# SUSE-SU-2025:02254-1: Security update for 3 packages SUSE-SU-2025:02254-1, released July 8, 2025, fixes 251 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/suse-su-2025-02254-1 - Platform: Linux - Released: Jul 8, 2025 - Priority: High (Closes CVE-2025-37928, high severity) - CVEs: 251, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:02254-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.20.6.1 | | [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.7 | 6.4.0-150700.20.6.1 | | [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.7 | 6.4.0-150700.20.6.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-37928](https://patchblox.com/security/data/cve/CVE-2025-37928.md) | High | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 | | | [CVE-2025-37917](https://patchblox.com/security/data/cve/CVE-2025-37917.md) | High | kernel-64kb: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475). | 7.0 | 0.0056 | | | [CVE-2025-38001](https://patchblox.com/security/data/cve/CVE-2025-38001.md) | High | net_sched: hfsc: Address reentrant enqueue adding class to eltree twice | 7.8 | 0.0056 | | | [CVE-2024-50106](https://patchblox.com/security/data/cve/CVE-2024-50106.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0050 | | | [CVE-2025-38018](https://patchblox.com/security/data/cve/CVE-2025-38018.md) | High | kernel-64kb: net/tls: fix kernel panic when alloc_page failed (bsc#1244999). | 7.0 | 0.0048 | | | [CVE-2025-37954](https://patchblox.com/security/data/cve/CVE-2025-37954.md) | High | smb: client: Avoid race in open_cached_dir with lease breaks | 7.0 | 0.0037 | | | [CVE-2024-57995](https://patchblox.com/security/data/cve/CVE-2024-57995.md) | High | kernel-rt-64k-devel: kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() | 7.8 | 0.0036 | | | [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 | | | [CVE-2024-58099](https://patchblox.com/security/data/cve/CVE-2024-58099.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0033 | | | [CVE-2025-37840](https://patchblox.com/security/data/cve/CVE-2025-37840.md) | High | mtd: rawnand: brcmnand: fix PM resume warning | 7.8 | 0.0033 | | | [CVE-2025-37861](https://patchblox.com/security/data/cve/CVE-2025-37861.md) | High | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | 7.8 | 0.0033 | | | [CVE-2025-37858](https://patchblox.com/security/data/cve/CVE-2025-37858.md) | High | fs/jfs: Prevent integer overflow in AG size calculation | 7.8 | 0.0031 | | | [CVE-2025-22035](https://patchblox.com/security/data/cve/CVE-2025-22035.md) | High | kernel-64kb: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544). | 7.8 | 0.0031 | | | [CVE-2025-37752](https://patchblox.com/security/data/cve/CVE-2025-37752.md) | High | kernel-64kb: net_sched: sch_sfq: move the limit validation (bsc#1242504). | 7.8 | 0.0030 | | | [CVE-2025-38003](https://patchblox.com/security/data/cve/CVE-2025-38003.md) | High | can: bcm: add missing rcu read protection for procfs content | 7.0 | 0.0030 | | | [CVE-2025-39735](https://patchblox.com/security/data/cve/CVE-2025-39735.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0030 | | | [CVE-2025-37927](https://patchblox.com/security/data/cve/CVE-2025-37927.md) | High | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 | | | [CVE-2025-37869](https://patchblox.com/security/data/cve/CVE-2025-37869.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0028 | | | [CVE-2025-38004](https://patchblox.com/security/data/cve/CVE-2025-38004.md) | High | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 | | | [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 | | | [CVE-2025-37854](https://patchblox.com/security/data/cve/CVE-2025-37854.md) | High | drm/amdkfd: Fix mode1 reset crash issue | 7.8 | 0.0027 | | | [CVE-2025-37943](https://patchblox.com/security/data/cve/CVE-2025-37943.md) | High | wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi | 8.0 | 0.0026 | | | [CVE-2025-22113](https://patchblox.com/security/data/cve/CVE-2025-22113.md) | High | ext4: avoid journaling sb update on error if journal is destroying | 7.8 | 0.0026 | | | [CVE-2025-37944](https://patchblox.com/security/data/cve/CVE-2025-37944.md) | High | wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process | 7.8 | 0.0026 | | | [CVE-2024-57982](https://patchblox.com/security/data/cve/CVE-2024-57982.md) | High | xfrm: state: fix out-of-bounds read during lookup | 7.1 | 0.0025 | | | [CVE-2025-37810](https://patchblox.com/security/data/cve/CVE-2025-37810.md) | High | usb: dwc3: gadget: check that event count does not exceed event buffer length | 7.8 | 0.0025 | | | [CVE-2025-37923](https://patchblox.com/security/data/cve/CVE-2025-37923.md) | High | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 | | | [CVE-2025-37891](https://patchblox.com/security/data/cve/CVE-2025-37891.md) | High | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | 7.8 | 0.0025 | | | [CVE-2025-38060](https://patchblox.com/security/data/cve/CVE-2025-38060.md) | High | bpf: copy_verifier_state() should copy 'loop_entry' field | 7.8 | 0.0024 | | | [CVE-2025-38000](https://patchblox.com/security/data/cve/CVE-2025-38000.md) | High | sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() | 7.8 | 0.0024 | | | [CVE-2025-40014](https://patchblox.com/security/data/cve/CVE-2025-40014.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2025-37911](https://patchblox.com/security/data/cve/CVE-2025-37911.md) | High | bnxt_en: Fix out-of-bound memcpy() during ethtool -w | 7.0 | 0.0024 | | | [CVE-2025-37913](https://patchblox.com/security/data/cve/CVE-2025-37913.md) | High | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 | | | [CVE-2025-37921](https://patchblox.com/security/data/cve/CVE-2025-37921.md) | High | vxlan: vnifilter: Fix unlocked deletion of default FDB entry | 7.8 | 0.0024 | | | [CVE-2025-37973](https://patchblox.com/security/data/cve/CVE-2025-37973.md) | High | wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation | 7.1 | 0.0024 | | | [CVE-2025-21920](https://patchblox.com/security/data/cve/CVE-2025-21920.md) | High | kernel-64kb: vlan: enforce underlying device type (bsc#1240686). | 7.1 | 0.0024 | | | [CVE-2025-37914](https://patchblox.com/security/data/cve/CVE-2025-37914.md) | High | net_sched: ets: Fix double list add in class with netem as child qdisc | 7.8 | 0.0023 | | | [CVE-2025-37930](https://patchblox.com/security/data/cve/CVE-2025-37930.md) | High | drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | 7.0 | 0.0023 | | | [CVE-2025-38065](https://patchblox.com/security/data/cve/CVE-2025-38065.md) | High | orangefs: Do not truncate file size | 7.0 | 0.0023 | | | [CVE-2025-38024](https://patchblox.com/security/data/cve/CVE-2025-38024.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2025-38023](https://patchblox.com/security/data/cve/CVE-2025-38023.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 | | | [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 | | | [CVE-2025-38077](https://patchblox.com/security/data/cve/CVE-2025-38077.md) | High | platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() | 7.8 | 0.0023 | | | [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 | | | [CVE-2025-37915](https://patchblox.com/security/data/cve/CVE-2025-37915.md) | High | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 | | | [CVE-2025-23158](https://patchblox.com/security/data/cve/CVE-2025-23158.md) | High | media: venus: hfi: add check to handle incorrect queue size | 7.8 | 0.0022 | | | [CVE-2025-23156](https://patchblox.com/security/data/cve/CVE-2025-23156.md) | High | media: venus: hfi_parser: refactor hfi packet parsing logic | 7.1 | 0.0022 | | | [CVE-2025-23157](https://patchblox.com/security/data/cve/CVE-2025-23157.md) | High | media: venus: hfi_parser: add check to avoid out of bound access | 7.1 | 0.0022 | | | [CVE-2025-37963](https://patchblox.com/security/data/cve/CVE-2025-37963.md) | High | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0022 | | | [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 | | | [CVE-2025-37890](https://patchblox.com/security/data/cve/CVE-2025-37890.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 | | | [CVE-2025-37979](https://patchblox.com/security/data/cve/CVE-2025-37979.md) | High | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | 7.8 | 0.0022 | | | [CVE-2025-37995](https://patchblox.com/security/data/cve/CVE-2025-37995.md) | High | module: ensure that kobject_put() is safe for module type kobjects | 7.0 | 0.0022 | | | [CVE-2024-56541](https://patchblox.com/security/data/cve/CVE-2024-56541.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-37936](https://patchblox.com/security/data/cve/CVE-2025-37936.md) | High | perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. | 7.0 | 0.0022 | | | [CVE-2024-57987](https://patchblox.com/security/data/cve/CVE-2024-57987.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-57988](https://patchblox.com/security/data/cve/CVE-2024-57988.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-38005](https://patchblox.com/security/data/cve/CVE-2025-38005.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0022 | | | [CVE-2025-37738](https://patchblox.com/security/data/cve/CVE-2025-37738.md) | High | ext4: ignore xattrs past end | 7.8 | 0.0022 | | | [CVE-2025-38079](https://patchblox.com/security/data/cve/CVE-2025-38079.md) | High | crypto: algif_hash - fix double free in hash_accept | 7.8 | 0.0022 | | | [CVE-2025-37901](https://patchblox.com/security/data/cve/CVE-2025-37901.md) | High | irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs | 7.0 | 0.0021 | | | [CVE-2025-22083](https://patchblox.com/security/data/cve/CVE-2025-22083.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-37948](https://patchblox.com/security/data/cve/CVE-2025-37948.md) | High | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 7.0 | 0.0021 | | | [CVE-2024-50293](https://patchblox.com/security/data/cve/CVE-2024-50293.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-56699](https://patchblox.com/security/data/cve/CVE-2024-56699.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-37761](https://patchblox.com/security/data/cve/CVE-2025-37761.md) | High | kernel-livepatch-SLE15-SP7_Update_2: Security update for the Linux Kernel | 7.1 | 0.0021 | | | [CVE-2025-37905](https://patchblox.com/security/data/cve/CVE-2025-37905.md) | High | firmware: arm_scmi: Balance device refcount when destroying devices | 7.0 | 0.0021 | | | [CVE-2025-37934](https://patchblox.com/security/data/cve/CVE-2025-37934.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 | | | [CVE-2025-37892](https://patchblox.com/security/data/cve/CVE-2025-37892.md) | High | mtd: inftlcore: Add error check for inftl_read_oob() | 7.8 | 0.0021 | | | [CVE-2025-37903](https://patchblox.com/security/data/cve/CVE-2025-37903.md) | High | drm/amd/display: Fix slab-use-after-free in hdcp | 7.8 | 0.0021 | | | [CVE-2025-21997](https://patchblox.com/security/data/cve/CVE-2025-21997.md) | High | kernel-64kb: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823). | 7.1 | 0.0021 | | | [CVE-2025-37763](https://patchblox.com/security/data/cve/CVE-2025-37763.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-37938](https://patchblox.com/security/data/cve/CVE-2025-37938.md) | High | tracing: Verify event formats that have "%*p.." | 7.8 | 0.0021 | | | [CVE-2025-37897](https://patchblox.com/security/data/cve/CVE-2025-37897.md) | High | wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release | 7.0 | 0.0020 | | | [CVE-2025-37929](https://patchblox.com/security/data/cve/CVE-2025-37929.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.0 | 0.0020 | | | [CVE-2024-58004](https://patchblox.com/security/data/cve/CVE-2024-58004.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-38013](https://patchblox.com/security/data/cve/CVE-2025-38013.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-38068](https://patchblox.com/security/data/cve/CVE-2025-38068.md) | High | crypto: lzo - Fix compression buffer overrun | 7.8 | 0.0020 | | | [CVE-2025-38027](https://patchblox.com/security/data/cve/CVE-2025-38027.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0020 | | | [CVE-2025-22023](https://patchblox.com/security/data/cve/CVE-2025-22023.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0020 | | | [CVE-2025-37796](https://patchblox.com/security/data/cve/CVE-2025-37796.md) | High | wifi: at76c50x: fix use after free access in at76_disconnect | 7.8 | 0.0020 | | | [CVE-2025-37900](https://patchblox.com/security/data/cve/CVE-2025-37900.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 | | | [CVE-2025-38022](https://patchblox.com/security/data/cve/CVE-2025-38022.md) | High | RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem | 7.8 | 0.0020 | | | [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 | | | [CVE-2025-38015](https://patchblox.com/security/data/cve/CVE-2025-38015.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 | | | [CVE-2025-38020](https://patchblox.com/security/data/cve/CVE-2025-38020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 | | | [CVE-2025-38043](https://patchblox.com/security/data/cve/CVE-2025-38043.md) | High | firmware: arm_ffa: Set dma_mask for ffa devices | 7.0 | 0.0020 | | | [CVE-2025-37981](https://patchblox.com/security/data/cve/CVE-2025-37981.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-37946](https://patchblox.com/security/data/cve/CVE-2025-37946.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-38040](https://patchblox.com/security/data/cve/CVE-2025-38040.md) | High | serial: mctrl_gpio: split disable_ms into sync and no_sync APIs | 7.0 | 0.0020 | | | [CVE-2025-37786](https://patchblox.com/security/data/cve/CVE-2025-37786.md) | High | net: dsa: free routing table on probe failure | 7.8 | 0.0019 | | | [CVE-2025-37953](https://patchblox.com/security/data/cve/CVE-2025-37953.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 | | | [CVE-2025-37982](https://patchblox.com/security/data/cve/CVE-2025-37982.md) | High | wifi: wl1251: fix memory leak in wl1251_tx_work | 7.0 | 0.0019 | | | [CVE-2025-38014](https://patchblox.com/security/data/cve/CVE-2025-38014.md) | High | dmaengine: idxd: Refactor remove call with idxd_cleanup() helper | 7.0 | 0.0019 | | | [CVE-2025-38045](https://patchblox.com/security/data/cve/CVE-2025-38045.md) | High | wifi: iwlwifi: fix debug actions order | 7.0 | 0.0019 | | | [CVE-2025-37987](https://patchblox.com/security/data/cve/CVE-2025-37987.md) | High | pds_core: Prevent possible adminq overflow/stuck condition | 7.0 | 0.0019 | | | [CVE-2025-38053](https://patchblox.com/security/data/cve/CVE-2025-38053.md) | High | kernel-64kb: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746). | 7.1 | 0.0019 | | | [CVE-2025-37972](https://patchblox.com/security/data/cve/CVE-2025-37972.md) | High | Input: mtk-pmic-keys - fix possible null pointer dereference | 7.0 | 0.0019 | | | [CVE-2025-38055](https://patchblox.com/security/data/cve/CVE-2025-38055.md) | High | kernel-default-base: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (bsc#1244747). | 7.0 | 0.0019 | | | [CVE-2025-37951](https://patchblox.com/security/data/cve/CVE-2025-37951.md) | High | drm/v3d: Add job to pending list if the reset was skipped | 7.0 | 0.0019 | | | [CVE-2025-37965](https://patchblox.com/security/data/cve/CVE-2025-37965.md) | High | kernel-uek: drm/amd/display: Fix invalid context error in dml helper (Roman Li) [Orabug: 37977185] | 7.0 | 0.0019 | | | [CVE-2024-58077](https://patchblox.com/security/data/cve/CVE-2024-58077.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2025-37969](https://patchblox.com/security/data/cve/CVE-2025-37969.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | 7.0 | 0.0018 | | | [CVE-2025-38081](https://patchblox.com/security/data/cve/CVE-2025-38081.md) | High | spi-rockchip: Fix register out of bounds access | 7.1 | 0.0018 | | | [CVE-2025-37997](https://patchblox.com/security/data/cve/CVE-2025-37997.md) | High | netfilter: ipset: fix region locking in hash types | 7.0 | 0.0018 | | | [CVE-2024-58015](https://patchblox.com/security/data/cve/CVE-2024-58015.md) | High | kernel-64k-debug-modules-core: kernel: wifi: ath12k: Fix for out-of bound access error | 7.8 | 0.0018 | | | [CVE-2024-58062](https://patchblox.com/security/data/cve/CVE-2024-58062.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2025-37970](https://patchblox.com/security/data/cve/CVE-2025-37970.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo | 7.0 | 0.0018 | | | [CVE-2025-38080](https://patchblox.com/security/data/cve/CVE-2025-38080.md) | High | drm/amd/display: Increase block_sequence array size | 7.0 | 0.0018 | | | [CVE-2025-38078](https://patchblox.com/security/data/cve/CVE-2025-38078.md) | High | ALSA: pcm: Fix race of buffer access at PCM OSS layer | 7.0 | 0.0017 | | | [CVE-2025-37968](https://patchblox.com/security/data/cve/CVE-2025-37968.md) | High | iio: light: opt3001: fix deadlock due to concurrent flag access | 7.0 | 0.0016 | | | [CVE-2025-38083](https://patchblox.com/security/data/cve/CVE-2025-38083.md) | High | net_sched: prio: fix a race in prio_tune() | 7.0 | 0.0016 | | | [CVE-2025-37871](https://patchblox.com/security/data/cve/CVE-2025-37871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0079 | | | [CVE-2024-49568](https://patchblox.com/security/data/cve/CVE-2024-49568.md) | Routine | net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg | 5.5 | 0.0058 | | | [CVE-2025-38057](https://patchblox.com/security/data/cve/CVE-2025-38057.md) | Routine | espintcp: fix skb leaks | 5.5 | 0.0048 | | | [CVE-2024-58053](https://patchblox.com/security/data/cve/CVE-2024-58053.md) | Routine | rxrpc: Fix handling of received connection abort | 5.5 | 0.0046 | | | [CVE-2025-37757](https://patchblox.com/security/data/cve/CVE-2025-37757.md) | Routine | tipc: fix memory leak in tipc_link_xmit | 6.1 | 0.0045 | | | [CVE-2025-21959](https://patchblox.com/security/data/cve/CVE-2025-21959.md) | Routine | kernel-64kb: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814). | 5.5 | 0.0045 | | | [CVE-2025-21629](https://patchblox.com/security/data/cve/CVE-2025-21629.md) | Routine | net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets | 5.5 | 0.0043 | | | [CVE-2025-21938](https://patchblox.com/security/data/cve/CVE-2025-21938.md) | Routine | kernel-64kb: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723). | 5.9 | 0.0039 | | | [CVE-2025-21805](https://patchblox.com/security/data/cve/CVE-2025-21805.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0039 | | | [CVE-2025-21868](https://patchblox.com/security/data/cve/CVE-2025-21868.md) | Routine | kernel-64kb: kABI workaround for adding an header (bsc#1240180). | 5.5 | 0.0039 | | | [CVE-2025-37959](https://patchblox.com/security/data/cve/CVE-2025-37959.md) | Routine | bpf: Scrub packet on bpf_redirect_peer | 5.5 | 0.0038 | | | [CVE-2025-21720](https://patchblox.com/security/data/cve/CVE-2025-21720.md) | Routine | kernel-64kb: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859). | 5.5 | 0.0036 | | | [CVE-2025-37874](https://patchblox.com/security/data/cve/CVE-2025-37874.md) | Routine | net: ngbe: fix memory leak in ngbe_probe() error path | 5.5 | 0.0032 | | | [CVE-2025-37836](https://patchblox.com/security/data/cve/CVE-2025-37836.md) | Routine | PCI: Fix reference leak in pci_register_host_bridge() | 5.5 | 0.0031 | | | [CVE-2025-37881](https://patchblox.com/security/data/cve/CVE-2025-37881.md) | Routine | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | 5.5 | 0.0031 | | | [CVE-2025-37859](https://patchblox.com/security/data/cve/CVE-2025-37859.md) | Routine | page_pool: avoid infinite loop to schedule delayed worker | 5.5 | 0.0031 | | | [CVE-2025-37862](https://patchblox.com/security/data/cve/CVE-2025-37862.md) | Routine | HID: pidff: Fix null pointer dereference in pidff_find_fields | 5.5 | 0.0031 | | | [CVE-2025-37867](https://patchblox.com/security/data/cve/CVE-2025-37867.md) | Routine | RDMA/core: Silence oversized kvmalloc() warning | 5.5 | 0.0031 | | | [CVE-2025-37756](https://patchblox.com/security/data/cve/CVE-2025-37756.md) | Routine | net: tls: explicitly disallow disconnect | 5.5 | 0.0030 | | | [CVE-2025-37841](https://patchblox.com/security/data/cve/CVE-2025-37841.md) | Routine | pm: cpupower: bench: Prevent NULL dereference on malloc failure | 5.5 | 0.0030 | | | [CVE-2025-37844](https://patchblox.com/security/data/cve/CVE-2025-37844.md) | Routine | cifs: avoid NULL pointer dereference in dbg call | 5.5 | 0.0030 | | | [CVE-2025-37850](https://patchblox.com/security/data/cve/CVE-2025-37850.md) | Routine | kernel-livepatch-SLE15-SP7_Update_2: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2025-37851](https://patchblox.com/security/data/cve/CVE-2025-37851.md) | Routine | fbdev: omapfb: Add 'plane' value check | 5.5 | 0.0030 | | | [CVE-2025-37925](https://patchblox.com/security/data/cve/CVE-2025-37925.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2025-37889](https://patchblox.com/security/data/cve/CVE-2025-37889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 | | | [CVE-2025-37865](https://patchblox.com/security/data/cve/CVE-2025-37865.md) | Routine | net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported | 5.5 | 0.0029 | | | [CVE-2025-37875](https://patchblox.com/security/data/cve/CVE-2025-37875.md) | Routine | igc: fix PTM cycle trigger logic | 5.5 | 0.0029 | | | [CVE-2025-37852](https://patchblox.com/security/data/cve/CVE-2025-37852.md) | Routine | drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() | 5.5 | 0.0028 | | | [CVE-2025-37853](https://patchblox.com/security/data/cve/CVE-2025-37853.md) | Routine | drm/amdkfd: debugfs hang_hws skip GPU with MES | 5.5 | 0.0028 | | | [CVE-2025-37837](https://patchblox.com/security/data/cve/CVE-2025-37837.md) | Routine | kernel-azure: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952). | 5.5 | 0.0028 | | | [CVE-2025-37888](https://patchblox.com/security/data/cve/CVE-2025-37888.md) | Routine | bpftool: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Henry Martin) [Orabug: 37938078] | 5.5 | 0.0028 | | | [CVE-2025-37873](https://patchblox.com/security/data/cve/CVE-2025-37873.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2025-37998](https://patchblox.com/security/data/cve/CVE-2025-37998.md) | Routine | openvswitch: Fix unsafe attribute parsing in output_userspace() | 5.5 | 0.0027 | | | [CVE-2025-38240](https://patchblox.com/security/data/cve/CVE-2025-38240.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2025-37747](https://patchblox.com/security/data/cve/CVE-2025-37747.md) | Routine | perf: Fix hang while freeing sigtrap event | 5.5 | 0.0025 | | | [CVE-2025-37918](https://patchblox.com/security/data/cve/CVE-2025-37918.md) | Routine | Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() | 5.5 | 0.0025 | | | [CVE-2024-41085](https://patchblox.com/security/data/cve/CVE-2024-41085.md) | Routine | cxl/mem: Fix no cxl_nvd during pmem region auto-assembling | 5.5 | 0.0024 | | | [CVE-2025-37743](https://patchblox.com/security/data/cve/CVE-2025-37743.md) | Routine | wifi: ath12k: Avoid memory leak while enabling statistics | 5.5 | 0.0024 | | | [CVE-2025-37937](https://patchblox.com/security/data/cve/CVE-2025-37937.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52888](https://patchblox.com/security/data/cve/CVE-2023-52888.md) | Routine | media: mediatek: vcodec: Only free buffer VA that is not NULL | 5.5 | 0.0024 | | | [CVE-2025-37932](https://patchblox.com/security/data/cve/CVE-2025-37932.md) | Routine | sch_htb: make htb_qlen_notify() idempotent | 5.5 | 0.0024 | | | [CVE-2025-21842](https://patchblox.com/security/data/cve/CVE-2025-21842.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-37990](https://patchblox.com/security/data/cve/CVE-2025-37990.md) | Routine | wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() | 5.5 | 0.0024 | | | [CVE-2025-38044](https://patchblox.com/security/data/cve/CVE-2025-38044.md) | Routine | media: cx231xx: set device_caps for 417 | 5.5 | 0.0024 | | | [CVE-2025-21899](https://patchblox.com/security/data/cve/CVE-2025-21899.md) | Routine | tracing: Fix bad hist from corrupting named_triggers list | 6.0 | 0.0023 | | | [CVE-2025-21898](https://patchblox.com/security/data/cve/CVE-2025-21898.md) | Routine | kernel-64kb: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610). | 5.5 | 0.0023 | | | [CVE-2025-37909](https://patchblox.com/security/data/cve/CVE-2025-37909.md) | Routine | net: lan743x: Fix memleak issue when GSO enabled | 5.5 | 0.0023 | | | [CVE-2025-23159](https://patchblox.com/security/data/cve/CVE-2025-23159.md) | Routine | media: venus: hfi: add a check to handle OOB in sfr region | 5.5 | 0.0023 | | | [CVE-2025-37912](https://patchblox.com/security/data/cve/CVE-2025-37912.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-26831](https://patchblox.com/security/data/cve/CVE-2024-26831.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2025-37765](https://patchblox.com/security/data/cve/CVE-2025-37765.md) | Routine | drm/nouveau: prime: fix ttm_bo_delayed_delete oops | 5.5 | 0.0022 | | | [CVE-2025-23144](https://patchblox.com/security/data/cve/CVE-2025-23144.md) | Routine | backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() | 5.5 | 0.0022 | | | [CVE-2025-37814](https://patchblox.com/security/data/cve/CVE-2025-37814.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-38072](https://patchblox.com/security/data/cve/CVE-2025-38072.md) | Routine | libnvdimm/labels: Fix divide error in nd_label_data_init() | 5.5 | 0.0022 | | | [CVE-2025-22005](https://patchblox.com/security/data/cve/CVE-2025-22005.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 | | | [CVE-2024-26762](https://patchblox.com/security/data/cve/CVE-2024-26762.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-22089](https://patchblox.com/security/data/cve/CVE-2025-22089.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-37931](https://patchblox.com/security/data/cve/CVE-2025-37931.md) | Routine | btrfs: adjust subpage bit start based on sectorsize | 5.5 | 0.0022 | | | [CVE-2025-21770](https://patchblox.com/security/data/cve/CVE-2025-21770.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21901](https://patchblox.com/security/data/cve/CVE-2025-21901.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21939](https://patchblox.com/security/data/cve/CVE-2025-21939.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-23146](https://patchblox.com/security/data/cve/CVE-2025-23146.md) | Routine | mfd: ene-kb3930: Fix a potential NULL pointer dereference | 5.5 | 0.0022 | | | [CVE-2025-37992](https://patchblox.com/security/data/cve/CVE-2025-37992.md) | Routine | net_sched: Flush gso_skb list too during ->change() | 5.5 | 0.0022 | | | [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 | | | [CVE-2025-22066](https://patchblox.com/security/data/cve/CVE-2025-22066.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-22095](https://patchblox.com/security/data/cve/CVE-2025-22095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-23147](https://patchblox.com/security/data/cve/CVE-2025-23147.md) | Routine | i3c: Add NULL pointer check in i3c_master_queue_ibi() | 5.5 | 0.0021 | | | [CVE-2025-23148](https://patchblox.com/security/data/cve/CVE-2025-23148.md) | Routine | soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | 5.5 | 0.0021 | | | [CVE-2025-37766](https://patchblox.com/security/data/cve/CVE-2025-37766.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37801](https://patchblox.com/security/data/cve/CVE-2025-37801.md) | Routine | spi: spi-imx: Add check for spi_imx_setupxfer() | 5.5 | 0.0021 | | | [CVE-2025-38009](https://patchblox.com/security/data/cve/CVE-2025-38009.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-38031](https://patchblox.com/security/data/cve/CVE-2025-38031.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-37847](https://patchblox.com/security/data/cve/CVE-2025-37847.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-37848](https://patchblox.com/security/data/cve/CVE-2025-37848.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-37884](https://patchblox.com/security/data/cve/CVE-2025-37884.md) | Routine | bpf: Fix deadlock between rcu_tasks_trace and event_mutex. | 5.5 | 0.0021 | | | [CVE-2025-37945](https://patchblox.com/security/data/cve/CVE-2025-37945.md) | Routine | net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY | 5.5 | 0.0021 | | | [CVE-2024-43869](https://patchblox.com/security/data/cve/CVE-2024-43869.md) | Routine | kernel-64k: kernel: perf: Fix event leak upon exec and file release | 6.1 | 0.0021 | | | [CVE-2025-37754](https://patchblox.com/security/data/cve/CVE-2025-37754.md) | Routine | drm/i915/huc: Fix fence not released on early probe errors | 5.5 | 0.0021 | | | [CVE-2025-37868](https://patchblox.com/security/data/cve/CVE-2025-37868.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2025-22111](https://patchblox.com/security/data/cve/CVE-2025-22111.md) | Routine | kernel-64kb: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572). | 5.5 | 0.0021 | | | [CVE-2025-23155](https://patchblox.com/security/data/cve/CVE-2025-23155.md) | Routine | net: stmmac: Fix accessing freed irq affinity_hint | 5.5 | 0.0021 | | | [CVE-2025-37768](https://patchblox.com/security/data/cve/CVE-2025-37768.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37770](https://patchblox.com/security/data/cve/CVE-2025-37770.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 | | | [CVE-2025-37933](https://patchblox.com/security/data/cve/CVE-2025-37933.md) | Routine | octeon_ep: Fix host hang issue during device reboot | 5.6 | 0.0021 | | | [CVE-2025-37781](https://patchblox.com/security/data/cve/CVE-2025-37781.md) | Routine | i2c: cros-ec-tunnel: defer probe if parent EC is not present | 5.5 | 0.0021 | | | [CVE-2025-37800](https://patchblox.com/security/data/cve/CVE-2025-37800.md) | Routine | driver core: fix potential NULL pointer dereference in dev_uevent() | 5.5 | 0.0021 | | | [CVE-2025-21713](https://patchblox.com/security/data/cve/CVE-2025-21713.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-37816](https://patchblox.com/security/data/cve/CVE-2025-37816.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0021 | | | [CVE-2025-21880](https://patchblox.com/security/data/cve/CVE-2025-21880.md) | Routine | kernel-livepatch-SLE15-SP7_Update_2: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-50034](https://patchblox.com/security/data/cve/CVE-2024-50034.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-37767](https://patchblox.com/security/data/cve/CVE-2025-37767.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 | | | [CVE-2025-37771](https://patchblox.com/security/data/cve/CVE-2025-37771.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 | | | [CVE-2025-37805](https://patchblox.com/security/data/cve/CVE-2025-37805.md) | Routine | sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | 5.5 | 0.0020 | | | [CVE-2025-23149](https://patchblox.com/security/data/cve/CVE-2025-23149.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0020 | | | [CVE-2024-56613](https://patchblox.com/security/data/cve/CVE-2024-56613.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-21658](https://patchblox.com/security/data/cve/CVE-2025-21658.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-21940](https://patchblox.com/security/data/cve/CVE-2025-21940.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-22124](https://patchblox.com/security/data/cve/CVE-2025-22124.md) | Routine | md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb | 6.0 | 0.0020 | | | [CVE-2025-37769](https://patchblox.com/security/data/cve/CVE-2025-37769.md) | Routine | drm/amd/pm/smu11: Prevent division by zero | 5.5 | 0.0020 | | | [CVE-2025-37772](https://patchblox.com/security/data/cve/CVE-2025-37772.md) | Routine | RDMA/cma: Fix workqueue crash in cma_netevent_work_handler | 5.5 | 0.0020 | | | [CVE-2025-37788](https://patchblox.com/security/data/cve/CVE-2025-37788.md) | Routine | cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path | 5.5 | 0.0020 | | | [CVE-2025-38011](https://patchblox.com/security/data/cve/CVE-2025-38011.md) | Routine | drm/amdgpu: csa unmap use uninterruptible lock | 5.5 | 0.0020 | | | [CVE-2025-21824](https://patchblox.com/security/data/cve/CVE-2025-21824.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-37740](https://patchblox.com/security/data/cve/CVE-2025-37740.md) | Routine | jfs: add sanity check for agwidth in dbMount | 5.5 | 0.0020 | | | [CVE-2025-37758](https://patchblox.com/security/data/cve/CVE-2025-37758.md) | Routine | ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | 5.5 | 0.0020 | | | [CVE-2025-37764](https://patchblox.com/security/data/cve/CVE-2025-37764.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-37792](https://patchblox.com/security/data/cve/CVE-2025-37792.md) | Routine | Bluetooth: btrtl: Prevent potential NULL dereference | 5.5 | 0.0020 | | | [CVE-2025-37794](https://patchblox.com/security/data/cve/CVE-2025-37794.md) | Routine | wifi: mac80211: Purge vif txq in ieee80211_do_stop() | 5.5 | 0.0020 | | | [CVE-2025-37791](https://patchblox.com/security/data/cve/CVE-2025-37791.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2024-58100](https://patchblox.com/security/data/cve/CVE-2024-58100.md) | Routine | bpf: check changes_pkt_data property for extension programs | 6.0 | 0.0020 | | | [CVE-2025-38007](https://patchblox.com/security/data/cve/CVE-2025-38007.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2024-58098](https://patchblox.com/security/data/cve/CVE-2024-58098.md) | Routine | bpf: track changes_pkt_data property for global functions | 6.0 | 0.0020 | | | [CVE-2024-58237](https://patchblox.com/security/data/cve/CVE-2024-58237.md) | Routine | bpf: consider that tail calls invalidate packet pointers | 6.0 | 0.0020 | | | [CVE-2025-22119](https://patchblox.com/security/data/cve/CVE-2025-22119.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-37980](https://patchblox.com/security/data/cve/CVE-2025-37980.md) | Routine | block: fix resource leak in blk_register_queue() error path | 5.5 | 0.0019 | | | [CVE-2025-37983](https://patchblox.com/security/data/cve/CVE-2025-37983.md) | Routine | qibfs: fix _another_ leak | 5.5 | 0.0019 | | | [CVE-2025-38010](https://patchblox.com/security/data/cve/CVE-2025-38010.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-38059](https://patchblox.com/security/data/cve/CVE-2025-38059.md) | Routine | btrfs: avoid NULL pointer dereference if no valid csum tree | 5.5 | 0.0019 | | | [CVE-2025-22120](https://patchblox.com/security/data/cve/CVE-2025-22120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-37961](https://patchblox.com/security/data/cve/CVE-2025-37961.md) | Routine | ipvs: fix uninit-value for saddr in do_output_route4 | 6.5 | 0.0019 | | | [CVE-2023-53146](https://patchblox.com/security/data/cve/CVE-2023-53146.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-37742](https://patchblox.com/security/data/cve/CVE-2025-37742.md) | Routine | jfs: Fix uninit-value access of imap allocated in the diMount() function | 5.5 | 0.0019 | | | [CVE-2025-37811](https://patchblox.com/security/data/cve/CVE-2025-37811.md) | Routine | kernel-64kb: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907). | 5.5 | 0.0019 | | | [CVE-2025-21987](https://patchblox.com/security/data/cve/CVE-2025-21987.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0019 | | | [CVE-2025-37815](https://patchblox.com/security/data/cve/CVE-2025-37815.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-37978](https://patchblox.com/security/data/cve/CVE-2025-37978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-23162](https://patchblox.com/security/data/cve/CVE-2025-23162.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-37793](https://patchblox.com/security/data/cve/CVE-2025-37793.md) | Routine | ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() | 5.5 | 0.0019 | | | [CVE-2025-37986](https://patchblox.com/security/data/cve/CVE-2025-37986.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-38104](https://patchblox.com/security/data/cve/CVE-2025-38104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-21849](https://patchblox.com/security/data/cve/CVE-2025-21849.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2025-37741](https://patchblox.com/security/data/cve/CVE-2025-37741.md) | Routine | jfs: Prevent copying of nlink with value 0 from disk inode | 5.5 | 0.0016 | | | [CVE-2025-37812](https://patchblox.com/security/data/cve/CVE-2025-37812.md) | Routine | usb: cdns3: Fix deadlock when using NCM gadget | 5.5 | 0.0016 | | | [CVE-2025-21911](https://patchblox.com/security/data/cve/CVE-2025-21911.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 | | | [CVE-2025-37967](https://patchblox.com/security/data/cve/CVE-2025-37967.md) | Routine | usb: typec: ucsi: displayport: Fix deadlock | 5.5 | 0.0016 | | | [CVE-2025-23151](https://patchblox.com/security/data/cve/CVE-2025-23151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0016 | | | [CVE-2025-23161](https://patchblox.com/security/data/cve/CVE-2025-23161.md) | Routine | PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | 5.5 | 0.0015 | | | [CVE-2025-37985](https://patchblox.com/security/data/cve/CVE-2025-37985.md) | Routine | USB: wdm: close race between wdm_open and wdm_wwan_port_stop | 4.7 | 0.0014 | | | [CVE-2025-37782](https://patchblox.com/security/data/cve/CVE-2025-37782.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.