# SUSE-SU-2025:01919-1: Security update for 4 packages

SUSE-SU-2025:01919-1, released June 12, 2025, fixes 427 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-01919-1
- Platform: Linux
- Released: Jun 12, 2025
- Priority: Urgent (Closes CVE-2024-53177, rated Critical)
- CVEs: 427, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:01919-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-coco](https://patchblox.com/security/data/product/linux/kernel-coco.md) | sles 15.6 | 6.4.0-15061.21.coco15sp6.1 |
| [kernel-coco_debug](https://patchblox.com/security/data/product/linux/kernel-coco-debug.md) | sles 15.6 | 6.4.0-15061.21.coco15sp6.1 |
| [kernel-source-coco](https://patchblox.com/security/data/product/linux/kernel-source-coco.md) | sles 15.6 | 6.4.0-15061.21.coco15sp6.1 |
| [kernel-syms-coco](https://patchblox.com/security/data/product/linux/kernel-syms-coco.md) | sles 15.6 | 6.4.0-15061.21.coco15sp6.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-53177](https://patchblox.com/security/data/cve/CVE-2024-53177.md) | Urgent | kernel-64kb: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896). | 9.8 | 0.0055 |  |
| [CVE-2025-22088](https://patchblox.com/security/data/cve/CVE-2025-22088.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 |  |
| [CVE-2025-21858](https://patchblox.com/security/data/cve/CVE-2025-21858.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0025 |  |
| [CVE-2025-21760](https://patchblox.com/security/data/cve/CVE-2025-21760.md) | High | kernel-64kb: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763). | 8.1 | 0.3800 |  |
| [CVE-2025-21759](https://patchblox.com/security/data/cve/CVE-2025-21759.md) | High | kernel-64kb: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). | 7.8 | 0.0780 |  |
| [CVE-2025-21756](https://patchblox.com/security/data/cve/CVE-2025-21756.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0089 |  |
| [CVE-2024-50083](https://patchblox.com/security/data/cve/CVE-2024-50083.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0087 |  |
| [CVE-2025-37879](https://patchblox.com/security/data/cve/CVE-2025-37879.md) | High | 9p/net: fix improper handling of bogus negative read/write replies | 7.1 | 0.0073 |  |
| [CVE-2025-21796](https://patchblox.com/security/data/cve/CVE-2025-21796.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0067 |  |
| [CVE-2025-21795](https://patchblox.com/security/data/cve/CVE-2025-21795.md) | High | kernel: kernel: NFSD: fix hang in nfsd4_shutdown_callback | 7.8 | 0.0067 |  |
| [CVE-2025-21762](https://patchblox.com/security/data/cve/CVE-2025-21762.md) | High | kernel-64kb: arp: use RCU protection in arp_xmit() (bsc#1238780). | 8.1 | 0.0066 |  |
| [CVE-2024-27018](https://patchblox.com/security/data/cve/CVE-2024-27018.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0064 |  |
| [CVE-2025-21927](https://patchblox.com/security/data/cve/CVE-2025-21927.md) | High | nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() | 8.0 | 0.0062 |  |
| [CVE-2025-21844](https://patchblox.com/security/data/cve/CVE-2025-21844.md) | High | kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512). | 7.8 | 0.0062 |  |
| [CVE-2024-56640](https://patchblox.com/security/data/cve/CVE-2024-56640.md) | High | kernel-64kb: net/smc: fix LGR and link use-after-free issue (bsc#1235436). | 7.8 | 0.0062 |  |
| [CVE-2025-21765](https://patchblox.com/security/data/cve/CVE-2025-21765.md) | High | kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906). | 7.8 | 0.0061 |  |
| [CVE-2024-46736](https://patchblox.com/security/data/cve/CVE-2024-46736.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0061 |  |
| [CVE-2024-46865](https://patchblox.com/security/data/cve/CVE-2024-46865.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0055 |  |
| [CVE-2025-37750](https://patchblox.com/security/data/cve/CVE-2025-37750.md) | High | smb: client: fix UAF in decryption with multichannel | 7.8 | 0.0050 |  |
| [CVE-2024-46796](https://patchblox.com/security/data/cve/CVE-2024-46796.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0044 |  |
| [CVE-2025-21855](https://patchblox.com/security/data/cve/CVE-2025-21855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0044 |  |
| [CVE-2024-28956](https://patchblox.com/security/data/cve/CVE-2024-28956.md) | High | kernel-64kb: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). | 7.8 | 0.0043 |  |
| [CVE-2025-21829](https://patchblox.com/security/data/cve/CVE-2025-21829.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0041 |  |
| [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 |  |
| [CVE-2025-21735](https://patchblox.com/security/data/cve/CVE-2025-21735.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0038 |  |
| [CVE-2024-50029](https://patchblox.com/security/data/cve/CVE-2024-50029.md) | High | kernel-64kb: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949). | 7.8 | 0.0037 |  |
| [CVE-2025-21704](https://patchblox.com/security/data/cve/CVE-2025-21704.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0037 |  |
| [CVE-2025-37799](https://patchblox.com/security/data/cve/CVE-2025-37799.md) | High | kernel-64kb: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283). | 9.4 | 0.0037 |  |
| [CVE-2025-22004](https://patchblox.com/security/data/cve/CVE-2025-22004.md) | High | kernel-64kb: net: atm: fix use after free in lec_send() (bsc#1240835). | 8.6 | 0.0036 |  |
| [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525). | 7.8 | 0.0033 |  |
| [CVE-2023-52927](https://patchblox.com/security/data/cve/CVE-2023-52927.md) | High | kernel-64kb: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). | 7.8 | 0.0032 |  |
| [CVE-2024-57986](https://patchblox.com/security/data/cve/CVE-2024-57986.md) | High | kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections | 7.8 | 0.0032 |  |
| [CVE-2025-37785](https://patchblox.com/security/data/cve/CVE-2025-37785.md) | High | kernel-64kb: ext4: fix OOB read when checking dotdot dir (bsc#1241640). | 7.1 | 0.0031 |  |
| [CVE-2025-23133](https://patchblox.com/security/data/cve/CVE-2025-23133.md) | High | kernel-64kb: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451). | 7.8 | 0.0031 |  |
| [CVE-2024-58006](https://patchblox.com/security/data/cve/CVE-2024-58006.md) | High | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() | 7.8 | 0.0031 |  |
| [CVE-2025-21703](https://patchblox.com/security/data/cve/CVE-2025-21703.md) | High | kernel-64kb: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313). | 7.8 | 0.0030 |  |
| [CVE-2025-22063](https://patchblox.com/security/data/cve/CVE-2025-22063.md) | High | kernel-64kb: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351). | 7.8 | 0.0030 |  |
| [CVE-2024-46713](https://patchblox.com/security/data/cve/CVE-2024-46713.md) | High | kernel-64kb: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581). | 7.8 | 0.0030 |  |
| [CVE-2023-53034](https://patchblox.com/security/data/cve/CVE-2023-53034.md) | High | ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans | 7.5 | 0.0030 |  |
| [CVE-2024-53057](https://patchblox.com/security/data/cve/CVE-2024-53057.md) | High | kernel-64kb: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551). | 7.8 | 0.0029 |  |
| [CVE-2025-21782](https://patchblox.com/security/data/cve/CVE-2025-21782.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0029 |  |
| [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312). | 7.8 | 0.0028 |  |
| [CVE-2025-21864](https://patchblox.com/security/data/cve/CVE-2025-21864.md) | High | kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482). | 7.8 | 0.0028 |  |
| [CVE-2024-57980](https://patchblox.com/security/data/cve/CVE-2024-57980.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2025-21785](https://patchblox.com/security/data/cve/CVE-2025-21785.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-57996](https://patchblox.com/security/data/cve/CVE-2024-57996.md) | High | kernel-64kb: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076). | 7.0 | 0.0027 |  |
| [CVE-2025-21787](https://patchblox.com/security/data/cve/CVE-2025-21787.md) | High | kernel-64kb: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774). | 7.8 | 0.0027 |  |
| [CVE-2025-21764](https://patchblox.com/security/data/cve/CVE-2025-21764.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-57979](https://patchblox.com/security/data/cve/CVE-2024-57979.md) | High | kernel-64kb: kABI workaround for pps changes (bsc#1238521). | 7.8 | 0.0027 |  |
| [CVE-2024-57981](https://patchblox.com/security/data/cve/CVE-2024-57981.md) | High | kernel-64k-modules-extra: kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts | 7.8 | 0.0027 |  |
| [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel-64kb: io_uring: prevent opcode speculation (bsc#1239475). | 7.8 | 0.0027 |  |
| [CVE-2025-21791](https://patchblox.com/security/data/cve/CVE-2025-21791.md) | High | kernel-rt: kernel: vrf: use RCU protection in l3mdev_l3_out() | 7.8 | 0.0027 |  |
| [CVE-2025-21745](https://patchblox.com/security/data/cve/CVE-2025-21745.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-58020](https://patchblox.com/security/data/cve/CVE-2024-58020.md) | High | kernel-rt-debug-core: kernel: HID: multitouch: Add NULL check in mt_input_configured | 7.8 | 0.0026 |  |
| [CVE-2024-58055](https://patchblox.com/security/data/cve/CVE-2024-58055.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2025-21780](https://patchblox.com/security/data/cve/CVE-2025-21780.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2025-21696](https://patchblox.com/security/data/cve/CVE-2025-21696.md) | High | mm: clear uffd-wp PTE/PMD state on mremap() | 7.8 | 0.0026 |  |
| [CVE-2025-21761](https://patchblox.com/security/data/cve/CVE-2025-21761.md) | High | kernel-64kb: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775). | 7.8 | 0.0026 |  |
| [CVE-2025-21763](https://patchblox.com/security/data/cve/CVE-2025-21763.md) | High | kernel-64kb: neighbour: use RCU protection in __neigh_notify() (bsc#1237897). | 7.8 | 0.0026 |  |
| [CVE-2025-21753](https://patchblox.com/security/data/cve/CVE-2025-21753.md) | High | kernel-64kb: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875). | 7.8 | 0.0026 |  |
| [CVE-2024-54458](https://patchblox.com/security/data/cve/CVE-2024-54458.md) | High | kernel-64kb: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992). | 7.8 | 0.0026 |  |
| [CVE-2024-57900](https://patchblox.com/security/data/cve/CVE-2024-57900.md) | High | kernel-64kb: ila: serialize calls to nf_register_net_hooks() (bsc#1235973). | 7.8 | 0.0026 |  |
| [CVE-2025-21969](https://patchblox.com/security/data/cve/CVE-2025-21969.md) | High | Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd | 7.8 | 0.0026 |  |
| [CVE-2024-49924](https://patchblox.com/security/data/cve/CVE-2024-49924.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-58002](https://patchblox.com/security/data/cve/CVE-2024-58002.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2025-22055](https://patchblox.com/security/data/cve/CVE-2025-22055.md) | High | kernel-64kb: net: fix geneve_opt length integer overflow (bsc#1241371). | 7.1 | 0.0026 |  |
| [CVE-2024-58012](https://patchblox.com/security/data/cve/CVE-2024-58012.md) | High | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | 7.8 | 0.0026 |  |
| [CVE-2025-21848](https://patchblox.com/security/data/cve/CVE-2025-21848.md) | High | kernel-64kb: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479). | 7.8 | 0.0025 |  |
| [CVE-2025-21914](https://patchblox.com/security/data/cve/CVE-2025-21914.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-58005](https://patchblox.com/security/data/cve/CVE-2024-58005.md) | High | kernel-64k-debug-modules-extra: kernel: tpm: Change to kvalloc() in eventlog/acpi.c | 7.8 | 0.0025 |  |
| [CVE-2025-21846](https://patchblox.com/security/data/cve/CVE-2025-21846.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-58007](https://patchblox.com/security/data/cve/CVE-2024-58007.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-37803](https://patchblox.com/security/data/cve/CVE-2025-37803.md) | High | udmabuf: fix a buf size overflow issue during udmabuf creation | 7.8 | 0.0025 |  |
| [CVE-2025-21812](https://patchblox.com/security/data/cve/CVE-2025-21812.md) | High | kernel-64kb: ax25: rcu protect dev->ax25_ptr (bsc#1238471). | 7.8 | 0.0025 |  |
| [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-50036](https://patchblox.com/security/data/cve/CVE-2024-50036.md) | High | kernel-64kb: net: do not delay dst_entries_add() in dst_release() (bsc#1231912). | 7.0 | 0.0025 |  |
| [CVE-2025-21934](https://patchblox.com/security/data/cve/CVE-2025-21934.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-21926](https://patchblox.com/security/data/cve/CVE-2025-21926.md) | High | kernel-64kb: net: gso: fix ownership in __udp_gso_segment (bsc#1240712). | 7.1 | 0.0024 |  |
| [CVE-2023-52926](https://patchblox.com/security/data/cve/CVE-2023-52926.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-57998](https://patchblox.com/security/data/cve/CVE-2024-57998.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21714](https://patchblox.com/security/data/cve/CVE-2025-21714.md) | High | RDMA/mlx5: Fix implicit ODP use after free | 7.8 | 0.0024 |  |
| [CVE-2025-21772](https://patchblox.com/security/data/cve/CVE-2025-21772.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-58013](https://patchblox.com/security/data/cve/CVE-2024-58013.md) | High | kernel-debug-devel-matched: kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync | 7.8 | 0.0024 |  |
| [CVE-2025-21715](https://patchblox.com/security/data/cve/CVE-2025-21715.md) | High | kernel-64kb: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889). | 7.8 | 0.0024 |  |
| [CVE-2025-21731](https://patchblox.com/security/data/cve/CVE-2025-21731.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21905](https://patchblox.com/security/data/cve/CVE-2025-21905.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-53135](https://patchblox.com/security/data/cve/CVE-2024-53135.md) | High | kernel-64kb: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154). | 7.8 | 0.0024 |  |
| [CVE-2025-21861](https://patchblox.com/security/data/cve/CVE-2025-21861.md) | High | kernel-64kb: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize() (bsc#1239483). | 7.8 | 0.0024 |  |
| [CVE-2024-57990](https://patchblox.com/security/data/cve/CVE-2024-57990.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21919](https://patchblox.com/security/data/cve/CVE-2025-21919.md) | High | kernel-64kb: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593). | 7.8 | 0.0024 |  |
| [CVE-2024-58034](https://patchblox.com/security/data/cve/CVE-2024-58034.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-58093](https://patchblox.com/security/data/cve/CVE-2024-58093.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21726](https://patchblox.com/security/data/cve/CVE-2025-21726.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21729](https://patchblox.com/security/data/cve/CVE-2025-21729.md) | High | kernel-64kb: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874). | 7.8 | 0.0024 |  |
| [CVE-2024-46782](https://patchblox.com/security/data/cve/CVE-2024-46782.md) | High | kernel-64kb: ila: call nf_unregister_net_hooks() sooner (bsc#1230769). | 7.8 | 0.0024 |  |
| [CVE-2025-21928](https://patchblox.com/security/data/cve/CVE-2025-21928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-22058](https://patchblox.com/security/data/cve/CVE-2025-22058.md) | High | kernel-64kb: udp: Fix memory accounting leak (bsc#1241332). | 7.3 | 0.0024 |  |
| [CVE-2024-58069](https://patchblox.com/security/data/cve/CVE-2024-58069.md) | High | kernel-tools: kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read | 7.8 | 0.0023 |  |
| [CVE-2025-21999](https://patchblox.com/security/data/cve/CVE-2025-21999.md) | High | kernel-64kb: proc: fix UAF in proc_get_inode() (bsc#1240802). | 7.8 | 0.0023 |  |
| [CVE-2025-21794](https://patchblox.com/security/data/cve/CVE-2025-21794.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2025-21950](https://patchblox.com/security/data/cve/CVE-2025-21950.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2025-22104](https://patchblox.com/security/data/cve/CVE-2025-22104.md) | High | kernel-64kb: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550). | 7.1 | 0.0023 |  |
| [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 |  |
| [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 |  |
| [CVE-2024-50126](https://patchblox.com/security/data/cve/CVE-2024-50126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-21790](https://patchblox.com/security/data/cve/CVE-2025-21790.md) | High | kernel-modules-core: kernel: vxlan: check vxlan_vnigroup_init() return value | 7.8 | 0.0023 |  |
| [CVE-2024-53680](https://patchblox.com/security/data/cve/CVE-2024-53680.md) | High | kernel-64kb: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715). | 7.8 | 0.0023 |  |
| [CVE-2025-37958](https://patchblox.com/security/data/cve/CVE-2025-37958.md) | High | mm/huge_memory: fix dereferencing invalid pmd migration entry | 7.1 | 0.0023 |  |
| [CVE-2024-56638](https://patchblox.com/security/data/cve/CVE-2024-56638.md) | High | kernel-64kb: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524). | 7.8 | 0.0023 |  |
| [CVE-2025-21806](https://patchblox.com/security/data/cve/CVE-2025-21806.md) | High | kernel-64kb: net: let net.core.dev_weight always be non-zero (bsc#1238746). | 7.8 | 0.0023 |  |
| [CVE-2025-22097](https://patchblox.com/security/data/cve/CVE-2025-22097.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-21991](https://patchblox.com/security/data/cve/CVE-2025-21991.md) | High | kernel-64kb: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795). | 7.8 | 0.0023 |  |
| [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 |  |
| [CVE-2024-58083](https://patchblox.com/security/data/cve/CVE-2024-58083.md) | High | kernel-64kb: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036). | 7.8 | 0.0022 |  |
| [CVE-2025-21738](https://patchblox.com/security/data/cve/CVE-2025-21738.md) | High | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 7.8 | 0.0022 |  |
| [CVE-2025-21856](https://patchblox.com/security/data/cve/CVE-2025-21856.md) | High | kernel-64kb: s390/ism: add release function for struct device (bsc#1239486). | 7.8 | 0.0022 |  |
| [CVE-2024-58014](https://patchblox.com/security/data/cve/CVE-2024-58014.md) | High | kernel-64k-core: kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() | 7.8 | 0.0022 |  |
| [CVE-2025-21739](https://patchblox.com/security/data/cve/CVE-2025-21739.md) | High | kernel-64kb: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506). | 7.8 | 0.0022 |  |
| [CVE-2025-21828](https://patchblox.com/security/data/cve/CVE-2025-21828.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21887](https://patchblox.com/security/data/cve/CVE-2025-21887.md) | High | kernel-64kb: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176). | 7.8 | 0.0022 |  |
| [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 |  |
| [CVE-2025-22107](https://patchblox.com/security/data/cve/CVE-2025-22107.md) | High | kernel-64kb: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (bsc#1241575). | 7.1 | 0.0022 |  |
| [CVE-2025-21727](https://patchblox.com/security/data/cve/CVE-2025-21727.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21883](https://patchblox.com/security/data/cve/CVE-2025-21883.md) | High | kernel-64kb: ice: Fix deinitializing VF in error path (bsc#1240189). | 7.8 | 0.0022 |  |
| [CVE-2025-21993](https://patchblox.com/security/data/cve/CVE-2025-21993.md) | High | kernel-64kb: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797). | 7.1 | 0.0022 |  |
| [CVE-2025-22121](https://patchblox.com/security/data/cve/CVE-2025-22121.md) | High | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | 7.1 | 0.0022 |  |
| [CVE-2024-41149](https://patchblox.com/security/data/cve/CVE-2024-41149.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0022 |  |
| [CVE-2025-21741](https://patchblox.com/security/data/cve/CVE-2025-21741.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21742](https://patchblox.com/security/data/cve/CVE-2025-21742.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21648](https://patchblox.com/security/data/cve/CVE-2025-21648.md) | High | kernel-64kb: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142). | 7.8 | 0.0022 |  |
| [CVE-2025-22020](https://patchblox.com/security/data/cve/CVE-2025-22020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21847](https://patchblox.com/security/data/cve/CVE-2025-21847.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-38606](https://patchblox.com/security/data/cve/CVE-2024-38606.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2025-21671](https://patchblox.com/security/data/cve/CVE-2025-21671.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21743](https://patchblox.com/security/data/cve/CVE-2025-21743.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21857](https://patchblox.com/security/data/cve/CVE-2025-21857.md) | High | kernel-64kb: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478). | 7.8 | 0.0022 |  |
| [CVE-2025-21979](https://patchblox.com/security/data/cve/CVE-2025-21979.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 |  |
| [CVE-2024-53139](https://patchblox.com/security/data/cve/CVE-2024-53139.md) | High | kernel-64kb: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157). | 7.8 | 0.0021 |  |
| [CVE-2024-58072](https://patchblox.com/security/data/cve/CVE-2024-58072.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21728](https://patchblox.com/security/data/cve/CVE-2025-21728.md) | High | kernel-64kb: bpf: Send signals asynchronously if !preemptible (bsc#1237879). | 7.8 | 0.0021 |  |
| [CVE-2025-21966](https://patchblox.com/security/data/cve/CVE-2025-21966.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21968](https://patchblox.com/security/data/cve/CVE-2025-21968.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21631](https://patchblox.com/security/data/cve/CVE-2025-21631.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21867](https://patchblox.com/security/data/cve/CVE-2025-21867.md) | High | kernel-64kb: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181). | 7.8 | 0.0021 |  |
| [CVE-2024-57993](https://patchblox.com/security/data/cve/CVE-2024-57993.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21923](https://patchblox.com/security/data/cve/CVE-2025-21923.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21750](https://patchblox.com/security/data/cve/CVE-2025-21750.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21915](https://patchblox.com/security/data/cve/CVE-2025-21915.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21962](https://patchblox.com/security/data/cve/CVE-2025-21962.md) | High | kernel-64kb: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655). | 7.8 | 0.0021 |  |
| [CVE-2025-21963](https://patchblox.com/security/data/cve/CVE-2025-21963.md) | High | kernel-64kb: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717). | 7.3 | 0.0021 |  |
| [CVE-2025-21964](https://patchblox.com/security/data/cve/CVE-2025-21964.md) | High | kernel-64kb: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740). | 7.0 | 0.0021 |  |
| [CVE-2025-21719](https://patchblox.com/security/data/cve/CVE-2025-21719.md) | High | kernel-64kb: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860). | 7.1 | 0.0021 |  |
| [CVE-2025-21734](https://patchblox.com/security/data/cve/CVE-2025-21734.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-21693](https://patchblox.com/security/data/cve/CVE-2025-21693.md) | High | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 7.8 | 0.0020 |  |
| [CVE-2025-22036](https://patchblox.com/security/data/cve/CVE-2025-22036.md) | High | kernel-64kb: exfat: fix random stack corruption after get_block (bsc#1241426). | 7.0 | 0.0020 |  |
| [CVE-2025-22126](https://patchblox.com/security/data/cve/CVE-2025-22126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-21985](https://patchblox.com/security/data/cve/CVE-2025-21985.md) | High | drm/amd/display: Fix out-of-bound accesses | 7.1 | 0.0020 |  |
| [CVE-2025-21869](https://patchblox.com/security/data/cve/CVE-2025-21869.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2024-58054](https://patchblox.com/security/data/cve/CVE-2024-58054.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2024-58061](https://patchblox.com/security/data/cve/CVE-2024-58061.md) | High | kernel-rt-modules: kernel: wifi: mac80211: prohibit deactivating all links | 7.8 | 0.0019 |  |
| [CVE-2025-37957](https://patchblox.com/security/data/cve/CVE-2025-37957.md) | High | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | 7.8 | 0.0019 |  |
| [CVE-2025-21815](https://patchblox.com/security/data/cve/CVE-2025-21815.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2024-41005](https://patchblox.com/security/data/cve/CVE-2024-41005.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_10: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858). | 7.8 | 0.0019 |  |
| [CVE-2024-58068](https://patchblox.com/security/data/cve/CVE-2024-58068.md) | High | kernel-64kb: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961). | 7.8 | 0.0019 |  |
| [CVE-2025-21724](https://patchblox.com/security/data/cve/CVE-2025-21724.md) | High | kernel-64kb: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863). | 7.8 | 0.0019 |  |
| [CVE-2025-37831](https://patchblox.com/security/data/cve/CVE-2025-37831.md) | High | cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() | 7.0 | 0.0019 |  |
| [CVE-2025-37833](https://patchblox.com/security/data/cve/CVE-2025-37833.md) | High | net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads | 7.0 | 0.0019 |  |
| [CVE-2025-37960](https://patchblox.com/security/data/cve/CVE-2025-37960.md) | High | memblock: Accept allocated memory before use in memblock_double_array() | 7.0 | 0.0019 |  |
| [CVE-2024-58088](https://patchblox.com/security/data/cve/CVE-2024-58088.md) | High | kernel-64kb: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). | 7.8 | 0.0018 |  |
| [CVE-2024-57974](https://patchblox.com/security/data/cve/CVE-2024-57974.md) | High | udp: Deal with race between UDP socket address change and rehash | 7.8 | 0.0018 |  |
| [CVE-2024-58057](https://patchblox.com/security/data/cve/CVE-2024-58057.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-50294](https://patchblox.com/security/data/cve/CVE-2024-50294.md) | High | kernel-64kb: rxrpc: Fix missing locking causing hanging calls (bsc#1233483). | 7.8 | 0.0017 |  |
| [CVE-2025-21718](https://patchblox.com/security/data/cve/CVE-2025-21718.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0017 |  |
| [CVE-2025-21732](https://patchblox.com/security/data/cve/CVE-2025-21732.md) | High | RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error | 7.8 | 0.0014 |  |
| [CVE-2025-21758](https://patchblox.com/security/data/cve/CVE-2025-21758.md) | Routine | kernel-64kb: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737). | 5.5 | 0.1693 |  |
| [CVE-2024-46763](https://patchblox.com/security/data/cve/CVE-2024-46763.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0071 |  |
| [CVE-2024-57973](https://patchblox.com/security/data/cve/CVE-2024-57973.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0067 |  |
| [CVE-2024-47408](https://patchblox.com/security/data/cve/CVE-2024-47408.md) | Routine | kernel-64kb: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711). | 5.5 | 0.0064 |  |
| [CVE-2025-22025](https://patchblox.com/security/data/cve/CVE-2025-22025.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0059 |  |
| [CVE-2025-21961](https://patchblox.com/security/data/cve/CVE-2025-21961.md) | Routine | eth: bnxt: fix truesize for mb-xdp-pass case | 5.5 | 0.0059 |  |
| [CVE-2024-49571](https://patchblox.com/security/data/cve/CVE-2024-49571.md) | Routine | kernel-64kb: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733). | 5.5 | 0.0059 |  |
| [CVE-2024-53124](https://patchblox.com/security/data/cve/CVE-2024-53124.md) | Routine | kernel-64kb: net: fix data-races around sk->sk_forward_alloc (bsc#1234074). | 4.7 | 0.0059 |  |
| [CVE-2025-23145](https://patchblox.com/security/data/cve/CVE-2025-23145.md) | Routine | mptcp: fix NULL pointer in can_accept_new_subflow | 5.5 | 0.0059 |  |
| [CVE-2025-21766](https://patchblox.com/security/data/cve/CVE-2025-21766.md) | Routine | kernel-64kb: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754). | 5.5 | 0.0057 |  |
| [CVE-2024-53176](https://patchblox.com/security/data/cve/CVE-2024-53176.md) | Routine | kernel-64kb: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894). | 5.5 | 0.0056 |  |
| [CVE-2025-21885](https://patchblox.com/security/data/cve/CVE-2025-21885.md) | Routine | RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers | 5.5 | 0.0056 |  |
| [CVE-2024-53178](https://patchblox.com/security/data/cve/CVE-2024-53178.md) | Routine | kernel-64kb: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895). | 6.3 | 0.0054 |  |
| [CVE-2024-56719](https://patchblox.com/security/data/cve/CVE-2024-56719.md) | Routine | net: stmmac: fix TSO DMA API usage causing oops | 5.5 | 0.0054 |  |
| [CVE-2025-21707](https://patchblox.com/security/data/cve/CVE-2025-21707.md) | Routine | kernel-64kb: mptcp: consolidate suboption status (bsc#1238862). | 5.5 | 0.0054 |  |
| [CVE-2025-21960](https://patchblox.com/security/data/cve/CVE-2025-21960.md) | Routine | kernel-64kb: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815). | 5.7 | 0.0053 |  |
| [CVE-2024-56641](https://patchblox.com/security/data/cve/CVE-2024-56641.md) | Routine | net/smc: initialize close_work early to avoid warning | 5.5 | 0.0053 |  |
| [CVE-2024-50162](https://patchblox.com/security/data/cve/CVE-2024-50162.md) | Routine | kernel-64kb: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075). | 5.5 | 0.0052 |  |
| [CVE-2024-56703](https://patchblox.com/security/data/cve/CVE-2024-56703.md) | Routine | ipv6: Fix soft lockups in fib6_select_path under high next hop churn | 5.5 | 0.0050 |  |
| [CVE-2024-50152](https://patchblox.com/security/data/cve/CVE-2024-50152.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 |  |
| [CVE-2025-22021](https://patchblox.com/security/data/cve/CVE-2025-22021.md) | Routine | kernel-64kb: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282). | 5.5 | 0.0048 |  |
| [CVE-2024-56718](https://patchblox.com/security/data/cve/CVE-2024-56718.md) | Routine | kernel-source: net/smc: protect link down work from execute after lgr freed (bsc#1235589). | 5.9 | 0.0047 |  |
| [CVE-2025-21850](https://patchblox.com/security/data/cve/CVE-2025-21850.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0042 |  |
| [CVE-2025-37820](https://patchblox.com/security/data/cve/CVE-2025-37820.md) | Routine | xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() | 5.5 | 0.0040 |  |
| [CVE-2025-21725](https://patchblox.com/security/data/cve/CVE-2025-21725.md) | Routine | kernel-64kb: smb: client: fix oops due to unset link speed (bsc#1238877). | 5.5 | 0.0040 |  |
| [CVE-2025-21890](https://patchblox.com/security/data/cve/CVE-2025-21890.md) | Routine | kernel-64kb: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173). | 5.5 | 0.0039 |  |
| [CVE-2025-22108](https://patchblox.com/security/data/cve/CVE-2025-22108.md) | Routine | bnxt_en: Mask the bd_cnt field in the TX BD properly | 5.5 | 0.0038 |  |
| [CVE-2025-37755](https://patchblox.com/security/data/cve/CVE-2025-37755.md) | Routine | net: libwx: handle page_pool_dev_alloc_pages error | 5.5 | 0.0038 |  |
| [CVE-2024-57997](https://patchblox.com/security/data/cve/CVE-2024-57997.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0033 |  |
| [CVE-2025-38637](https://patchblox.com/security/data/cve/CVE-2025-38637.md) | Routine | kernel-64kb: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657). | 5.5 | 0.0033 |  |
| [CVE-2024-49940](https://patchblox.com/security/data/cve/CVE-2024-49940.md) | Routine | l2tp: prevent possible tunnel refcount underflow | 5.5 | 0.0033 |  |
| [CVE-2024-58096](https://patchblox.com/security/data/cve/CVE-2024-58096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0032 |  |
| [CVE-2025-21972](https://patchblox.com/security/data/cve/CVE-2025-21972.md) | Routine | kernel-64kb: net: mctp: unshare packets when reassembling (bsc#1240813). | 5.5 | 0.0032 |  |
| [CVE-2025-37860](https://patchblox.com/security/data/cve/CVE-2025-37860.md) | Routine | kernel-coco: CVE-2025-22105, Add missing bugzilla references (bsc#1241452 bsc#1241548). | 5.5 | 0.0032 |  |
| [CVE-2025-37870](https://patchblox.com/security/data/cve/CVE-2025-37870.md) | Routine | drm/amd/display: prevent hang on link training fail | 5.5 | 0.0031 |  |
| [CVE-2025-37886](https://patchblox.com/security/data/cve/CVE-2025-37886.md) | Routine | pds_core: make wait_context part of q_info | 5.5 | 0.0030 |  |
| [CVE-2025-22062](https://patchblox.com/security/data/cve/CVE-2025-22062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-22086](https://patchblox.com/security/data/cve/CVE-2025-22086.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37887](https://patchblox.com/security/data/cve/CVE-2025-37887.md) | Routine | pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result | 5.5 | 0.0029 |  |
| [CVE-2025-40325](https://patchblox.com/security/data/cve/CVE-2025-40325.md) | Routine | md/raid10: wait barrier before returning discard request with REQ_NOWAIT | 5.5 | 0.0028 |  |
| [CVE-2024-53063](https://patchblox.com/security/data/cve/CVE-2024-53063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2025-37842](https://patchblox.com/security/data/cve/CVE-2025-37842.md) | Routine | spi: fsl-qspi: use devm function instead of driver remove | 5.5 | 0.0028 |  |
| [CVE-2025-21776](https://patchblox.com/security/data/cve/CVE-2025-21776.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2025-39728](https://patchblox.com/security/data/cve/CVE-2025-39728.md) | Routine | kernel-64kb: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626). | 5.5 | 0.0028 |  |
| [CVE-2024-47794](https://patchblox.com/security/data/cve/CVE-2024-47794.md) | Routine | bpf: Prevent tailcall infinite loop caused by freplace | 5.5 | 0.0028 |  |
| [CVE-2024-57924](https://patchblox.com/security/data/cve/CVE-2024-57924.md) | Routine | kernel-64kb: fs: relax assertions on failure to encode file handles (bsc#1236086). | 5.5 | 0.0028 |  |
| [CVE-2025-38152](https://patchblox.com/security/data/cve/CVE-2025-38152.md) | Routine | kernel-64kb: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627). | 5.5 | 0.0027 |  |
| [CVE-2024-56770](https://patchblox.com/security/data/cve/CVE-2024-56770.md) | Routine | kernel-64kb: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637). | 5.5 | 0.0027 |  |
| [CVE-2024-57999](https://patchblox.com/security/data/cve/CVE-2024-57999.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2025-21917](https://patchblox.com/security/data/cve/CVE-2025-21917.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2025-22064](https://patchblox.com/security/data/cve/CVE-2025-22064.md) | Routine | kernel-64kb: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413). | 5.5 | 0.0027 |  |
| [CVE-2025-22065](https://patchblox.com/security/data/cve/CVE-2025-22065.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2025-21870](https://patchblox.com/security/data/cve/CVE-2025-21870.md) | Routine | ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers | 5.5 | 0.0026 |  |
| [CVE-2025-21814](https://patchblox.com/security/data/cve/CVE-2025-21814.md) | Routine | kernel-64kb: ptp: Ensure info->enable callback is always set (bsc#1238473). | 5.5 | 0.0026 |  |
| [CVE-2024-35910](https://patchblox.com/security/data/cve/CVE-2024-35910.md) | Routine | kernel-64kb: tcp: properly terminate timers for kernel sockets (bsc#1224489). | 5.8 | 0.0026 |  |
| [CVE-2025-21723](https://patchblox.com/security/data/cve/CVE-2025-21723.md) | Routine | scsi: mpi3mr: Fix possible crash when setting up bsg fails | 5.5 | 0.0026 |  |
| [CVE-2025-22109](https://patchblox.com/security/data/cve/CVE-2025-22109.md) | Routine | ax25: Remove broken autobind | 5.5 | 0.0026 |  |
| [CVE-2025-21875](https://patchblox.com/security/data/cve/CVE-2025-21875.md) | Routine | kernel-64kb: mptcp: always handle address removal under msk socket lock (bsc#1240168). | 5.5 | 0.0026 |  |
| [CVE-2024-50290](https://patchblox.com/security/data/cve/CVE-2024-50290.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-58017](https://patchblox.com/security/data/cve/CVE-2024-58017.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2025-21635](https://patchblox.com/security/data/cve/CVE-2025-21635.md) | Routine | rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy | 5.5 | 0.0025 |  |
| [CVE-2025-21736](https://patchblox.com/security/data/cve/CVE-2025-21736.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2025-21744](https://patchblox.com/security/data/cve/CVE-2025-21744.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2025-21768](https://patchblox.com/security/data/cve/CVE-2025-21768.md) | Routine | net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels | 5.5 | 0.0025 |  |
| [CVE-2025-21836](https://patchblox.com/security/data/cve/CVE-2025-21836.md) | Routine | kernel-64kb: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066). | 6.1 | 0.0025 |  |
| [CVE-2024-27415](https://patchblox.com/security/data/cve/CVE-2024-27415.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2025-21862](https://patchblox.com/security/data/cve/CVE-2025-21862.md) | Routine | kernel-64kb: drop_monitor: fix incorrect initialization order (bsc#1239474). | 5.5 | 0.0025 |  |
| [CVE-2025-21865](https://patchblox.com/security/data/cve/CVE-2025-21865.md) | Routine | kernel-64kb: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481). | 5.5 | 0.0025 |  |
| [CVE-2025-21779](https://patchblox.com/security/data/cve/CVE-2025-21779.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-56702](https://patchblox.com/security/data/cve/CVE-2024-56702.md) | Routine | bpf: Mark raw_tp arguments with PTR_MAYBE_NULL | 5.5 | 0.0025 |  |
| [CVE-2025-21866](https://patchblox.com/security/data/cve/CVE-2025-21866.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53163](https://patchblox.com/security/data/cve/CVE-2024-53163.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-56758](https://patchblox.com/security/data/cve/CVE-2024-56758.md) | Routine | kernel-64kb: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621). | 5.5 | 0.0025 |  |
| [CVE-2024-52559](https://patchblox.com/security/data/cve/CVE-2024-52559.md) | Routine | drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() | 5.5 | 0.0025 |  |
| [CVE-2024-57834](https://patchblox.com/security/data/cve/CVE-2024-57834.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53140](https://patchblox.com/security/data/cve/CVE-2024-53140.md) | Routine | kernel-64kb: netlink: terminate outstanding dump on socket close (bsc#1234222). | 5.5 | 0.0025 |  |
| [CVE-2025-22070](https://patchblox.com/security/data/cve/CVE-2025-22070.md) | Routine | kernel-64kb: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305). | 5.5 | 0.0025 |  |
| [CVE-2025-21886](https://patchblox.com/security/data/cve/CVE-2025-21886.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-21888](https://patchblox.com/security/data/cve/CVE-2025-21888.md) | Routine | RDMA/mlx5: Fix a WARN during dereg_mr for DM type | 5.5 | 0.0024 |  |
| [CVE-2024-58052](https://patchblox.com/security/data/cve/CVE-2024-58052.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-22045](https://patchblox.com/security/data/cve/CVE-2025-22045.md) | Routine | kernel-64kb: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433). | 5.5 | 0.0024 |  |
| [CVE-2025-21924](https://patchblox.com/security/data/cve/CVE-2025-21924.md) | Routine | kernel-64kb: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). | 5.5 | 0.0024 |  |
| [CVE-2025-37790](https://patchblox.com/security/data/cve/CVE-2025-37790.md) | Routine | net: mctp: Set SOCK_RCU_FREE | 5.5 | 0.0024 |  |
| [CVE-2024-49994](https://patchblox.com/security/data/cve/CVE-2024-49994.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-21792](https://patchblox.com/security/data/cve/CVE-2025-21792.md) | Routine | ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt | 5.5 | 0.0024 |  |
| [CVE-2023-52831](https://patchblox.com/security/data/cve/CVE-2023-52831.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-21823](https://patchblox.com/security/data/cve/CVE-2025-21823.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-37949](https://patchblox.com/security/data/cve/CVE-2025-37949.md) | Routine | kernel-64kb: xenbus: Use kref to track req lifetime (bsc#1243541). | 5.5 | 0.0024 |  |
| [CVE-2024-50223](https://patchblox.com/security/data/cve/CVE-2024-50223.md) | Routine | kernel-64kb: sched/numa: Fix the potential null pointer dereference in (bsc#1233192). | 5.5 | 0.0024 |  |
| [CVE-2024-58058](https://patchblox.com/security/data/cve/CVE-2024-58058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-21925](https://patchblox.com/security/data/cve/CVE-2025-21925.md) | Routine | kernel-64kb: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713). | 5.5 | 0.0024 |  |
| [CVE-2025-21754](https://patchblox.com/security/data/cve/CVE-2025-21754.md) | Routine | kernel-64kb: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496). | 5.5 | 0.0023 |  |
| [CVE-2025-21877](https://patchblox.com/security/data/cve/CVE-2025-21877.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21904](https://patchblox.com/security/data/cve/CVE-2025-21904.md) | Routine | kernel-64kb: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576). | 5.5 | 0.0023 |  |
| [CVE-2025-21910](https://patchblox.com/security/data/cve/CVE-2025-21910.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21916](https://patchblox.com/security/data/cve/CVE-2025-21916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21918](https://patchblox.com/security/data/cve/CVE-2025-21918.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21922](https://patchblox.com/security/data/cve/CVE-2025-21922.md) | Routine | kernel-64kb: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639). | 5.5 | 0.0023 |  |
| [CVE-2025-21935](https://patchblox.com/security/data/cve/CVE-2025-21935.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21948](https://patchblox.com/security/data/cve/CVE-2025-21948.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21956](https://patchblox.com/security/data/cve/CVE-2025-21956.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21957](https://patchblox.com/security/data/cve/CVE-2025-21957.md) | Routine | kernel-64kb: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742). | 5.5 | 0.0023 |  |
| [CVE-2024-50038](https://patchblox.com/security/data/cve/CVE-2024-50038.md) | Routine | kernel-64kb: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910). | 5.5 | 0.0023 |  |
| [CVE-2024-58097](https://patchblox.com/security/data/cve/CVE-2024-58097.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21913](https://patchblox.com/security/data/cve/CVE-2025-21913.md) | Routine | kernel-64kb: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591). | 5.5 | 0.0023 |  |
| [CVE-2024-50140](https://patchblox.com/security/data/cve/CVE-2024-50140.md) | Routine | kernel-64kb: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060). | 5.5 | 0.0023 |  |
| [CVE-2024-58001](https://patchblox.com/security/data/cve/CVE-2024-58001.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21835](https://patchblox.com/security/data/cve/CVE-2025-21835.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21936](https://patchblox.com/security/data/cve/CVE-2025-21936.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21937](https://patchblox.com/security/data/cve/CVE-2025-21937.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-22015](https://patchblox.com/security/data/cve/CVE-2025-22015.md) | Routine | kernel-64kb: mm/migrate: fix shmem xarray update during migration (bsc#1240944). | 5.5 | 0.0023 |  |
| [CVE-2024-58051](https://patchblox.com/security/data/cve/CVE-2024-58051.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21799](https://patchblox.com/security/data/cve/CVE-2025-21799.md) | Routine | kernel-64kb: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() (bsc#1238739). | 5.5 | 0.0023 |  |
| [CVE-2025-22018](https://patchblox.com/security/data/cve/CVE-2025-22018.md) | Routine | kernel-64kb: atm: Fix NULL pointer dereference (bsc#1241266). | 5.5 | 0.0023 |  |
| [CVE-2024-26634](https://patchblox.com/security/data/cve/CVE-2024-26634.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21711](https://patchblox.com/security/data/cve/CVE-2025-21711.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21941](https://patchblox.com/security/data/cve/CVE-2025-21941.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21971](https://patchblox.com/security/data/cve/CVE-2025-21971.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-23136](https://patchblox.com/security/data/cve/CVE-2025-23136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-58011](https://patchblox.com/security/data/cve/CVE-2024-58011.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-58063](https://patchblox.com/security/data/cve/CVE-2024-58063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-58094](https://patchblox.com/security/data/cve/CVE-2024-58094.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21683](https://patchblox.com/security/data/cve/CVE-2025-21683.md) | Routine | kernel-64kb: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704). | 5.5 | 0.0023 |  |
| [CVE-2024-41077](https://patchblox.com/security/data/cve/CVE-2024-41077.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21708](https://patchblox.com/security/data/cve/CVE-2025-21708.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21781](https://patchblox.com/security/data/cve/CVE-2025-21781.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21906](https://patchblox.com/security/data/cve/CVE-2025-21906.md) | Routine | kernel-64kb: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587). | 5.5 | 0.0023 |  |
| [CVE-2025-22007](https://patchblox.com/security/data/cve/CVE-2025-22007.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22009](https://patchblox.com/security/data/cve/CVE-2025-22009.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22013](https://patchblox.com/security/data/cve/CVE-2025-22013.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-23140](https://patchblox.com/security/data/cve/CVE-2025-23140.md) | Routine | misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | 5.5 | 0.0022 |  |
| [CVE-2024-57978](https://patchblox.com/security/data/cve/CVE-2024-57978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-21775](https://patchblox.com/security/data/cve/CVE-2025-21775.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-21881](https://patchblox.com/security/data/cve/CVE-2025-21881.md) | Routine | uprobes: Reject the shared zeropage in uprobe_write_opcode() | 5.5 | 0.0022 |  |
| [CVE-2025-22080](https://patchblox.com/security/data/cve/CVE-2025-22080.md) | Routine | kernel-64kb: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416). | 5.5 | 0.0022 |  |
| [CVE-2025-21773](https://patchblox.com/security/data/cve/CVE-2025-21773.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-21793](https://patchblox.com/security/data/cve/CVE-2025-21793.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-21705](https://patchblox.com/security/data/cve/CVE-2025-21705.md) | Routine | kernel-64kb: mptcp: handle fastopen disconnect correctly (bsc#1238525). | 5.5 | 0.0022 |  |
| [CVE-2025-21706](https://patchblox.com/security/data/cve/CVE-2025-21706.md) | Routine | kernel-64kb: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528). | 5.5 | 0.0022 |  |
| [CVE-2025-22044](https://patchblox.com/security/data/cve/CVE-2025-22044.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22057](https://patchblox.com/security/data/cve/CVE-2025-22057.md) | Routine | net: decrease cached dst counters in dst_release | 6.6 | 0.0022 |  |
| [CVE-2024-56751](https://patchblox.com/security/data/cve/CVE-2024-56751.md) | Routine | kernel-docs: ipv6: release nexthop on device removal (bsc#1234936). | 6.4 | 0.0022 |  |
| [CVE-2024-35840](https://patchblox.com/security/data/cve/CVE-2024-35840.md) | Routine | kernel-64kb: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597). | 5.5 | 0.0022 |  |
| [CVE-2024-50056](https://patchblox.com/security/data/cve/CVE-2024-50056.md) | Routine | kernel-64kb: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389). | 5.5 | 0.0022 |  |
| [CVE-2025-22075](https://patchblox.com/security/data/cve/CVE-2025-22075.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 |  |
| [CVE-2025-21825](https://patchblox.com/security/data/cve/CVE-2025-21825.md) | Routine | bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT | 4.7 | 0.0022 |  |
| [CVE-2025-21871](https://patchblox.com/security/data/cve/CVE-2025-21871.md) | Routine | kernel-64kb: tee: optee: Fix supplicant wait loop (bsc#1240183). | 5.5 | 0.0022 |  |
| [CVE-2025-21884](https://patchblox.com/security/data/cve/CVE-2025-21884.md) | Routine | kernel-64kb: net: better track kernel sockets lifetime (bsc#1240171). | 5.5 | 0.0022 |  |
| [CVE-2025-21970](https://patchblox.com/security/data/cve/CVE-2025-21970.md) | Routine | kernel-64kb: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819). | 5.5 | 0.0022 |  |
| [CVE-2025-21996](https://patchblox.com/security/data/cve/CVE-2025-21996.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22102](https://patchblox.com/security/data/cve/CVE-2025-22102.md) | Routine | kernel-64kb: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456). | 5.5 | 0.0022 |  |
| [CVE-2024-50163](https://patchblox.com/security/data/cve/CVE-2024-50163.md) | Routine | kernel-64kb: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098). | 5.5 | 0.0022 |  |
| [CVE-2025-21852](https://patchblox.com/security/data/cve/CVE-2025-21852.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-21876](https://patchblox.com/security/data/cve/CVE-2025-21876.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22008](https://patchblox.com/security/data/cve/CVE-2025-22008.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-23160](https://patchblox.com/security/data/cve/CVE-2025-23160.md) | Routine | kernel-64kb: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507). | 5.5 | 0.0022 |  |
| [CVE-2025-21833](https://patchblox.com/security/data/cve/CVE-2025-21833.md) | Routine | iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE | 5.5 | 0.0022 |  |
| [CVE-2025-23138](https://patchblox.com/security/data/cve/CVE-2025-23138.md) | Routine | kernel-64kb: watch_queue: fix pipe accounting mismatch (bsc#1241648). | 5.5 | 0.0022 |  |
| [CVE-2025-21980](https://patchblox.com/security/data/cve/CVE-2025-21980.md) | Routine | kernel-64kb: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809). | 5.5 | 0.0021 |  |
| [CVE-2025-2312](https://patchblox.com/security/data/cve/CVE-2025-2312.md) | Routine | cifs-utils: Fixed cifs.upcall making an upcall to the wrong | 5.9 | 0.0021 |  |
| [CVE-2024-58085](https://patchblox.com/security/data/cve/CVE-2024-58085.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21894](https://patchblox.com/security/data/cve/CVE-2025-21894.md) | Routine | kernel-64kb: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581). | 5.5 | 0.0021 |  |
| [CVE-2024-35826](https://patchblox.com/security/data/cve/CVE-2024-35826.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21802](https://patchblox.com/security/data/cve/CVE-2025-21802.md) | Routine | kernel-64kb: net: hns3: fix oops when unload drivers paralleling (bsc#1238751). | 5.5 | 0.0021 |  |
| [CVE-2025-21930](https://patchblox.com/security/data/cve/CVE-2025-21930.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21975](https://patchblox.com/security/data/cve/CVE-2025-21975.md) | Routine | kernel-64kb: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812). | 5.5 | 0.0021 |  |
| [CVE-2025-21981](https://patchblox.com/security/data/cve/CVE-2025-21981.md) | Routine | kernel-64kb: ice: fix memory leak in aRFS after reset (bsc#1240612). | 5.5 | 0.0021 |  |
| [CVE-2024-42307](https://patchblox.com/security/data/cve/CVE-2024-42307.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-58079](https://patchblox.com/security/data/cve/CVE-2024-58079.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22017](https://patchblox.com/security/data/cve/CVE-2025-22017.md) | Routine | kernel-64kb: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936). | 5.5 | 0.0021 |  |
| [CVE-2025-37824](https://patchblox.com/security/data/cve/CVE-2025-37824.md) | Routine | tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | 5.5 | 0.0021 |  |
| [CVE-2025-37829](https://patchblox.com/security/data/cve/CVE-2025-37829.md) | Routine | cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | 5.5 | 0.0021 |  |
| [CVE-2025-21838](https://patchblox.com/security/data/cve/CVE-2025-21838.md) | Routine | usb: gadget: core: flush gadget workqueue after device removal | 6.0 | 0.0021 |  |
| [CVE-2024-58095](https://patchblox.com/security/data/cve/CVE-2024-58095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22033](https://patchblox.com/security/data/cve/CVE-2025-22033.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22093](https://patchblox.com/security/data/cve/CVE-2025-22093.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22103](https://patchblox.com/security/data/cve/CVE-2025-22103.md) | Routine | kernel-64kb: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448). | 5.5 | 0.0021 |  |
| [CVE-2025-22105](https://patchblox.com/security/data/cve/CVE-2025-22105.md) | Routine | kernel-64kb: CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548). | 5.5 | 0.0021 |  |
| [CVE-2025-21784](https://patchblox.com/security/data/cve/CVE-2025-21784.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21873](https://patchblox.com/security/data/cve/CVE-2025-21873.md) | Routine | kernel-64kb: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184). | 5.5 | 0.0021 |  |
| [CVE-2025-21891](https://patchblox.com/security/data/cve/CVE-2025-21891.md) | Routine | ipvlan: ensure network headers are in skb linear part | 5.5 | 0.0021 |  |
| [CVE-2025-21992](https://patchblox.com/security/data/cve/CVE-2025-21992.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-58009](https://patchblox.com/security/data/cve/CVE-2024-58009.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22106](https://patchblox.com/security/data/cve/CVE-2025-22106.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22116](https://patchblox.com/security/data/cve/CVE-2025-22116.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21716](https://patchblox.com/security/data/cve/CVE-2025-21716.md) | Routine | kernel-64kb: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891). | 5.5 | 0.0021 |  |
| [CVE-2025-21749](https://patchblox.com/security/data/cve/CVE-2025-21749.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21804](https://patchblox.com/security/data/cve/CVE-2025-21804.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21889](https://patchblox.com/security/data/cve/CVE-2025-21889.md) | Routine | kernel-64kb: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167). | 5.5 | 0.0021 |  |
| [CVE-2025-22016](https://patchblox.com/security/data/cve/CVE-2025-22016.md) | Routine | kernel-64kb: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934). | 5.5 | 0.0021 |  |
| [CVE-2025-37809](https://patchblox.com/security/data/cve/CVE-2025-37809.md) | Routine | kernel-64kb: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856). | 5.5 | 0.0020 |  |
| [CVE-2025-22030](https://patchblox.com/security/data/cve/CVE-2025-22030.md) | Routine | kernel-64kb: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376). | 5.5 | 0.0020 |  |
| [CVE-2025-21808](https://patchblox.com/security/data/cve/CVE-2025-21808.md) | Routine | kernel-64kb: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742). | 5.5 | 0.0020 |  |
| [CVE-2025-21810](https://patchblox.com/security/data/cve/CVE-2025-21810.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-22050](https://patchblox.com/security/data/cve/CVE-2025-22050.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-58019](https://patchblox.com/security/data/cve/CVE-2024-58019.md) | Routine | kernel-64kb: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997). | 5.5 | 0.0020 |  |
| [CVE-2025-22001](https://patchblox.com/security/data/cve/CVE-2025-22001.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-22003](https://patchblox.com/security/data/cve/CVE-2025-22003.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-37773](https://patchblox.com/security/data/cve/CVE-2025-37773.md) | Routine | virtiofs: add filesystem context source name check | 5.5 | 0.0020 |  |
| [CVE-2024-43820](https://patchblox.com/security/data/cve/CVE-2024-43820.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-58086](https://patchblox.com/security/data/cve/CVE-2024-58086.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-21733](https://patchblox.com/security/data/cve/CVE-2025-21733.md) | Routine | kernel-64kb: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494). | 5.5 | 0.0020 |  |
| [CVE-2025-23131](https://patchblox.com/security/data/cve/CVE-2025-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-21821](https://patchblox.com/security/data/cve/CVE-2025-21821.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-21978](https://patchblox.com/security/data/cve/CVE-2025-21978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-21995](https://patchblox.com/security/data/cve/CVE-2025-21995.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0019 |  |
| [CVE-2024-58018](https://patchblox.com/security/data/cve/CVE-2024-58018.md) | Routine | kernel-64kb: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990). | 5.5 | 0.0019 |  |
| [CVE-2025-22125](https://patchblox.com/security/data/cve/CVE-2025-22125.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-21819](https://patchblox.com/security/data/cve/CVE-2025-21819.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-21832](https://patchblox.com/security/data/cve/CVE-2025-21832.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-21859](https://patchblox.com/security/data/cve/CVE-2025-21859.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-23129](https://patchblox.com/security/data/cve/CVE-2025-23129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37830](https://patchblox.com/security/data/cve/CVE-2025-37830.md) | Routine | cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() | 5.5 | 0.0019 |  |
| [CVE-2025-22128](https://patchblox.com/security/data/cve/CVE-2025-22128.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37787](https://patchblox.com/security/data/cve/CVE-2025-37787.md) | Routine | net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | 5.5 | 0.0019 |  |
| [CVE-2025-37748](https://patchblox.com/security/data/cve/CVE-2025-37748.md) | Routine | kernel-64kb: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523). | 5.5 | 0.0019 |  |
| [CVE-2024-58076](https://patchblox.com/security/data/cve/CVE-2024-58076.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37974](https://patchblox.com/security/data/cve/CVE-2025-37974.md) | Routine | kernel-64kb: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547). | 6.4 | 0.0019 |  |
| [CVE-2025-22010](https://patchblox.com/security/data/cve/CVE-2025-22010.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-22014](https://patchblox.com/security/data/cve/CVE-2025-22014.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-58056](https://patchblox.com/security/data/cve/CVE-2024-58056.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-21830](https://patchblox.com/security/data/cve/CVE-2025-21830.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-58078](https://patchblox.com/security/data/cve/CVE-2024-58078.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-58080](https://patchblox.com/security/data/cve/CVE-2024-58080.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-21659](https://patchblox.com/security/data/cve/CVE-2025-21659.md) | Routine | kernel-64kb: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206). | 5.5 | 0.0018 |  |
| [CVE-2025-21831](https://patchblox.com/security/data/cve/CVE-2025-21831.md) | Routine | PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 | 5.5 | 0.0018 |  |
| [CVE-2025-22115](https://patchblox.com/security/data/cve/CVE-2025-22115.md) | Routine | btrfs: fix block group refcount race in btrfs_create_pending_block_groups() | 5.5 | 0.0018 |  |
| [CVE-2025-21912](https://patchblox.com/security/data/cve/CVE-2025-21912.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-21767](https://patchblox.com/security/data/cve/CVE-2025-21767.md) | Routine | kernel-64kb: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (bsc#1238509). | 5.5 | 0.0018 |  |
| [CVE-2025-21878](https://patchblox.com/security/data/cve/CVE-2025-21878.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-21909](https://patchblox.com/security/data/cve/CVE-2025-21909.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-58071](https://patchblox.com/security/data/cve/CVE-2024-58071.md) | Routine | kernel-64kb: team: prevent adding a device which is already a team device lower (bsc#1238970). | 5.5 | 0.0018 |  |
| [CVE-2025-21953](https://patchblox.com/security/data/cve/CVE-2025-21953.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0018 |  |
| [CVE-2024-57807](https://patchblox.com/security/data/cve/CVE-2024-57807.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.4 | 0.0018 |  |
| [CVE-2025-21908](https://patchblox.com/security/data/cve/CVE-2025-21908.md) | Routine | kernel-64kb: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600). | 5.5 | 0.0017 |  |
| [CVE-2025-21701](https://patchblox.com/security/data/cve/CVE-2025-21701.md) | Routine | kernel-64kb: net: avoid race between device unregistration and ethnl ops (bsc#1237164). | 4.7 | 0.0017 |  |
| [CVE-2024-26873](https://patchblox.com/security/data/cve/CVE-2024-26873.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-21943](https://patchblox.com/security/data/cve/CVE-2025-21943.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2025-21951](https://patchblox.com/security/data/cve/CVE-2025-21951.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-22027](https://patchblox.com/security/data/cve/CVE-2025-22027.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2025-21820](https://patchblox.com/security/data/cve/CVE-2025-21820.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-21892](https://patchblox.com/security/data/cve/CVE-2025-21892.md) | Routine | RDMA/mlx5: Fix the recovery flow of the UMR QP | 4.7 | 0.0017 |  |
| [CVE-2024-57994](https://patchblox.com/security/data/cve/CVE-2024-57994.md) | Routine | kernel-64kb: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901). | 5.5 | 0.0016 |  |
| [CVE-2024-54683](https://patchblox.com/security/data/cve/CVE-2024-54683.md) | Routine | kernel-64kb: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729). | 5.5 | 0.0016 |  |
| [CVE-2025-22060](https://patchblox.com/security/data/cve/CVE-2025-22060.md) | Routine | kernel-64kb: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526). | 5.5 | 0.0016 |  |
| [CVE-2025-21931](https://patchblox.com/security/data/cve/CVE-2025-21931.md) | Routine | kernel-64kb: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709). | 5.5 | 0.0016 |  |
| [CVE-2025-22053](https://patchblox.com/security/data/cve/CVE-2025-22053.md) | Routine | kernel-64kb: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373). | 5.5 | 0.0016 |  |
| [CVE-2024-58070](https://patchblox.com/security/data/cve/CVE-2024-58070.md) | Routine | kernel-64kb: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983). | 5.5 | 0.0015 |  |
| [CVE-2025-21895](https://patchblox.com/security/data/cve/CVE-2025-21895.md) | Routine | kernel-64kb: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585). | 4.7 | 0.0015 |  |
| [CVE-2025-21755](https://patchblox.com/security/data/cve/CVE-2025-21755.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |
| [CVE-2025-22029](https://patchblox.com/security/data/cve/CVE-2025-22029.md) | Routine | kernel-64kb: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378). | n/a | n/a |  |
| [CVE-2025-37804](https://patchblox.com/security/data/cve/CVE-2025-37804.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.