# SUSE-SU-2025:01964-1: Security update for 5 packages

SUSE-SU-2025:01964-1, released June 16, 2025, fixes 339 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-01964-1
- Platform: Linux
- Released: Jun 16, 2025
- Priority: Urgent (Closes CVE-2025-22088, rated Critical)
- CVEs: 339, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:01964-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP6-RT_Update_11](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-rt-update-11.md) | sles 15.6 | 1-150600.1.3.2 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.39.1 |
| [kernel-rt_debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kernel-rt-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.10.39.1 |
| [kernel-source-rt](https://patchblox.com/security/data/product/linux/kernel-source-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.39.1 |
| [kernel-syms-rt](https://patchblox.com/security/data/product/linux/kernel-syms-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.39.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-22088](https://patchblox.com/security/data/cve/CVE-2025-22088.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 |  |
| [CVE-2024-50083](https://patchblox.com/security/data/cve/CVE-2024-50083.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0087 |  |
| [CVE-2025-37928](https://patchblox.com/security/data/cve/CVE-2025-37928.md) | High | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 |  |
| [CVE-2025-37879](https://patchblox.com/security/data/cve/CVE-2025-37879.md) | High | 9p/net: fix improper handling of bogus negative read/write replies | 7.1 | 0.0073 |  |
| [CVE-2024-27018](https://patchblox.com/security/data/cve/CVE-2024-27018.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0064 |  |
| [CVE-2025-21927](https://patchblox.com/security/data/cve/CVE-2025-21927.md) | High | nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() | 8.0 | 0.0062 |  |
| [CVE-2024-46865](https://patchblox.com/security/data/cve/CVE-2024-46865.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0055 |  |
| [CVE-2025-37750](https://patchblox.com/security/data/cve/CVE-2025-37750.md) | High | smb: client: fix UAF in decryption with multichannel | 7.8 | 0.0050 |  |
| [CVE-2024-50106](https://patchblox.com/security/data/cve/CVE-2024-50106.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0050 |  |
| [CVE-2024-28956](https://patchblox.com/security/data/cve/CVE-2024-28956.md) | High | kernel-64kb: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). | 7.8 | 0.0043 |  |
| [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 |  |
| [CVE-2025-37799](https://patchblox.com/security/data/cve/CVE-2025-37799.md) | High | kernel-64kb: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283). | 9.4 | 0.0037 |  |
| [CVE-2025-37954](https://patchblox.com/security/data/cve/CVE-2025-37954.md) | High | smb: client: Avoid race in open_cached_dir with lease breaks | 7.0 | 0.0037 |  |
| [CVE-2025-22004](https://patchblox.com/security/data/cve/CVE-2025-22004.md) | High | kernel-64kb: net: atm: fix use after free in lec_send() (bsc#1240835). | 8.6 | 0.0036 |  |
| [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 |  |
| [CVE-2024-58099](https://patchblox.com/security/data/cve/CVE-2024-58099.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0033 |  |
| [CVE-2025-37840](https://patchblox.com/security/data/cve/CVE-2025-37840.md) | High | mtd: rawnand: brcmnand: fix PM resume warning | 7.8 | 0.0033 |  |
| [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525). | 7.8 | 0.0033 |  |
| [CVE-2025-37858](https://patchblox.com/security/data/cve/CVE-2025-37858.md) | High | fs/jfs: Prevent integer overflow in AG size calculation | 7.8 | 0.0031 |  |
| [CVE-2025-37785](https://patchblox.com/security/data/cve/CVE-2025-37785.md) | High | kernel-64kb: ext4: fix OOB read when checking dotdot dir (bsc#1241640). | 7.1 | 0.0031 |  |
| [CVE-2025-23133](https://patchblox.com/security/data/cve/CVE-2025-23133.md) | High | kernel-64kb: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451). | 7.8 | 0.0031 |  |
| [CVE-2025-22063](https://patchblox.com/security/data/cve/CVE-2025-22063.md) | High | kernel-64kb: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351). | 7.8 | 0.0030 |  |
| [CVE-2024-46713](https://patchblox.com/security/data/cve/CVE-2024-46713.md) | High | kernel-64kb: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581). | 7.8 | 0.0030 |  |
| [CVE-2023-53034](https://patchblox.com/security/data/cve/CVE-2023-53034.md) | High | ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans | 7.5 | 0.0030 |  |
| [CVE-2025-39735](https://patchblox.com/security/data/cve/CVE-2025-39735.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0030 |  |
| [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312). | 7.8 | 0.0028 |  |
| [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 |  |
| [CVE-2025-21787](https://patchblox.com/security/data/cve/CVE-2025-21787.md) | High | kernel-64kb: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774). | 7.8 | 0.0027 |  |
| [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel-64kb: io_uring: prevent opcode speculation (bsc#1239475). | 7.8 | 0.0027 |  |
| [CVE-2025-37854](https://patchblox.com/security/data/cve/CVE-2025-37854.md) | High | drm/amdkfd: Fix mode1 reset crash issue | 7.8 | 0.0027 |  |
| [CVE-2025-37943](https://patchblox.com/security/data/cve/CVE-2025-37943.md) | High | wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi | 8.0 | 0.0026 |  |
| [CVE-2025-21696](https://patchblox.com/security/data/cve/CVE-2025-21696.md) | High | mm: clear uffd-wp PTE/PMD state on mremap() | 7.8 | 0.0026 |  |
| [CVE-2025-37944](https://patchblox.com/security/data/cve/CVE-2025-37944.md) | High | wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process | 7.8 | 0.0026 |  |
| [CVE-2024-54458](https://patchblox.com/security/data/cve/CVE-2024-54458.md) | High | kernel-64kb: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992). | 7.8 | 0.0026 |  |
| [CVE-2025-21969](https://patchblox.com/security/data/cve/CVE-2025-21969.md) | High | Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd | 7.8 | 0.0026 |  |
| [CVE-2025-22055](https://patchblox.com/security/data/cve/CVE-2025-22055.md) | High | kernel-64kb: net: fix geneve_opt length integer overflow (bsc#1241371). | 7.1 | 0.0026 |  |
| [CVE-2025-21914](https://patchblox.com/security/data/cve/CVE-2025-21914.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-37803](https://patchblox.com/security/data/cve/CVE-2025-37803.md) | High | udmabuf: fix a buf size overflow issue during udmabuf creation | 7.8 | 0.0025 |  |
| [CVE-2025-21812](https://patchblox.com/security/data/cve/CVE-2025-21812.md) | High | kernel-64kb: ax25: rcu protect dev->ax25_ptr (bsc#1238471). | 7.8 | 0.0025 |  |
| [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-37810](https://patchblox.com/security/data/cve/CVE-2025-37810.md) | High | usb: dwc3: gadget: check that event count does not exceed event buffer length | 7.8 | 0.0025 |  |
| [CVE-2025-21934](https://patchblox.com/security/data/cve/CVE-2025-21934.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-37891](https://patchblox.com/security/data/cve/CVE-2025-37891.md) | High | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | 7.8 | 0.0025 |  |
| [CVE-2025-21926](https://patchblox.com/security/data/cve/CVE-2025-21926.md) | High | kernel-64kb: net: gso: fix ownership in __udp_gso_segment (bsc#1240712). | 7.1 | 0.0024 |  |
| [CVE-2024-57998](https://patchblox.com/security/data/cve/CVE-2024-57998.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-40014](https://patchblox.com/security/data/cve/CVE-2025-40014.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21905](https://patchblox.com/security/data/cve/CVE-2025-21905.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-53135](https://patchblox.com/security/data/cve/CVE-2024-53135.md) | High | kernel-64kb: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154). | 7.8 | 0.0024 |  |
| [CVE-2025-37911](https://patchblox.com/security/data/cve/CVE-2025-37911.md) | High | bnxt_en: Fix out-of-bound memcpy() during ethtool -w | 7.0 | 0.0024 |  |
| [CVE-2025-21919](https://patchblox.com/security/data/cve/CVE-2025-21919.md) | High | kernel-64kb: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593). | 7.8 | 0.0024 |  |
| [CVE-2025-37913](https://patchblox.com/security/data/cve/CVE-2025-37913.md) | High | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 |  |
| [CVE-2024-58093](https://patchblox.com/security/data/cve/CVE-2024-58093.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21729](https://patchblox.com/security/data/cve/CVE-2025-21729.md) | High | kernel-64kb: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874). | 7.8 | 0.0024 |  |
| [CVE-2025-21928](https://patchblox.com/security/data/cve/CVE-2025-21928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-22058](https://patchblox.com/security/data/cve/CVE-2025-22058.md) | High | kernel-64kb: udp: Fix memory accounting leak (bsc#1241332). | 7.3 | 0.0024 |  |
| [CVE-2025-21999](https://patchblox.com/security/data/cve/CVE-2025-21999.md) | High | kernel-64kb: proc: fix UAF in proc_get_inode() (bsc#1240802). | 7.8 | 0.0023 |  |
| [CVE-2025-21950](https://patchblox.com/security/data/cve/CVE-2025-21950.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2025-22104](https://patchblox.com/security/data/cve/CVE-2025-22104.md) | High | kernel-64kb: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550). | 7.1 | 0.0023 |  |
| [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 |  |
| [CVE-2025-37914](https://patchblox.com/security/data/cve/CVE-2025-37914.md) | High | net_sched: ets: Fix double list add in class with netem as child qdisc | 7.8 | 0.0023 |  |
| [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 |  |
| [CVE-2025-37930](https://patchblox.com/security/data/cve/CVE-2025-37930.md) | High | drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | 7.0 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-37958](https://patchblox.com/security/data/cve/CVE-2025-37958.md) | High | mm/huge_memory: fix dereferencing invalid pmd migration entry | 7.1 | 0.0023 |  |
| [CVE-2025-21806](https://patchblox.com/security/data/cve/CVE-2025-21806.md) | High | kernel-64kb: net: let net.core.dev_weight always be non-zero (bsc#1238746). | 7.8 | 0.0023 |  |
| [CVE-2025-22097](https://patchblox.com/security/data/cve/CVE-2025-22097.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 |  |
| [CVE-2025-21991](https://patchblox.com/security/data/cve/CVE-2025-21991.md) | High | kernel-64kb: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795). | 7.8 | 0.0023 |  |
| [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 |  |
| [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 |  |
| [CVE-2025-37915](https://patchblox.com/security/data/cve/CVE-2025-37915.md) | High | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 |  |
| [CVE-2025-23158](https://patchblox.com/security/data/cve/CVE-2025-23158.md) | High | media: venus: hfi: add check to handle incorrect queue size | 7.8 | 0.0022 |  |
| [CVE-2025-23156](https://patchblox.com/security/data/cve/CVE-2025-23156.md) | High | media: venus: hfi_parser: refactor hfi packet parsing logic | 7.1 | 0.0022 |  |
| [CVE-2025-23157](https://patchblox.com/security/data/cve/CVE-2025-23157.md) | High | media: venus: hfi_parser: add check to avoid out of bound access | 7.1 | 0.0022 |  |
| [CVE-2025-37963](https://patchblox.com/security/data/cve/CVE-2025-37963.md) | High | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0022 |  |
| [CVE-2025-21887](https://patchblox.com/security/data/cve/CVE-2025-21887.md) | High | kernel-64kb: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176). | 7.8 | 0.0022 |  |
| [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 |  |
| [CVE-2025-22107](https://patchblox.com/security/data/cve/CVE-2025-22107.md) | High | kernel-64kb: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (bsc#1241575). | 7.1 | 0.0022 |  |
| [CVE-2025-37890](https://patchblox.com/security/data/cve/CVE-2025-37890.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 |  |
| [CVE-2025-37979](https://patchblox.com/security/data/cve/CVE-2025-37979.md) | High | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | 7.8 | 0.0022 |  |
| [CVE-2025-21993](https://patchblox.com/security/data/cve/CVE-2025-21993.md) | High | kernel-64kb: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797). | 7.1 | 0.0022 |  |
| [CVE-2025-22121](https://patchblox.com/security/data/cve/CVE-2025-22121.md) | High | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | 7.1 | 0.0022 |  |
| [CVE-2025-21648](https://patchblox.com/security/data/cve/CVE-2025-21648.md) | High | kernel-64kb: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142). | 7.8 | 0.0022 |  |
| [CVE-2025-22020](https://patchblox.com/security/data/cve/CVE-2025-22020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-21979](https://patchblox.com/security/data/cve/CVE-2025-21979.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 |  |
| [CVE-2024-53139](https://patchblox.com/security/data/cve/CVE-2024-53139.md) | High | kernel-64kb: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157). | 7.8 | 0.0021 |  |
| [CVE-2025-21966](https://patchblox.com/security/data/cve/CVE-2025-21966.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-37901](https://patchblox.com/security/data/cve/CVE-2025-37901.md) | High | irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs | 7.0 | 0.0021 |  |
| [CVE-2025-21968](https://patchblox.com/security/data/cve/CVE-2025-21968.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-37948](https://patchblox.com/security/data/cve/CVE-2025-37948.md) | High | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 7.0 | 0.0021 |  |
| [CVE-2025-21867](https://patchblox.com/security/data/cve/CVE-2025-21867.md) | High | kernel-64kb: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181). | 7.8 | 0.0021 |  |
| [CVE-2025-37905](https://patchblox.com/security/data/cve/CVE-2025-37905.md) | High | firmware: arm_scmi: Balance device refcount when destroying devices | 7.0 | 0.0021 |  |
| [CVE-2025-21923](https://patchblox.com/security/data/cve/CVE-2025-21923.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-37892](https://patchblox.com/security/data/cve/CVE-2025-37892.md) | High | mtd: inftlcore: Add error check for inftl_read_oob() | 7.8 | 0.0021 |  |
| [CVE-2025-37903](https://patchblox.com/security/data/cve/CVE-2025-37903.md) | High | drm/amd/display: Fix slab-use-after-free in hdcp | 7.8 | 0.0021 |  |
| [CVE-2025-21915](https://patchblox.com/security/data/cve/CVE-2025-21915.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21962](https://patchblox.com/security/data/cve/CVE-2025-21962.md) | High | kernel-64kb: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655). | 7.8 | 0.0021 |  |
| [CVE-2025-21963](https://patchblox.com/security/data/cve/CVE-2025-21963.md) | High | kernel-64kb: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717). | 7.3 | 0.0021 |  |
| [CVE-2025-21964](https://patchblox.com/security/data/cve/CVE-2025-21964.md) | High | kernel-64kb: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740). | 7.0 | 0.0021 |  |
| [CVE-2025-37897](https://patchblox.com/security/data/cve/CVE-2025-37897.md) | High | wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release | 7.0 | 0.0020 |  |
| [CVE-2025-37929](https://patchblox.com/security/data/cve/CVE-2025-37929.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-22036](https://patchblox.com/security/data/cve/CVE-2025-22036.md) | High | kernel-64kb: exfat: fix random stack corruption after get_block (bsc#1241426). | 7.0 | 0.0020 |  |
| [CVE-2025-22126](https://patchblox.com/security/data/cve/CVE-2025-22126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-37796](https://patchblox.com/security/data/cve/CVE-2025-37796.md) | High | wifi: at76c50x: fix use after free access in at76_disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-37900](https://patchblox.com/security/data/cve/CVE-2025-37900.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-21985](https://patchblox.com/security/data/cve/CVE-2025-21985.md) | High | drm/amd/display: Fix out-of-bound accesses | 7.1 | 0.0020 |  |
| [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 |  |
| [CVE-2025-37953](https://patchblox.com/security/data/cve/CVE-2025-37953.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-37982](https://patchblox.com/security/data/cve/CVE-2025-37982.md) | High | wifi: wl1251: fix memory leak in wl1251_tx_work | 7.0 | 0.0019 |  |
| [CVE-2025-37957](https://patchblox.com/security/data/cve/CVE-2025-37957.md) | High | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | 7.8 | 0.0019 |  |
| [CVE-2025-37972](https://patchblox.com/security/data/cve/CVE-2025-37972.md) | High | Input: mtk-pmic-keys - fix possible null pointer dereference | 7.0 | 0.0019 |  |
| [CVE-2024-58068](https://patchblox.com/security/data/cve/CVE-2024-58068.md) | High | kernel-64kb: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961). | 7.8 | 0.0019 |  |
| [CVE-2025-37951](https://patchblox.com/security/data/cve/CVE-2025-37951.md) | High | drm/v3d: Add job to pending list if the reset was skipped | 7.0 | 0.0019 |  |
| [CVE-2025-37831](https://patchblox.com/security/data/cve/CVE-2025-37831.md) | High | cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() | 7.0 | 0.0019 |  |
| [CVE-2025-37833](https://patchblox.com/security/data/cve/CVE-2025-37833.md) | High | net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads | 7.0 | 0.0019 |  |
| [CVE-2025-37960](https://patchblox.com/security/data/cve/CVE-2025-37960.md) | High | memblock: Accept allocated memory before use in memblock_double_array() | 7.0 | 0.0019 |  |
| [CVE-2024-58088](https://patchblox.com/security/data/cve/CVE-2024-58088.md) | High | kernel-64kb: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). | 7.8 | 0.0018 |  |
| [CVE-2025-37969](https://patchblox.com/security/data/cve/CVE-2025-37969.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | 7.0 | 0.0018 |  |
| [CVE-2025-37970](https://patchblox.com/security/data/cve/CVE-2025-37970.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo | 7.0 | 0.0018 |  |
| [CVE-2025-21758](https://patchblox.com/security/data/cve/CVE-2025-21758.md) | Routine | kernel-64kb: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737). | 5.5 | 0.1693 |  |
| [CVE-2025-37871](https://patchblox.com/security/data/cve/CVE-2025-37871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0079 |  |
| [CVE-2024-46763](https://patchblox.com/security/data/cve/CVE-2024-46763.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0071 |  |
| [CVE-2025-22025](https://patchblox.com/security/data/cve/CVE-2025-22025.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0059 |  |
| [CVE-2025-21961](https://patchblox.com/security/data/cve/CVE-2025-21961.md) | Routine | eth: bnxt: fix truesize for mb-xdp-pass case | 5.5 | 0.0059 |  |
| [CVE-2024-53124](https://patchblox.com/security/data/cve/CVE-2024-53124.md) | Routine | kernel-64kb: net: fix data-races around sk->sk_forward_alloc (bsc#1234074). | 4.7 | 0.0059 |  |
| [CVE-2025-23145](https://patchblox.com/security/data/cve/CVE-2025-23145.md) | Routine | mptcp: fix NULL pointer in can_accept_new_subflow | 5.5 | 0.0059 |  |
| [CVE-2025-21707](https://patchblox.com/security/data/cve/CVE-2025-21707.md) | Routine | kernel-64kb: mptcp: consolidate suboption status (bsc#1238862). | 5.5 | 0.0054 |  |
| [CVE-2025-21960](https://patchblox.com/security/data/cve/CVE-2025-21960.md) | Routine | kernel-64kb: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815). | 5.7 | 0.0053 |  |
| [CVE-2024-56641](https://patchblox.com/security/data/cve/CVE-2024-56641.md) | Routine | net/smc: initialize close_work early to avoid warning | 5.5 | 0.0053 |  |
| [CVE-2024-50162](https://patchblox.com/security/data/cve/CVE-2024-50162.md) | Routine | kernel-64kb: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075). | 5.5 | 0.0052 |  |
| [CVE-2025-22021](https://patchblox.com/security/data/cve/CVE-2025-22021.md) | Routine | kernel-64kb: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282). | 5.5 | 0.0048 |  |
| [CVE-2025-21629](https://patchblox.com/security/data/cve/CVE-2025-21629.md) | Routine | net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets | 5.5 | 0.0043 |  |
| [CVE-2025-37820](https://patchblox.com/security/data/cve/CVE-2025-37820.md) | Routine | xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() | 5.5 | 0.0040 |  |
| [CVE-2025-37959](https://patchblox.com/security/data/cve/CVE-2025-37959.md) | Routine | bpf: Scrub packet on bpf_redirect_peer | 5.5 | 0.0038 |  |
| [CVE-2025-22108](https://patchblox.com/security/data/cve/CVE-2025-22108.md) | Routine | bnxt_en: Mask the bd_cnt field in the TX BD properly | 5.5 | 0.0038 |  |
| [CVE-2025-37755](https://patchblox.com/security/data/cve/CVE-2025-37755.md) | Routine | net: libwx: handle page_pool_dev_alloc_pages error | 5.5 | 0.0038 |  |
| [CVE-2025-38637](https://patchblox.com/security/data/cve/CVE-2025-38637.md) | Routine | kernel-64kb: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657). | 5.5 | 0.0033 |  |
| [CVE-2024-58096](https://patchblox.com/security/data/cve/CVE-2024-58096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0032 |  |
| [CVE-2025-21972](https://patchblox.com/security/data/cve/CVE-2025-21972.md) | Routine | kernel-64kb: net: mctp: unshare packets when reassembling (bsc#1240813). | 5.5 | 0.0032 |  |
| [CVE-2025-37860](https://patchblox.com/security/data/cve/CVE-2025-37860.md) | Routine | kernel-coco: CVE-2025-22105, Add missing bugzilla references (bsc#1241452 bsc#1241548). | 5.5 | 0.0032 |  |
| [CVE-2025-37836](https://patchblox.com/security/data/cve/CVE-2025-37836.md) | Routine | PCI: Fix reference leak in pci_register_host_bridge() | 5.5 | 0.0031 |  |
| [CVE-2025-37881](https://patchblox.com/security/data/cve/CVE-2025-37881.md) | Routine | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | 5.5 | 0.0031 |  |
| [CVE-2025-37870](https://patchblox.com/security/data/cve/CVE-2025-37870.md) | Routine | drm/amd/display: prevent hang on link training fail | 5.5 | 0.0031 |  |
| [CVE-2025-37867](https://patchblox.com/security/data/cve/CVE-2025-37867.md) | Routine | RDMA/core: Silence oversized kvmalloc() warning | 5.5 | 0.0031 |  |
| [CVE-2025-37886](https://patchblox.com/security/data/cve/CVE-2025-37886.md) | Routine | pds_core: make wait_context part of q_info | 5.5 | 0.0030 |  |
| [CVE-2025-22062](https://patchblox.com/security/data/cve/CVE-2025-22062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-22086](https://patchblox.com/security/data/cve/CVE-2025-22086.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37841](https://patchblox.com/security/data/cve/CVE-2025-37841.md) | Routine | pm: cpupower: bench: Prevent NULL dereference on malloc failure | 5.5 | 0.0030 |  |
| [CVE-2025-37850](https://patchblox.com/security/data/cve/CVE-2025-37850.md) | Routine | kernel-livepatch-SLE15-SP7_Update_2: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37851](https://patchblox.com/security/data/cve/CVE-2025-37851.md) | Routine | fbdev: omapfb: Add 'plane' value check | 5.5 | 0.0030 |  |
| [CVE-2025-37925](https://patchblox.com/security/data/cve/CVE-2025-37925.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37889](https://patchblox.com/security/data/cve/CVE-2025-37889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2025-37887](https://patchblox.com/security/data/cve/CVE-2025-37887.md) | Routine | pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result | 5.5 | 0.0029 |  |
| [CVE-2025-37875](https://patchblox.com/security/data/cve/CVE-2025-37875.md) | Routine | igc: fix PTM cycle trigger logic | 5.5 | 0.0029 |  |
| [CVE-2025-40325](https://patchblox.com/security/data/cve/CVE-2025-40325.md) | Routine | md/raid10: wait barrier before returning discard request with REQ_NOWAIT | 5.5 | 0.0028 |  |
| [CVE-2025-37842](https://patchblox.com/security/data/cve/CVE-2025-37842.md) | Routine | spi: fsl-qspi: use devm function instead of driver remove | 5.5 | 0.0028 |  |
| [CVE-2025-37852](https://patchblox.com/security/data/cve/CVE-2025-37852.md) | Routine | drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() | 5.5 | 0.0028 |  |
| [CVE-2025-37853](https://patchblox.com/security/data/cve/CVE-2025-37853.md) | Routine | drm/amdkfd: debugfs hang_hws skip GPU with MES | 5.5 | 0.0028 |  |
| [CVE-2025-39728](https://patchblox.com/security/data/cve/CVE-2025-39728.md) | Routine | kernel-64kb: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626). | 5.5 | 0.0028 |  |
| [CVE-2025-37873](https://patchblox.com/security/data/cve/CVE-2025-37873.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-57924](https://patchblox.com/security/data/cve/CVE-2024-57924.md) | Routine | kernel-64kb: fs: relax assertions on failure to encode file handles (bsc#1236086). | 5.5 | 0.0028 |  |
| [CVE-2025-38152](https://patchblox.com/security/data/cve/CVE-2025-38152.md) | Routine | kernel-64kb: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627). | 5.5 | 0.0027 |  |
| [CVE-2025-21917](https://patchblox.com/security/data/cve/CVE-2025-21917.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2025-22064](https://patchblox.com/security/data/cve/CVE-2025-22064.md) | Routine | kernel-64kb: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413). | 5.5 | 0.0027 |  |
| [CVE-2025-22065](https://patchblox.com/security/data/cve/CVE-2025-22065.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2025-21814](https://patchblox.com/security/data/cve/CVE-2025-21814.md) | Routine | kernel-64kb: ptp: Ensure info->enable callback is always set (bsc#1238473). | 5.5 | 0.0026 |  |
| [CVE-2025-38240](https://patchblox.com/security/data/cve/CVE-2025-38240.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2025-22109](https://patchblox.com/security/data/cve/CVE-2025-22109.md) | Routine | ax25: Remove broken autobind | 5.5 | 0.0026 |  |
| [CVE-2025-21875](https://patchblox.com/security/data/cve/CVE-2025-21875.md) | Routine | kernel-64kb: mptcp: always handle address removal under msk socket lock (bsc#1240168). | 5.5 | 0.0026 |  |
| [CVE-2025-21768](https://patchblox.com/security/data/cve/CVE-2025-21768.md) | Routine | net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels | 5.5 | 0.0025 |  |
| [CVE-2025-21836](https://patchblox.com/security/data/cve/CVE-2025-21836.md) | Routine | kernel-64kb: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066). | 6.1 | 0.0025 |  |
| [CVE-2024-27415](https://patchblox.com/security/data/cve/CVE-2024-27415.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-56702](https://patchblox.com/security/data/cve/CVE-2024-56702.md) | Routine | bpf: Mark raw_tp arguments with PTR_MAYBE_NULL | 5.5 | 0.0025 |  |
| [CVE-2025-37747](https://patchblox.com/security/data/cve/CVE-2025-37747.md) | Routine | perf: Fix hang while freeing sigtrap event | 5.5 | 0.0025 |  |
| [CVE-2025-37918](https://patchblox.com/security/data/cve/CVE-2025-37918.md) | Routine | Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() | 5.5 | 0.0025 |  |
| [CVE-2025-22070](https://patchblox.com/security/data/cve/CVE-2025-22070.md) | Routine | kernel-64kb: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305). | 5.5 | 0.0025 |  |
| [CVE-2025-22045](https://patchblox.com/security/data/cve/CVE-2025-22045.md) | Routine | kernel-64kb: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433). | 5.5 | 0.0024 |  |
| [CVE-2025-21924](https://patchblox.com/security/data/cve/CVE-2025-21924.md) | Routine | kernel-64kb: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). | 5.5 | 0.0024 |  |
| [CVE-2025-37790](https://patchblox.com/security/data/cve/CVE-2025-37790.md) | Routine | net: mctp: Set SOCK_RCU_FREE | 5.5 | 0.0024 |  |
| [CVE-2025-21792](https://patchblox.com/security/data/cve/CVE-2025-21792.md) | Routine | ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt | 5.5 | 0.0024 |  |
| [CVE-2025-37937](https://patchblox.com/security/data/cve/CVE-2025-37937.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-37949](https://patchblox.com/security/data/cve/CVE-2025-37949.md) | Routine | kernel-64kb: xenbus: Use kref to track req lifetime (bsc#1243541). | 5.5 | 0.0024 |  |
| [CVE-2025-37932](https://patchblox.com/security/data/cve/CVE-2025-37932.md) | Routine | sch_htb: make htb_qlen_notify() idempotent | 5.5 | 0.0024 |  |
| [CVE-2024-50223](https://patchblox.com/security/data/cve/CVE-2024-50223.md) | Routine | kernel-64kb: sched/numa: Fix the potential null pointer dereference in (bsc#1233192). | 5.5 | 0.0024 |  |
| [CVE-2025-37990](https://patchblox.com/security/data/cve/CVE-2025-37990.md) | Routine | wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() | 5.5 | 0.0024 |  |
| [CVE-2025-21925](https://patchblox.com/security/data/cve/CVE-2025-21925.md) | Routine | kernel-64kb: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713). | 5.5 | 0.0024 |  |
| [CVE-2025-21904](https://patchblox.com/security/data/cve/CVE-2025-21904.md) | Routine | kernel-64kb: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576). | 5.5 | 0.0023 |  |
| [CVE-2025-21910](https://patchblox.com/security/data/cve/CVE-2025-21910.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21916](https://patchblox.com/security/data/cve/CVE-2025-21916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21918](https://patchblox.com/security/data/cve/CVE-2025-21918.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21922](https://patchblox.com/security/data/cve/CVE-2025-21922.md) | Routine | kernel-64kb: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639). | 5.5 | 0.0023 |  |
| [CVE-2025-21935](https://patchblox.com/security/data/cve/CVE-2025-21935.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21948](https://patchblox.com/security/data/cve/CVE-2025-21948.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21956](https://patchblox.com/security/data/cve/CVE-2025-21956.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21957](https://patchblox.com/security/data/cve/CVE-2025-21957.md) | Routine | kernel-64kb: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742). | 5.5 | 0.0023 |  |
| [CVE-2024-50038](https://patchblox.com/security/data/cve/CVE-2024-50038.md) | Routine | kernel-64kb: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910). | 5.5 | 0.0023 |  |
| [CVE-2024-58097](https://patchblox.com/security/data/cve/CVE-2024-58097.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21854](https://patchblox.com/security/data/cve/CVE-2025-21854.md) | Routine | kernel-64kb: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470). | 5.5 | 0.0023 |  |
| [CVE-2025-21913](https://patchblox.com/security/data/cve/CVE-2025-21913.md) | Routine | kernel-64kb: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591). | 5.5 | 0.0023 |  |
| [CVE-2024-58001](https://patchblox.com/security/data/cve/CVE-2024-58001.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21936](https://patchblox.com/security/data/cve/CVE-2025-21936.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21937](https://patchblox.com/security/data/cve/CVE-2025-21937.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-22015](https://patchblox.com/security/data/cve/CVE-2025-22015.md) | Routine | kernel-64kb: mm/migrate: fix shmem xarray update during migration (bsc#1240944). | 5.5 | 0.0023 |  |
| [CVE-2025-22018](https://patchblox.com/security/data/cve/CVE-2025-22018.md) | Routine | kernel-64kb: atm: Fix NULL pointer dereference (bsc#1241266). | 5.5 | 0.0023 |  |
| [CVE-2025-21941](https://patchblox.com/security/data/cve/CVE-2025-21941.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21971](https://patchblox.com/security/data/cve/CVE-2025-21971.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-23136](https://patchblox.com/security/data/cve/CVE-2025-23136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-23159](https://patchblox.com/security/data/cve/CVE-2025-23159.md) | Routine | media: venus: hfi: add a check to handle OOB in sfr region | 5.5 | 0.0023 |  |
| [CVE-2024-58094](https://patchblox.com/security/data/cve/CVE-2024-58094.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21683](https://patchblox.com/security/data/cve/CVE-2025-21683.md) | Routine | kernel-64kb: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704). | 5.5 | 0.0023 |  |
| [CVE-2025-37912](https://patchblox.com/security/data/cve/CVE-2025-37912.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21906](https://patchblox.com/security/data/cve/CVE-2025-21906.md) | Routine | kernel-64kb: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587). | 5.5 | 0.0023 |  |
| [CVE-2025-37765](https://patchblox.com/security/data/cve/CVE-2025-37765.md) | Routine | drm/nouveau: prime: fix ttm_bo_delayed_delete oops | 5.5 | 0.0022 |  |
| [CVE-2025-22007](https://patchblox.com/security/data/cve/CVE-2025-22007.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22009](https://patchblox.com/security/data/cve/CVE-2025-22009.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22013](https://patchblox.com/security/data/cve/CVE-2025-22013.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-23140](https://patchblox.com/security/data/cve/CVE-2025-23140.md) | Routine | misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | 5.5 | 0.0022 |  |
| [CVE-2025-23144](https://patchblox.com/security/data/cve/CVE-2025-23144.md) | Routine | backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() | 5.5 | 0.0022 |  |
| [CVE-2025-21881](https://patchblox.com/security/data/cve/CVE-2025-21881.md) | Routine | uprobes: Reject the shared zeropage in uprobe_write_opcode() | 5.5 | 0.0022 |  |
| [CVE-2025-22080](https://patchblox.com/security/data/cve/CVE-2025-22080.md) | Routine | kernel-64kb: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416). | 5.5 | 0.0022 |  |
| [CVE-2025-22044](https://patchblox.com/security/data/cve/CVE-2025-22044.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22057](https://patchblox.com/security/data/cve/CVE-2025-22057.md) | Routine | net: decrease cached dst counters in dst_release | 6.6 | 0.0022 |  |
| [CVE-2025-22005](https://patchblox.com/security/data/cve/CVE-2025-22005.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 |  |
| [CVE-2024-35840](https://patchblox.com/security/data/cve/CVE-2024-35840.md) | Routine | kernel-64kb: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597). | 5.5 | 0.0022 |  |
| [CVE-2025-22075](https://patchblox.com/security/data/cve/CVE-2025-22075.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 |  |
| [CVE-2025-22089](https://patchblox.com/security/data/cve/CVE-2025-22089.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22090](https://patchblox.com/security/data/cve/CVE-2025-22090.md) | Routine | x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() | 5.5 | 0.0022 |  |
| [CVE-2025-37931](https://patchblox.com/security/data/cve/CVE-2025-37931.md) | Routine | btrfs: adjust subpage bit start based on sectorsize | 5.5 | 0.0022 |  |
| [CVE-2025-21884](https://patchblox.com/security/data/cve/CVE-2025-21884.md) | Routine | kernel-64kb: net: better track kernel sockets lifetime (bsc#1240171). | 5.5 | 0.0022 |  |
| [CVE-2025-21970](https://patchblox.com/security/data/cve/CVE-2025-21970.md) | Routine | kernel-64kb: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819). | 5.5 | 0.0022 |  |
| [CVE-2025-21996](https://patchblox.com/security/data/cve/CVE-2025-21996.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22102](https://patchblox.com/security/data/cve/CVE-2025-22102.md) | Routine | kernel-64kb: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456). | 5.5 | 0.0022 |  |
| [CVE-2024-50163](https://patchblox.com/security/data/cve/CVE-2024-50163.md) | Routine | kernel-64kb: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098). | 5.5 | 0.0022 |  |
| [CVE-2025-21852](https://patchblox.com/security/data/cve/CVE-2025-21852.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22008](https://patchblox.com/security/data/cve/CVE-2025-22008.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-23146](https://patchblox.com/security/data/cve/CVE-2025-23146.md) | Routine | mfd: ene-kb3930: Fix a potential NULL pointer dereference | 5.5 | 0.0022 |  |
| [CVE-2025-23160](https://patchblox.com/security/data/cve/CVE-2025-23160.md) | Routine | kernel-64kb: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507). | 5.5 | 0.0022 |  |
| [CVE-2025-21833](https://patchblox.com/security/data/cve/CVE-2025-21833.md) | Routine | iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE | 5.5 | 0.0022 |  |
| [CVE-2025-23138](https://patchblox.com/security/data/cve/CVE-2025-23138.md) | Routine | kernel-64kb: watch_queue: fix pipe accounting mismatch (bsc#1241648). | 5.5 | 0.0022 |  |
| [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 |  |
| [CVE-2025-21980](https://patchblox.com/security/data/cve/CVE-2025-21980.md) | Routine | kernel-64kb: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809). | 5.5 | 0.0021 |  |
| [CVE-2025-22066](https://patchblox.com/security/data/cve/CVE-2025-22066.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22095](https://patchblox.com/security/data/cve/CVE-2025-22095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-23147](https://patchblox.com/security/data/cve/CVE-2025-23147.md) | Routine | i3c: Add NULL pointer check in i3c_master_queue_ibi() | 5.5 | 0.0021 |  |
| [CVE-2025-23148](https://patchblox.com/security/data/cve/CVE-2025-23148.md) | Routine | soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-37766](https://patchblox.com/security/data/cve/CVE-2025-37766.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-2312](https://patchblox.com/security/data/cve/CVE-2025-2312.md) | Routine | cifs-utils: Fixed cifs.upcall making an upcall to the wrong | 5.9 | 0.0021 |  |
| [CVE-2025-21894](https://patchblox.com/security/data/cve/CVE-2025-21894.md) | Routine | kernel-64kb: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581). | 5.5 | 0.0021 |  |
| [CVE-2024-43869](https://patchblox.com/security/data/cve/CVE-2024-43869.md) | Routine | kernel-64k: kernel: perf: Fix event leak upon exec and file release | 6.1 | 0.0021 |  |
| [CVE-2025-37754](https://patchblox.com/security/data/cve/CVE-2025-37754.md) | Routine | drm/i915/huc: Fix fence not released on early probe errors | 5.5 | 0.0021 |  |
| [CVE-2025-21930](https://patchblox.com/security/data/cve/CVE-2025-21930.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21975](https://patchblox.com/security/data/cve/CVE-2025-21975.md) | Routine | kernel-64kb: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812). | 5.5 | 0.0021 |  |
| [CVE-2025-21981](https://patchblox.com/security/data/cve/CVE-2025-21981.md) | Routine | kernel-64kb: ice: fix memory leak in aRFS after reset (bsc#1240612). | 5.5 | 0.0021 |  |
| [CVE-2025-22017](https://patchblox.com/security/data/cve/CVE-2025-22017.md) | Routine | kernel-64kb: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936). | 5.5 | 0.0021 |  |
| [CVE-2025-37824](https://patchblox.com/security/data/cve/CVE-2025-37824.md) | Routine | tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | 5.5 | 0.0021 |  |
| [CVE-2025-37829](https://patchblox.com/security/data/cve/CVE-2025-37829.md) | Routine | cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | 5.5 | 0.0021 |  |
| [CVE-2024-58095](https://patchblox.com/security/data/cve/CVE-2024-58095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22033](https://patchblox.com/security/data/cve/CVE-2025-22033.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22093](https://patchblox.com/security/data/cve/CVE-2025-22093.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22103](https://patchblox.com/security/data/cve/CVE-2025-22103.md) | Routine | kernel-64kb: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448). | 5.5 | 0.0021 |  |
| [CVE-2025-22105](https://patchblox.com/security/data/cve/CVE-2025-22105.md) | Routine | kernel-64kb: CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548). | 5.5 | 0.0021 |  |
| [CVE-2025-37768](https://patchblox.com/security/data/cve/CVE-2025-37768.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-37770](https://patchblox.com/security/data/cve/CVE-2025-37770.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-21873](https://patchblox.com/security/data/cve/CVE-2025-21873.md) | Routine | kernel-64kb: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184). | 5.5 | 0.0021 |  |
| [CVE-2025-21992](https://patchblox.com/security/data/cve/CVE-2025-21992.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-37781](https://patchblox.com/security/data/cve/CVE-2025-37781.md) | Routine | i2c: cros-ec-tunnel: defer probe if parent EC is not present | 5.5 | 0.0021 |  |
| [CVE-2025-22106](https://patchblox.com/security/data/cve/CVE-2025-22106.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22116](https://patchblox.com/security/data/cve/CVE-2025-22116.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21889](https://patchblox.com/security/data/cve/CVE-2025-21889.md) | Routine | kernel-64kb: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167). | 5.5 | 0.0021 |  |
| [CVE-2025-22016](https://patchblox.com/security/data/cve/CVE-2025-22016.md) | Routine | kernel-64kb: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934). | 5.5 | 0.0021 |  |
| [CVE-2025-37767](https://patchblox.com/security/data/cve/CVE-2025-37767.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 |  |
| [CVE-2025-37771](https://patchblox.com/security/data/cve/CVE-2025-37771.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 |  |
| [CVE-2025-37805](https://patchblox.com/security/data/cve/CVE-2025-37805.md) | Routine | sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | 5.5 | 0.0020 |  |
| [CVE-2025-37809](https://patchblox.com/security/data/cve/CVE-2025-37809.md) | Routine | kernel-64kb: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856). | 5.5 | 0.0020 |  |
| [CVE-2025-23149](https://patchblox.com/security/data/cve/CVE-2025-23149.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0020 |  |
| [CVE-2025-22030](https://patchblox.com/security/data/cve/CVE-2025-22030.md) | Routine | kernel-64kb: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376). | 5.5 | 0.0020 |  |
| [CVE-2025-22124](https://patchblox.com/security/data/cve/CVE-2025-22124.md) | Routine | md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb | 6.0 | 0.0020 |  |
| [CVE-2025-21808](https://patchblox.com/security/data/cve/CVE-2025-21808.md) | Routine | kernel-64kb: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742). | 5.5 | 0.0020 |  |
| [CVE-2025-22050](https://patchblox.com/security/data/cve/CVE-2025-22050.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-37769](https://patchblox.com/security/data/cve/CVE-2025-37769.md) | Routine | drm/amd/pm/smu11: Prevent division by zero | 5.5 | 0.0020 |  |
| [CVE-2025-37772](https://patchblox.com/security/data/cve/CVE-2025-37772.md) | Routine | RDMA/cma: Fix workqueue crash in cma_netevent_work_handler | 5.5 | 0.0020 |  |
| [CVE-2025-37788](https://patchblox.com/security/data/cve/CVE-2025-37788.md) | Routine | cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path | 5.5 | 0.0020 |  |
| [CVE-2025-22001](https://patchblox.com/security/data/cve/CVE-2025-22001.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-22003](https://patchblox.com/security/data/cve/CVE-2025-22003.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-37740](https://patchblox.com/security/data/cve/CVE-2025-37740.md) | Routine | jfs: add sanity check for agwidth in dbMount | 5.5 | 0.0020 |  |
| [CVE-2025-37758](https://patchblox.com/security/data/cve/CVE-2025-37758.md) | Routine | ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | 5.5 | 0.0020 |  |
| [CVE-2025-37773](https://patchblox.com/security/data/cve/CVE-2025-37773.md) | Routine | virtiofs: add filesystem context source name check | 5.5 | 0.0020 |  |
| [CVE-2025-37792](https://patchblox.com/security/data/cve/CVE-2025-37792.md) | Routine | Bluetooth: btrtl: Prevent potential NULL dereference | 5.5 | 0.0020 |  |
| [CVE-2025-37794](https://patchblox.com/security/data/cve/CVE-2025-37794.md) | Routine | wifi: mac80211: Purge vif txq in ieee80211_do_stop() | 5.5 | 0.0020 |  |
| [CVE-2024-58100](https://patchblox.com/security/data/cve/CVE-2024-58100.md) | Routine | bpf: check changes_pkt_data property for extension programs | 6.0 | 0.0020 |  |
| [CVE-2024-58098](https://patchblox.com/security/data/cve/CVE-2024-58098.md) | Routine | bpf: track changes_pkt_data property for global functions | 6.0 | 0.0020 |  |
| [CVE-2024-58237](https://patchblox.com/security/data/cve/CVE-2024-58237.md) | Routine | bpf: consider that tail calls invalidate packet pointers | 6.0 | 0.0020 |  |
| [CVE-2025-23131](https://patchblox.com/security/data/cve/CVE-2025-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-21978](https://patchblox.com/security/data/cve/CVE-2025-21978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-22119](https://patchblox.com/security/data/cve/CVE-2025-22119.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37980](https://patchblox.com/security/data/cve/CVE-2025-37980.md) | Routine | block: fix resource leak in blk_register_queue() error path | 5.5 | 0.0019 |  |
| [CVE-2025-37983](https://patchblox.com/security/data/cve/CVE-2025-37983.md) | Routine | qibfs: fix _another_ leak | 5.5 | 0.0019 |  |
| [CVE-2025-21995](https://patchblox.com/security/data/cve/CVE-2025-21995.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0019 |  |
| [CVE-2024-58018](https://patchblox.com/security/data/cve/CVE-2024-58018.md) | Routine | kernel-64kb: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990). | 5.5 | 0.0019 |  |
| [CVE-2025-22125](https://patchblox.com/security/data/cve/CVE-2025-22125.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-23129](https://patchblox.com/security/data/cve/CVE-2025-23129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37830](https://patchblox.com/security/data/cve/CVE-2025-37830.md) | Routine | cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() | 5.5 | 0.0019 |  |
| [CVE-2023-53146](https://patchblox.com/security/data/cve/CVE-2023-53146.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-22128](https://patchblox.com/security/data/cve/CVE-2025-22128.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37742](https://patchblox.com/security/data/cve/CVE-2025-37742.md) | Routine | jfs: Fix uninit-value access of imap allocated in the diMount() function | 5.5 | 0.0019 |  |
| [CVE-2025-37787](https://patchblox.com/security/data/cve/CVE-2025-37787.md) | Routine | net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | 5.5 | 0.0019 |  |
| [CVE-2025-37748](https://patchblox.com/security/data/cve/CVE-2025-37748.md) | Routine | kernel-64kb: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523). | 5.5 | 0.0019 |  |
| [CVE-2025-37815](https://patchblox.com/security/data/cve/CVE-2025-37815.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37978](https://patchblox.com/security/data/cve/CVE-2025-37978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37793](https://patchblox.com/security/data/cve/CVE-2025-37793.md) | Routine | ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() | 5.5 | 0.0019 |  |
| [CVE-2025-37974](https://patchblox.com/security/data/cve/CVE-2025-37974.md) | Routine | kernel-64kb: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547). | 6.4 | 0.0019 |  |
| [CVE-2025-22010](https://patchblox.com/security/data/cve/CVE-2025-22010.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-22014](https://patchblox.com/security/data/cve/CVE-2025-22014.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37986](https://patchblox.com/security/data/cve/CVE-2025-37986.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38104](https://patchblox.com/security/data/cve/CVE-2025-38104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-22115](https://patchblox.com/security/data/cve/CVE-2025-22115.md) | Routine | btrfs: fix block group refcount race in btrfs_create_pending_block_groups() | 5.5 | 0.0018 |  |
| [CVE-2025-21912](https://patchblox.com/security/data/cve/CVE-2025-21912.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-21909](https://patchblox.com/security/data/cve/CVE-2025-21909.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-58071](https://patchblox.com/security/data/cve/CVE-2024-58071.md) | Routine | kernel-64kb: team: prevent adding a device which is already a team device lower (bsc#1238970). | 5.5 | 0.0018 |  |
| [CVE-2025-21953](https://patchblox.com/security/data/cve/CVE-2025-21953.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0018 |  |
| [CVE-2025-21908](https://patchblox.com/security/data/cve/CVE-2025-21908.md) | Routine | kernel-64kb: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600). | 5.5 | 0.0017 |  |
| [CVE-2025-21943](https://patchblox.com/security/data/cve/CVE-2025-21943.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2025-21951](https://patchblox.com/security/data/cve/CVE-2025-21951.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-22027](https://patchblox.com/security/data/cve/CVE-2025-22027.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2025-37741](https://patchblox.com/security/data/cve/CVE-2025-37741.md) | Routine | jfs: Prevent copying of nlink with value 0 from disk inode | 5.5 | 0.0016 |  |
| [CVE-2025-22060](https://patchblox.com/security/data/cve/CVE-2025-22060.md) | Routine | kernel-64kb: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526). | 5.5 | 0.0016 |  |
| [CVE-2025-37812](https://patchblox.com/security/data/cve/CVE-2025-37812.md) | Routine | usb: cdns3: Fix deadlock when using NCM gadget | 5.5 | 0.0016 |  |
| [CVE-2025-21931](https://patchblox.com/security/data/cve/CVE-2025-21931.md) | Routine | kernel-64kb: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709). | 5.5 | 0.0016 |  |
| [CVE-2025-22053](https://patchblox.com/security/data/cve/CVE-2025-22053.md) | Routine | kernel-64kb: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373). | 5.5 | 0.0016 |  |
| [CVE-2025-23151](https://patchblox.com/security/data/cve/CVE-2025-23151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0016 |  |
| [CVE-2025-23161](https://patchblox.com/security/data/cve/CVE-2025-23161.md) | Routine | PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | 5.5 | 0.0015 |  |
| [CVE-2024-58070](https://patchblox.com/security/data/cve/CVE-2024-58070.md) | Routine | kernel-64kb: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983). | 5.5 | 0.0015 |  |
| [CVE-2025-21895](https://patchblox.com/security/data/cve/CVE-2025-21895.md) | Routine | kernel-64kb: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585). | 4.7 | 0.0015 |  |
| [CVE-2025-37985](https://patchblox.com/security/data/cve/CVE-2025-37985.md) | Routine | USB: wdm: close race between wdm_open and wdm_wwan_port_stop | 4.7 | 0.0014 |  |
| [CVE-2025-21755](https://patchblox.com/security/data/cve/CVE-2025-21755.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |
| [CVE-2025-22029](https://patchblox.com/security/data/cve/CVE-2025-22029.md) | Routine | kernel-64kb: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378). | n/a | n/a |  |
| [CVE-2025-37782](https://patchblox.com/security/data/cve/CVE-2025-37782.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |
| [CVE-2025-37804](https://patchblox.com/security/data/cve/CVE-2025-37804.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.