{
  "fix": "SUSE-SU-2025:02335-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02335-1",
  "summary": "SUSE-SU-2025:02335-1, released July 16, 2025, fixes 94 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 5 packages",
  "released": "2025-07-16T14:44:37Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-37917, high severity",
  "supported": true,
  "cveCount": 94,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00575,
  "maxCvss": 7.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:02335-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_13",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-rt-update-13",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.5.1",
      "supported": true
    },
    {
      "product": "kernel-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.44.1",
      "supported": true
    },
    {
      "product": "kernel-rt_debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-debug-kernel-rt-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.44.1",
      "supported": true
    },
    {
      "product": "kernel-source-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.44.1",
      "supported": true
    },
    {
      "product": "kernel-syms-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.44.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-37917",
      "url": "https://patchblox.com/security/cve/CVE-2025-37917",
      "title": "kernel-64kb: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00561,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38001",
      "url": "https://patchblox.com/security/cve/CVE-2025-38001",
      "title": "net_sched: hfsc: Address reentrant enqueue adding class to eltree twice",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00555,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-50106",
      "url": "https://patchblox.com/security/cve/CVE-2024-50106",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7,
      "epss": 0.00496,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38018",
      "url": "https://patchblox.com/security/cve/CVE-2025-38018",
      "title": "kernel-64kb: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00484,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22035",
      "url": "https://patchblox.com/security/cve/CVE-2025-22035",
      "title": "kernel-64kb: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37752",
      "url": "https://patchblox.com/security/cve/CVE-2025-37752",
      "title": "kernel-64kb: net_sched: sch_sfq: move the limit validation (bsc#1242504).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38003",
      "url": "https://patchblox.com/security/cve/CVE-2025-38003",
      "title": "can: bcm: add missing rcu read protection for procfs content",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37927",
      "url": "https://patchblox.com/security/cve/CVE-2025-37927",
      "title": "iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38004",
      "url": "https://patchblox.com/security/cve/CVE-2025-38004",
      "title": "can: bcm: add locking for bcm_op runtime updates",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22113",
      "url": "https://patchblox.com/security/cve/CVE-2025-22113",
      "title": "ext4: avoid journaling sb update on error if journal is destroying",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-57982",
      "url": "https://patchblox.com/security/cve/CVE-2024-57982",
      "title": "xfrm: state: fix out-of-bounds read during lookup",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37923",
      "url": "https://patchblox.com/security/cve/CVE-2025-37923",
      "title": "tracing: Fix oob write in trace_seq_to_buffer()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38060",
      "url": "https://patchblox.com/security/cve/CVE-2025-38060",
      "title": "bpf: copy_verifier_state() should copy \u0027loop_entry\u0027 field",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38000",
      "url": "https://patchblox.com/security/cve/CVE-2025-38000",
      "title": "sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37921",
      "url": "https://patchblox.com/security/cve/CVE-2025-37921",
      "title": "vxlan: vnifilter: Fix unlocked deletion of default FDB entry",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00237,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37973",
      "url": "https://patchblox.com/security/cve/CVE-2025-37973",
      "title": "wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21920",
      "url": "https://patchblox.com/security/cve/CVE-2025-21920",
      "title": "kernel-64kb: vlan: enforce underlying device type (bsc#1240686).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38065",
      "url": "https://patchblox.com/security/cve/CVE-2025-38065",
      "title": "orangefs: Do not truncate file size",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38024",
      "url": "https://patchblox.com/security/cve/CVE-2025-38024",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38023",
      "url": "https://patchblox.com/security/cve/CVE-2025-38023",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38077",
      "url": "https://patchblox.com/security/cve/CVE-2025-38077",
      "title": "platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37994",
      "url": "https://patchblox.com/security/cve/CVE-2025-37994",
      "title": "usb: typec: ucsi: displayport: Fix NULL pointer access",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37995",
      "url": "https://patchblox.com/security/cve/CVE-2025-37995",
      "title": "module: ensure that kobject_put() is safe for module type kobjects",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37936",
      "url": "https://patchblox.com/security/cve/CVE-2025-37936",
      "title": "perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU\u0027s value.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38005",
      "url": "https://patchblox.com/security/cve/CVE-2025-38005",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37738",
      "url": "https://patchblox.com/security/cve/CVE-2025-37738",
      "title": "ext4: ignore xattrs past end",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38079",
      "url": "https://patchblox.com/security/cve/CVE-2025-38079",
      "title": "crypto: algif_hash - fix double free in hash_accept",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22083",
      "url": "https://patchblox.com/security/cve/CVE-2025-22083",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-56699",
      "url": "https://patchblox.com/security/cve/CVE-2024-56699",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21997",
      "url": "https://patchblox.com/security/cve/CVE-2025-21997",
      "title": "kernel-64kb: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37938",
      "url": "https://patchblox.com/security/cve/CVE-2025-37938",
      "title": "tracing: Verify event formats that have \u0022%*p..\u0022",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38013",
      "url": "https://patchblox.com/security/cve/CVE-2025-38013",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38068",
      "url": "https://patchblox.com/security/cve/CVE-2025-38068",
      "title": "crypto: lzo - Fix compression buffer overrun",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38027",
      "url": "https://patchblox.com/security/cve/CVE-2025-38027",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38022",
      "url": "https://patchblox.com/security/cve/CVE-2025-38022",
      "title": "RDMA/core: Fix \u0022KASAN: slab-use-after-free Read in ib_register_device\u0022 problem",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38015",
      "url": "https://patchblox.com/security/cve/CVE-2025-38015",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38020",
      "url": "https://patchblox.com/security/cve/CVE-2025-38020",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38043",
      "url": "https://patchblox.com/security/cve/CVE-2025-38043",
      "title": "firmware: arm_ffa: Set dma_mask for ffa devices",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37946",
      "url": "https://patchblox.com/security/cve/CVE-2025-37946",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38040",
      "url": "https://patchblox.com/security/cve/CVE-2025-38040",
      "title": "serial: mctrl_gpio: split disable_ms into sync and no_sync APIs",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37786",
      "url": "https://patchblox.com/security/cve/CVE-2025-37786",
      "title": "net: dsa: free routing table on probe failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38014",
      "url": "https://patchblox.com/security/cve/CVE-2025-38014",
      "title": "dmaengine: idxd: Refactor remove call with idxd_cleanup() helper",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38045",
      "url": "https://patchblox.com/security/cve/CVE-2025-38045",
      "title": "wifi: iwlwifi: fix debug actions order",
      "priority": "High",
      "severity": "Low",
      "cvss": 7,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37987",
      "url": "https://patchblox.com/security/cve/CVE-2025-37987",
      "title": "pds_core: Prevent possible adminq overflow/stuck condition",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38053",
      "url": "https://patchblox.com/security/cve/CVE-2025-38053",
      "title": "kernel-64kb: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38081",
      "url": "https://patchblox.com/security/cve/CVE-2025-38081",
      "title": "spi-rockchip: Fix register out of bounds access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37997",
      "url": "https://patchblox.com/security/cve/CVE-2025-37997",
      "title": "netfilter: ipset: fix region locking in hash types",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38080",
      "url": "https://patchblox.com/security/cve/CVE-2025-38080",
      "title": "drm/amd/display: Increase block_sequence array size",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38078",
      "url": "https://patchblox.com/security/cve/CVE-2025-38078",
      "title": "ALSA: pcm: Fix race of buffer access at PCM OSS layer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37968",
      "url": "https://patchblox.com/security/cve/CVE-2025-37968",
      "title": "iio: light: opt3001: fix deadlock due to concurrent flag access",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38083",
      "url": "https://patchblox.com/security/cve/CVE-2025-38083",
      "title": "net_sched: prio: fix a race in prio_tune()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-49568",
      "url": "https://patchblox.com/security/cve/CVE-2024-49568",
      "title": "net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38057",
      "url": "https://patchblox.com/security/cve/CVE-2025-38057",
      "title": "espintcp: fix skb leaks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00484,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58053",
      "url": "https://patchblox.com/security/cve/CVE-2024-58053",
      "title": "rxrpc: Fix handling of received connection abort",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37757",
      "url": "https://patchblox.com/security/cve/CVE-2025-37757",
      "title": "tipc: fix memory leak in tipc_link_xmit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21959",
      "url": "https://patchblox.com/security/cve/CVE-2025-21959",
      "title": "kernel-64kb: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21938",
      "url": "https://patchblox.com/security/cve/CVE-2025-21938",
      "title": "kernel-64kb: mptcp: fix \u0027scheduling while atomic\u0027 in mptcp_pm_nl_append_new_local_addr (bsc#1240723).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.9,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21868",
      "url": "https://patchblox.com/security/cve/CVE-2025-21868",
      "title": "kernel-64kb: kABI workaround for adding an header (bsc#1240180).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21720",
      "url": "https://patchblox.com/security/cve/CVE-2025-21720",
      "title": "kernel-64kb: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00363,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37874",
      "url": "https://patchblox.com/security/cve/CVE-2025-37874",
      "title": "net: ngbe: fix memory leak in ngbe_probe() error path",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37859",
      "url": "https://patchblox.com/security/cve/CVE-2025-37859",
      "title": "page_pool: avoid infinite loop to schedule delayed worker",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37862",
      "url": "https://patchblox.com/security/cve/CVE-2025-37862",
      "title": "HID: pidff: Fix null pointer dereference in pidff_find_fields",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37756",
      "url": "https://patchblox.com/security/cve/CVE-2025-37756",
      "title": "net: tls: explicitly disallow disconnect",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00301,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37844",
      "url": "https://patchblox.com/security/cve/CVE-2025-37844",
      "title": "cifs: avoid NULL pointer dereference in dbg call",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37865",
      "url": "https://patchblox.com/security/cve/CVE-2025-37865",
      "title": "net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37998",
      "url": "https://patchblox.com/security/cve/CVE-2025-37998",
      "title": "openvswitch: Fix unsafe attribute parsing in output_userspace()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37743",
      "url": "https://patchblox.com/security/cve/CVE-2025-37743",
      "title": "wifi: ath12k: Avoid memory leak while enabling statistics",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52888",
      "url": "https://patchblox.com/security/cve/CVE-2023-52888",
      "title": "media: mediatek: vcodec: Only free buffer VA that is not NULL",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38044",
      "url": "https://patchblox.com/security/cve/CVE-2025-38044",
      "title": "media: cx231xx: set device_caps for 417",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21899",
      "url": "https://patchblox.com/security/cve/CVE-2025-21899",
      "title": "tracing: Fix bad hist from corrupting named_triggers list",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21898",
      "url": "https://patchblox.com/security/cve/CVE-2025-21898",
      "title": "kernel-64kb: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37909",
      "url": "https://patchblox.com/security/cve/CVE-2025-37909",
      "title": "net: lan743x: Fix memleak issue when GSO enabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26831",
      "url": "https://patchblox.com/security/cve/CVE-2024-26831",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38072",
      "url": "https://patchblox.com/security/cve/CVE-2025-38072",
      "title": "libnvdimm/labels: Fix divide error in nd_label_data_init()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37992",
      "url": "https://patchblox.com/security/cve/CVE-2025-37992",
      "title": "net_sched: Flush gso_skb list too during -\u003Echange()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37801",
      "url": "https://patchblox.com/security/cve/CVE-2025-37801",
      "title": "spi: spi-imx: Add check for spi_imx_setupxfer()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38009",
      "url": "https://patchblox.com/security/cve/CVE-2025-38009",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38031",
      "url": "https://patchblox.com/security/cve/CVE-2025-38031",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37884",
      "url": "https://patchblox.com/security/cve/CVE-2025-37884",
      "title": "bpf: Fix deadlock between rcu_tasks_trace and event_mutex.",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37945",
      "url": "https://patchblox.com/security/cve/CVE-2025-37945",
      "title": "net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22111",
      "url": "https://patchblox.com/security/cve/CVE-2025-22111",
      "title": "kernel-64kb: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-23155",
      "url": "https://patchblox.com/security/cve/CVE-2025-23155",
      "title": "net: stmmac: Fix accessing freed irq affinity_hint",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37933",
      "url": "https://patchblox.com/security/cve/CVE-2025-37933",
      "title": "octeon_ep: Fix host hang issue during device reboot",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.6,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37800",
      "url": "https://patchblox.com/security/cve/CVE-2025-37800",
      "title": "driver core: fix potential NULL pointer dereference in dev_uevent()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-56613",
      "url": "https://patchblox.com/security/cve/CVE-2024-56613",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21658",
      "url": "https://patchblox.com/security/cve/CVE-2025-21658",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38011",
      "url": "https://patchblox.com/security/cve/CVE-2025-38011",
      "title": "drm/amdgpu: csa unmap use uninterruptible lock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38007",
      "url": "https://patchblox.com/security/cve/CVE-2025-38007",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38010",
      "url": "https://patchblox.com/security/cve/CVE-2025-38010",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38059",
      "url": "https://patchblox.com/security/cve/CVE-2025-38059",
      "title": "btrfs: avoid NULL pointer dereference if no valid csum tree",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22120",
      "url": "https://patchblox.com/security/cve/CVE-2025-22120",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37961",
      "url": "https://patchblox.com/security/cve/CVE-2025-37961",
      "title": "ipvs: fix uninit-value for saddr in do_output_route4",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37811",
      "url": "https://patchblox.com/security/cve/CVE-2025-37811",
      "title": "kernel-64kb: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37967",
      "url": "https://patchblox.com/security/cve/CVE-2025-37967",
      "title": "usb: typec: ucsi: displayport: Fix deadlock",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}