox.com/security/data/cve/CVE-2025-68230.md) | Routine | drm/amdgpu: fix gpu page fault after hibernation on PF passthrough | 5.9 | 0.0021 |  |
| [CVE-2025-40239](https://patchblox.com/security/data/cve/CVE-2025-40239.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: phy: micrel: always set shared->phydev for... | 5.5 | 0.0021 |  |
| [CVE-2025-40238](https://patchblox.com/security/data/cve/CVE-2025-40238.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: Fix IPsec cleanup over MPV device  Whe... | 4.7 | 0.0021 |  |
| [CVE-2025-68362](https://patchblox.com/security/data/cve/CVE-2025-68362.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: rtl818x: rtl8187: Fix potential buffer und... | 6.5 | 0.0021 |  |
| [CVE-2025-68742](https://patchblox.com/security/data/cve/CVE-2025-68742.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix invalid prog->stats access when update_... | 5.8 | 0.0021 |  |
| [CVE-2025-68354](https://patchblox.com/security/data/cve/CVE-2025-68354.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  regulator: core: Protect regulator_supply_alias_... | 5.5 | 0.0021 |  |
| [CVE-2025-68363](https://patchblox.com/security/data/cve/CVE-2025-68363.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Check skb->transport_header is set in bpf_s... | 5.5 | 0.0021 |  |
| [CVE-2025-68344](https://patchblox.com/security/data/cve/CVE-2025-68344.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: wavefront: Fix integer overflow in sample... | n/a | 0.0021 |  |
| [CVE-2025-40279](https://patchblox.com/security/data/cve/CVE-2025-40279.md) | Routine | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | 6.1 | 0.0021 |  |
| [CVE-2025-40235](https://patchblox.com/security/data/cve/CVE-2025-40235.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: directly free partially initialized fs_in... | 5.5 | 0.0021 |  |
| [CVE-2025-40275](https://patchblox.com/security/data/cve/CVE-2025-40275.md) | Routine | ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd | 5.5 | 0.0021 |  |
| [CVE-2025-40308](https://patchblox.com/security/data/cve/CVE-2025-40308.md) | Routine | Bluetooth: bcsp: receive data only if registered | 5.5 | 0.0021 |  |
| [CVE-2025-68185](https://patchblox.com/security/data/cve/CVE-2025-68185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfs4_setup_readdir(): insufficient locking for -... | 5.5 | 0.0021 |  |
| [CVE-2025-68194](https://patchblox.com/security/data/cve/CVE-2025-68194.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: imon: make send_packet() more robust  syz... | 5.5 | 0.0021 |  |
| [CVE-2025-68331](https://patchblox.com/security/data/cve/CVE-2025-68331.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: uas: fix urb unmapping issue when the uas d... | 5.5 | 0.0021 |  |
| [CVE-2025-68222](https://patchblox.com/security/data/cve/CVE-2025-68222.md) | Routine | pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc | 6.2 | 0.0021 |  |
| [CVE-2025-40346](https://patchblox.com/security/data/cve/CVE-2025-40346.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  arch_topology: Fix incorrect error check in topo... | 5.5 | 0.0021 |  |
| [CVE-2025-40360](https://patchblox.com/security/data/cve/CVE-2025-40360.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/sysfb: Do not dereference NULL pointer in pl... | 5.5 | 0.0021 |  |
| [CVE-2025-68740](https://patchblox.com/security/data/cve/CVE-2025-68740.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ima: Handle error code returned by ima_filter_ru... | 5.5 | 0.0021 |  |
| [CVE-2025-68176](https://patchblox.com/security/data/cve/CVE-2025-68176.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: cadence: Check for the existence of cdns_pc... | n/a | 0.0021 |  |
| [CVE-2025-40220](https://patchblox.com/security/data/cve/CVE-2025-40220.md) | Routine | fuse: fix livelock in synchronous file put from fuseblk workers | 5.5 | 0.0021 |  |
| [CVE-2025-40263](https://patchblox.com/security/data/cve/CVE-2025-40263.md) | Routine | Input: cros_ec_keyb - fix an invalid memory access | 5.5 | 0.0021 |  |
| [CVE-2025-68213](https://patchblox.com/security/data/cve/CVE-2025-68213.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix possible vport_config NULL pointer der... | 5.5 | 0.0021 |  |
| [CVE-2025-68293](https://patchblox.com/security/data/cve/CVE-2025-68293.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/huge_memory: fix NULL pointer deference when... | 5.5 | 0.0021 |  |
| [CVE-2025-68289](https://patchblox.com/security/data/cve/CVE-2025-68289.md) | Routine | usb: gadget: f_eem: Fix memory leak in eem_unwrap | 5.5 | 0.0021 |  |
| [CVE-2025-40316](https://patchblox.com/security/data/cve/CVE-2025-40316.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/mediatek: Fix device use-after-free on unbin... | n/a | 0.0020 |  |
| [CVE-2025-68380](https://patchblox.com/security/data/cve/CVE-2025-68380.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix peer HE MCS assignment  In ath... | 6.5 | 0.0020 |  |
| [CVE-2025-40268](https://patchblox.com/security/data/cve/CVE-2025-40268.md) | Routine | cifs: client: fix memory leak in smb3_fs_context_parse_param | 5.5 | 0.0020 |  |
| [CVE-2025-40218](https://patchblox.com/security/data/cve/CVE-2025-40218.md) | Routine | mm/damon/vaddr: do not repeat pte_offset_map_lock() until success | 4.1 | 0.0020 |  |
| [CVE-2025-68172](https://patchblox.com/security/data/cve/CVE-2025-68172.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: aspeed - fix double free caused by devm... | n/a | 0.0020 |  |
| [CVE-2025-40255](https://patchblox.com/security/data/cve/CVE-2025-40255.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: core: prevent NULL deref in generic_hwtstam... | n/a | 0.0020 |  |
| [CVE-2025-40287](https://patchblox.com/security/data/cve/CVE-2025-40287.md) | Routine | exfat: fix improper check of dentry.stream.valid_size | 5.5 | 0.0020 |  |
| [CVE-2025-40310](https://patchblox.com/security/data/cve/CVE-2025-40310.md) | Routine | amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw | 5.5 | 0.0020 |  |
| [CVE-2025-40311](https://patchblox.com/security/data/cve/CVE-2025-40311.md) | Routine | accel/habanalabs: support mapping cb with vmalloc-backed coherent memory | 5.5 | 0.0020 |  |
| [CVE-2025-40359](https://patchblox.com/security/data/cve/CVE-2025-40359.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  perf/x86/intel: Fix KASAN global-out-of-bounds w... | 5.5 | 0.0020 |  |
| [CVE-2025-68198](https://patchblox.com/security/data/cve/CVE-2025-68198.md) | Routine | crash: fix crashkernel resource shrink | 5.5 | 0.0020 |  |
| [CVE-2025-40288](https://patchblox.com/security/data/cve/CVE-2025-40288.md) | Routine | drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices | 4.7 | 0.0020 |  |
| [CVE-2025-40353](https://patchblox.com/security/data/cve/CVE-2025-40353.md) | Routine | arm64: mte: Do not warn if the page is already tagged in copy_highpage() | 4.0 | 0.0020 |  |
| [CVE-2025-68757](https://patchblox.com/security/data/cve/CVE-2025-68757.md) | Routine | drm/vgem-fence: Fix potential deadlock on release | 6.2 | 0.0020 |  |
| [CVE-2025-68758](https://patchblox.com/security/data/cve/CVE-2025-68758.md) | Routine | backlight: led-bl: Add devlink to supplier LEDs | 5.5 | 0.0020 |  |
| [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 |  |
| [CVE-2025-68257](https://patchblox.com/security/data/cve/CVE-2025-68257.md) | Routine | comedi: check device's attached status in compat ioctls | 5.5 | 0.0020 |  |
| [CVE-2025-68258](https://patchblox.com/security/data/cve/CVE-2025-68258.md) | Routine | comedi: multiq3: sanitize config options in multiq3_attach() | 5.5 | 0.0020 |  |
| [CVE-2025-40209](https://patchblox.com/security/data/cve/CVE-2025-40209.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix memory leak of qgroup_list in btrfs_a... | 4.4 | 0.0020 |  |
| [CVE-2025-40221](https://patchblox.com/security/data/cve/CVE-2025-40221.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: pci: mg4b: fix uninitialized iio scan dat... | n/a | 0.0020 |  |
| [CVE-2025-68332](https://patchblox.com/security/data/cve/CVE-2025-68332.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  comedi: c6xdigio: Fix invalid PNP driver unregis... | n/a | 0.0020 |  |
| [CVE-2025-68750](https://patchblox.com/security/data/cve/CVE-2025-68750.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: potential integer overflow in usbg_make_tpg... | n/a | 0.0020 |  |
| [CVE-2025-68312](https://patchblox.com/security/data/cve/CVE-2025-68312.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usbnet: Prevents free active kevent  The root ca... | 4.7 | 0.0020 |  |
| [CVE-2025-68259](https://patchblox.com/security/data/cve/CVE-2025-68259.md) | Routine | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | 6.2 | 0.0019 |  |
| [CVE-2025-68732](https://patchblox.com/security/data/cve/CVE-2025-68732.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  gpu: host1x: Fix race in syncpt alloc/free  Fix... | 5.5 | 0.0019 |  |
| [CVE-2025-68765](https://patchblox.com/security/data/cve/CVE-2025-68765.md) | Routine | mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() | 5.5 | 0.0019 |  |
| [CVE-2025-68335](https://patchblox.com/security/data/cve/CVE-2025-68335.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  comedi: pcl818: fix null-ptr-deref in pcl818_ai_... | n/a | 0.0019 |  |
| [CVE-2025-68306](https://patchblox.com/security/data/cve/CVE-2025-68306.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: btusb: mediatek: Fix kernel crash whe... | 5.5 | 0.0019 |  |
| [CVE-2025-68308](https://patchblox.com/security/data/cve/CVE-2025-68308.md) | Routine | can: kvaser_usb: leaf: Fix potential infinite loop in command parsers | 5.5 | 0.0019 |  |
| [CVE-2025-68244](https://patchblox.com/security/data/cve/CVE-2025-68244.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/i915: Avoid lock inversion when pinning to G... | 4.7 | 0.0019 |  |
| [CVE-2025-68238](https://patchblox.com/security/data/cve/CVE-2025-68238.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mtd: rawnand: cadence: fix DMA device NULL point... | n/a | 0.0019 |  |
| [CVE-2025-68249](https://patchblox.com/security/data/cve/CVE-2025-68249.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  most: usb: hdm_probe: Fix calling put_device() b... | n/a | 0.0019 |  |
| [CVE-2025-68328](https://patchblox.com/security/data/cve/CVE-2025-68328.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: stratix10-svc: fix bug in saving contr... | n/a | 0.0019 |  |
| [CVE-2025-68339](https://patchblox.com/security/data/cve/CVE-2025-68339.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  atm/fore200e: Fix possible data race in fore200e... | n/a | 0.0019 |  |
| [CVE-2025-68744](https://patchblox.com/security/data/cve/CVE-2025-68744.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Free special fields when update [lru_,]perc... | 5.5 | 0.0019 |  |
| [CVE-2025-68233](https://patchblox.com/security/data/cve/CVE-2025-68233.md) | Routine | drm/tegra: Add call to put_pid() | 6.2 | 0.0019 |  |
| [CVE-2025-68342](https://patchblox.com/security/data/cve/CVE-2025-68342.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: gs_usb: gs_usb_receive_bulk_callback(): che... | 6.1 | 0.0019 |  |
| [CVE-2025-68343](https://patchblox.com/security/data/cve/CVE-2025-68343.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: gs_usb: gs_usb_receive_bulk_callback(): che... | 6.1 | 0.0019 |  |
| [CVE-2025-68252](https://patchblox.com/security/data/cve/CVE-2025-68252.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | n/a | 0.0019 |  |
| [CVE-2025-68197](https://patchblox.com/security/data/cve/CVE-2025-68197.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix null pointer dereference in bnxt_bs... | 5.0 | 0.0019 |  |
| [CVE-2025-68298](https://patchblox.com/security/data/cve/CVE-2025-68298.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: btusb: mediatek: Avoid btusb_mtk_clai... | 5.5 | 0.0018 |  |
| [CVE-2025-68242](https://patchblox.com/security/data/cve/CVE-2025-68242.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  NFS: Fix LTP test failures when timestamps are d... | 4.5 | 0.0018 |  |
| [CVE-2025-68351](https://patchblox.com/security/data/cve/CVE-2025-68351.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  exfat: fix refcount leak in exfat_find  Fix refc... | 5.5 | 0.0017 |  |
| [CVE-2025-68223](https://patchblox.com/security/data/cve/CVE-2025-68223.md) | Routine | drm/radeon: delete radeon_fence_process in is_signaled, no deadlock | 6.2 | 0.0012 |  |
| [CVE-2025-68749](https://patchblox.com/security/data/cve/CVE-2025-68749.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  accel/ivpu: Fix race condition when unbinding BO... | 4.7 | 0.0011 |  |
| [CVE-2025-68195](https://patchblox.com/security/data/cve/CVE-2025-68195.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | n/a | n/a |  |

---

Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.