{ "fix": "SUSE-SU-2025:02853-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02853-1", "summary": "SUSE-SU-2025:02853-1, released August 18, 2025, fixes 260 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_3 (version 1-150700.1.5.1). One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "advisory", "title": "kernel-livepatch-SLE15-SP7-RT_Update_3 security update", "released": "2025-08-18T16:01:54Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2025-38352, exploited (CISA KEV)", "supported": true, "cveCount": 260, "exploitedCveCount": 1, "kevCveCount": 1, "ransomwareCveCount": 0, "maxEpss": 0.03133, "maxCvss": 9.8, "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:02853-1", "appliesTo": [ { "product": "kernel-livepatch-SLE15-SP7-RT_Update_3", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-3", "release": "sles 15.7", "fixedVersion": "1-150700.1.5.1", "supported": true } ], "cves": [ { "cveId": "CVE-2025-38352", "url": "https://patchblox.com/security/cve/CVE-2025-38352", "title": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()", "priority": "Patch now", "severity": "Moderate", "cvss": 7.8, "epss": 0.01357, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2024-36350", "url": "https://patchblox.com/security/cve/CVE-2024-36350", "title": "AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue", "priority": "Urgent", "severity": "Critical", "cvss": 7.8, "epss": 0.00494, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-36357", "url": "https://patchblox.com/security/cve/CVE-2024-36357", "title": "AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue", "priority": "Urgent", "severity": "Critical", "cvss": 7.8, "epss": 0.00357, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38430", "url": "https://patchblox.com/security/cve/CVE-2025-38430", "title": "nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00593, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38181", "url": "https://patchblox.com/security/cve/CVE-2025-38181", "title": "calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00575, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38035", "url": "https://patchblox.com/security/cve/CVE-2025-38035", "title": "nvmet-tcp: don\u0027t restore null sk_state_change", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00574, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38089", "url": "https://patchblox.com/security/cve/CVE-2025-38089", "title": "sunrpc: handle SVC_GARBAGE during svc auth processing as auth error", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0056, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38052", "url": "https://patchblox.com/security/cve/CVE-2025-38052", "title": "net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00553, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38399", "url": "https://patchblox.com/security/cve/CVE-2025-38399", "title": "scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00506, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38124", "url": "https://patchblox.com/security/cve/CVE-2025-38124", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7, "epss": 0.0047, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38471", "url": "https://patchblox.com/security/cve/CVE-2025-38471", "title": "tls: always refresh the queue when reading sock", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00468, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38429", "url": "https://patchblox.com/security/cve/CVE-2025-38429", "title": "bus: mhi: ep: Update read pointer only after buffer is written", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00465, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38264", "url": "https://patchblox.com/security/cve/CVE-2025-38264", "title": "nvme-tcp: sanitize request list handling", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00447, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-57947", "url": "https://patchblox.com/security/cve/CVE-2024-57947", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38211", "url": "https://patchblox.com/security/cve/CVE-2025-38211", "title": "RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38476", "url": "https://patchblox.com/security/cve/CVE-2025-38476", "title": "rpl: Fix use-after-free in rpl_do_srh_inline().", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00395, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38495", "url": "https://patchblox.com/security/cve/CVE-2025-38495", "title": "HID: core: ensure the allocated report buffer can contain the reserved report ID", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38293", "url": "https://patchblox.com/security/cve/CVE-2025-38293", "title": "wifi: ath11k: fix node corruption in ar-\u003Earvifs list", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00337, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37885", "url": "https://patchblox.com/security/cve/CVE-2025-37885", "title": "KVM: x86: Reset IRTE to host control if *new* route isn\u0027t postable", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38292", "url": "https://patchblox.com/security/cve/CVE-2025-38292", "title": "wifi: ath12k: fix invalid access to memory", "priority": "High", "severity": "moderate", "cvss": 7.3, "epss": 0.00308, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38248", "url": "https://patchblox.com/security/cve/CVE-2025-38248", "title": "bridge: mcast: Fix use-after-free during router port configuration", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38350", "url": "https://patchblox.com/security/cve/CVE-2025-38350", "title": "net/sched: Always pass notifications when child class becomes empty", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38236", "url": "https://patchblox.com/security/cve/CVE-2025-38236", "title": "af_unix: Don\u0027t leave consecutive consumed OOB skbs.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00295, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38377", "url": "https://patchblox.com/security/cve/CVE-2025-38377", "title": "rose: fix dangling neighbour pointers in rose_rt_device_down()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0028, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38494", "url": "https://patchblox.com/security/cve/CVE-2025-38494", "title": "HID: core: do not bypass hid_hw_raw_request", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0026, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38244", "url": "https://patchblox.com/security/cve/CVE-2025-38244", "title": "smb: client: fix potential deadlock when reconnecting channels", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38416", "url": "https://patchblox.com/security/cve/CVE-2025-38416", "title": "NFC: nci: uart: Set tty-\u003Edisc_data only in success path", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00249, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38204", "url": "https://patchblox.com/security/cve/CVE-2025-38204", "title": "jfs: fix array-index-out-of-bounds read in add_missing_indices", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0024, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38290", "url": "https://patchblox.com/security/cve/CVE-2025-38290", "title": "wifi: ath12k: fix node corruption in ar-\u003Earvifs list", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38279", "url": "https://patchblox.com/security/cve/CVE-2025-38279", "title": "bpf: Do not include stack ptr register in precision backtracking bookkeeping", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38361", "url": "https://patchblox.com/security/cve/CVE-2025-38361", "title": "drm/amd/display: Check dce_hwseq before dereferencing it", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38115", "url": "https://patchblox.com/security/cve/CVE-2025-38115", "title": "net_sched: sch_sfq: fix a potential crash on gso_skb handling", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21839", "url": "https://patchblox.com/security/cve/CVE-2025-21839", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38415", "url": "https://patchblox.com/security/cve/CVE-2025-38415", "title": "Squashfs: check return result of sb_min_blocksize", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37798", "url": "https://patchblox.com/security/cve/CVE-2025-37798", "title": "codel: remove sch-\u003Eq.qlen check before qdisc_tree_reduce_backlog()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00228, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38147", "url": "https://patchblox.com/security/cve/CVE-2025-38147", "title": "calipso: Don\u0027t call calipso functions for AF_INET sk.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00228, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38111", "url": "https://patchblox.com/security/cve/CVE-2025-38111", "title": "net/mdiobus: Fix potential out-of-bounds read/write access", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38194", "url": "https://patchblox.com/security/cve/CVE-2025-38194", "title": "jffs2: check that raw node were preallocated before writing summary", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38414", "url": "https://patchblox.com/security/cve/CVE-2025-38414", "title": "wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38051", "url": "https://patchblox.com/security/cve/CVE-2025-38051", "title": "smb: client: Fix use-after-free in cifs_fill_dirent", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38498", "url": "https://patchblox.com/security/cve/CVE-2025-38498", "title": "do_change_type(): refuse to operate on unmounted/not ours mounts", "priority": "High", "severity": "Moderate", "cvss": 7.9, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38187", "url": "https://patchblox.com/security/cve/CVE-2025-38187", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in r535_gsp_rp...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38332", "url": "https://patchblox.com/security/cve/CVE-2025-38332", "title": "scsi: lpfc: Use memcpy() for BIOS version", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38403", "url": "https://patchblox.com/security/cve/CVE-2025-38403", "title": "vsock/vmci: Clear the vmci transport packet properly when initializing it", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38084", "url": "https://patchblox.com/security/cve/CVE-2025-38084", "title": "mm/hugetlb: unshare page tables during VMA split, not before", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38328", "url": "https://patchblox.com/security/cve/CVE-2025-38328", "title": "jffs2: check jffs2_prealloc_raw_node_refs() result in few other places", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38177", "url": "https://patchblox.com/security/cve/CVE-2025-38177", "title": "sch_hfsc: make hfsc_qlen_notify() idempotent", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38424", "url": "https://patchblox.com/security/cve/CVE-2025-38424", "title": "perf: Fix sample vs do_exit()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38200", "url": "https://patchblox.com/security/cve/CVE-2025-38200", "title": "i40e: fix MMIO write access to an invalid page in i40e_clear_hw", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38389", "url": "https://patchblox.com/security/cve/CVE-2025-38389", "title": "drm/i915/gt: Fix timeline left held on VMA alloc error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38428", "url": "https://patchblox.com/security/cve/CVE-2025-38428", "title": "Input: ims-pcu - check record size in ims_pcu_flash_firmware()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38095", "url": "https://patchblox.com/security/cve/CVE-2025-38095", "title": "dma-buf: insert memory barrier before updating num_fences", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38100", "url": "https://patchblox.com/security/cve/CVE-2025-38100", "title": "x86/iopl: Cure TIF_IO_BITMAP inconsistencies", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38323", "url": "https://patchblox.com/security/cve/CVE-2025-38323", "title": "net: atm: add lec_mutex", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38386", "url": "https://patchblox.com/security/cve/CVE-2025-38386", "title": "ACPICA: Refuse to evaluate a method if arguments are missing", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38180", "url": "https://patchblox.com/security/cve/CVE-2025-38180", "title": "net: atm: fix /proc/net/atm/lec handling", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38286", "url": "https://patchblox.com/security/cve/CVE-2025-38286", "title": "pinctrl: at91: Fix possible out-of-boundary access", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38193", "url": "https://patchblox.com/security/cve/CVE-2025-38193", "title": "net_sched: sch_sfq: reject invalid perturb period", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38375", "url": "https://patchblox.com/security/cve/CVE-2025-38375", "title": "virtio-net: ensure the received length does not exceed allocated size", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38395", "url": "https://patchblox.com/security/cve/CVE-2025-38395", "title": "regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38192", "url": "https://patchblox.com/security/cve/CVE-2025-38192", "title": "net: clear the dst when changing skb protocol", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38420", "url": "https://patchblox.com/security/cve/CVE-2025-38420", "title": "wifi: carl9170: do not ping device which has failed to load firmware", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38401", "url": "https://patchblox.com/security/cve/CVE-2025-38401", "title": "mtk-sd: Prevent memory corruption from DMA map failure", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38317", "url": "https://patchblox.com/security/cve/CVE-2025-38317", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38131", "url": "https://patchblox.com/security/cve/CVE-2025-38131", "title": "coresight: prevent deactivate active config while enabling the config", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38212", "url": "https://patchblox.com/security/cve/CVE-2025-38212", "title": "ipc: fix to protect IPCS lookups using RCU", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38363", "url": "https://patchblox.com/security/cve/CVE-2025-38363", "title": "drm/tegra: Fix a possible null pointer dereference", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38110", "url": "https://patchblox.com/security/cve/CVE-2025-38110", "title": "net/mdiobus: Fix potential out-of-bounds clause 45 read/write access", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38153", "url": "https://patchblox.com/security/cve/CVE-2025-38153", "title": "net: usb: aqc111: fix error handling of usbnet read calls", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38074", "url": "https://patchblox.com/security/cve/CVE-2025-38074", "title": "vhost-scsi: protect vq-\u003Elog_used with vq-\u003Emutex", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38348", "url": "https://patchblox.com/security/cve/CVE-2025-38348", "title": "wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38425", "url": "https://patchblox.com/security/cve/CVE-2025-38425", "title": "i2c: tegra: check msg length in SMBUS block read", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38385", "url": "https://patchblox.com/security/cve/CVE-2025-38385", "title": "net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38412", "url": "https://patchblox.com/security/cve/CVE-2025-38412", "title": "platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38465", "url": "https://patchblox.com/security/cve/CVE-2025-38465", "title": "netlink: Fix wraparounds of sk-\u003Esk_rmem_alloc.", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38283", "url": "https://patchblox.com/security/cve/CVE-2025-38283", "title": "hisi_acc_vfio_pci: bugfix live migration function without VF device driver", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38118", "url": "https://patchblox.com/security/cve/CVE-2025-38118", "title": "Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38129", "url": "https://patchblox.com/security/cve/CVE-2025-38129", "title": "page_pool: Fix use-after-free in page_pool_recycle_in_ring", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38126", "url": "https://patchblox.com/security/cve/CVE-2025-38126", "title": "net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38197", "url": "https://patchblox.com/security/cve/CVE-2025-38197", "title": "platform/x86: dell_rbu: Fix list usage", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38109", "url": "https://patchblox.com/security/cve/CVE-2025-38109", "title": "net/mlx5: Fix ECVF vports unload on shutdown flow", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38396", "url": "https://patchblox.com/security/cve/CVE-2025-38396", "title": "fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38449", "url": "https://patchblox.com/security/cve/CVE-2025-38449", "title": "drm/gem: Acquire references on GEM handles for framebuffers", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38288", "url": "https://patchblox.com/security/cve/CVE-2025-38288", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38105", "url": "https://patchblox.com/security/cve/CVE-2025-38105", "title": "ALSA: usb-audio: Kill timer properly at removal", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38090", "url": "https://patchblox.com/security/cve/CVE-2025-38090", "title": "drivers/rapidio/rio_cm.c: prevent possible heap overwrite", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38106", "url": "https://patchblox.com/security/cve/CVE-2025-38106", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38226", "url": "https://patchblox.com/security/cve/CVE-2025-38226", "title": "media: vivid: Change the siize of the composing", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38468", "url": "https://patchblox.com/security/cve/CVE-2025-38468", "title": "net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38088", "url": "https://patchblox.com/security/cve/CVE-2025-38088", "title": "powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap", "priority": "High", "severity": "moderate", "cvss": 7.1, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38457", "url": "https://patchblox.com/security/cve/CVE-2025-38457", "title": "net/sched: Abort __tc_modify_qdisc if parent class does not exist", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38161", "url": "https://patchblox.com/security/cve/CVE-2025-38161", "title": "RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38482", "url": "https://patchblox.com/security/cve/CVE-2025-38482", "title": "comedi: das6402: Fix bit shift out of bounds", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38062", "url": "https://patchblox.com/security/cve/CVE-2025-38062", "title": "genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38113", "url": "https://patchblox.com/security/cve/CVE-2025-38113", "title": "ACPI: CPPC: Fix NULL pointer dereference when nosmp is used", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38483", "url": "https://patchblox.com/security/cve/CVE-2025-38483", "title": "comedi: das16m1: Fix bit shift out of bounds", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38157", "url": "https://patchblox.com/security/cve/CVE-2025-38157", "title": "wifi: ath9k_htc: Abort software beacon handling if disabled", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38198", "url": "https://patchblox.com/security/cve/CVE-2025-38198", "title": "fbcon: Make sure modelist not set on unregistered console", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38206", "url": "https://patchblox.com/security/cve/CVE-2025-38206", "title": "exfat: fix double free in delayed_free", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38342", "url": "https://patchblox.com/security/cve/CVE-2025-38342", "title": "software node: Correct a OOB check in software_node_get_reference_args()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38214", "url": "https://patchblox.com/security/cve/CVE-2025-38214", "title": "fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38478", "url": "https://patchblox.com/security/cve/CVE-2025-38478", "title": "comedi: Fix initialization of data for instructions that write to subdevice", "priority": "High", "severity": "medium", "cvss": 9.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38182", "url": "https://patchblox.com/security/cve/CVE-2025-38182", "title": "ublk: santizize the arguments from userspace when adding a device", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38183", "url": "https://patchblox.com/security/cve/CVE-2025-38183", "title": "net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38099", "url": "https://patchblox.com/security/cve/CVE-2025-38099", "title": "Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38154", "url": "https://patchblox.com/security/cve/CVE-2025-38154", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38277", "url": "https://patchblox.com/security/cve/CVE-2025-38277", "title": "mtd: nand: ecc-mxic: Fix use of uninitialized variable ret", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38410", "url": "https://patchblox.com/security/cve/CVE-2025-38410", "title": "drm/msm: Fix a fence leak in submit error path", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38473", "url": "https://patchblox.com/security/cve/CVE-2025-38473", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38474", "url": "https://patchblox.com/security/cve/CVE-2025-38474", "title": "usb: net: sierra: check for no status endpoint", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38289", "url": "https://patchblox.com/security/cve/CVE-2025-38289", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38313", "url": "https://patchblox.com/security/cve/CVE-2025-38313", "title": "bus: fsl-mc: fix double-free on mc_dev", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38392", "url": "https://patchblox.com/security/cve/CVE-2025-38392", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38409", "url": "https://patchblox.com/security/cve/CVE-2025-38409", "title": "drm/msm: Fix another leak in the submit error path", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38417", "url": "https://patchblox.com/security/cve/CVE-2025-38417", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38231", "url": "https://patchblox.com/security/cve/CVE-2025-38231", "title": "nfsd: Initialize ssc before laundromat_work to prevent NULL dereference", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38427", "url": "https://patchblox.com/security/cve/CVE-2025-38427", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38312", "url": "https://patchblox.com/security/cve/CVE-2025-38312", "title": "fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38463", "url": "https://patchblox.com/security/cve/CVE-2025-38463", "title": "tcp: Correct signedness in skb remaining space calculation", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38162", "url": "https://patchblox.com/security/cve/CVE-2025-38162", "title": "netfilter: nft_set_pipapo: prevent overflow in lookup table allocation", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38117", "url": "https://patchblox.com/security/cve/CVE-2025-38117", "title": "Bluetooth: MGMT: Protect mgmt_pending list with its own lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38369", "url": "https://patchblox.com/security/cve/CVE-2025-38369", "title": "dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38453", "url": "https://patchblox.com/security/cve/CVE-2025-38453", "title": "kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38159", "url": "https://patchblox.com/security/cve/CVE-2025-38159", "title": "wifi: rtw88: fix the \u0027para\u0027 buffer size to avoid reading out of bounds", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38058", "url": "https://patchblox.com/security/cve/CVE-2025-38058", "title": "__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38229", "url": "https://patchblox.com/security/cve/CVE-2025-38229", "title": "media: cxusb: no longer judge rbuf when the write fails", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38497", "url": "https://patchblox.com/security/cve/CVE-2025-38497", "title": "usb: gadget: configfs: Fix OOB read on empty string write", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38227", "url": "https://patchblox.com/security/cve/CVE-2025-38227", "title": "media: vidtv: Terminating the subsequent process of initialization failure", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38338", "url": "https://patchblox.com/security/cve/CVE-2025-38338", "title": "fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38349", "url": "https://patchblox.com/security/cve/CVE-2025-38349", "title": "eventpoll: don\u0027t decrement ep refcount while still holding the ep mutex", "priority": "High", "severity": "important", "cvss": 8.4, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38249", "url": "https://patchblox.com/security/cve/CVE-2025-38249", "title": "ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38443", "url": "https://patchblox.com/security/cve/CVE-2025-38443", "title": "nbd: fix uaf in nbd_genl_connect() error path", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38250", "url": "https://patchblox.com/security/cve/CVE-2025-38250", "title": "Bluetooth: hci_core: Fix use-after-free in vhci_flush()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38063", "url": "https://patchblox.com/security/cve/CVE-2025-38063", "title": "dm: fix unconditional IO throttle caused by REQ_PREFLUSH", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38149", "url": "https://patchblox.com/security/cve/CVE-2025-38149", "title": "net: phy: clear phydev-\u003Edevlink when the link is deleted", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38186", "url": "https://patchblox.com/security/cve/CVE-2025-38186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop(...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38210", "url": "https://patchblox.com/security/cve/CVE-2025-38210", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38305", "url": "https://patchblox.com/security/cve/CVE-2025-38305", "title": "ptp: remove ptp-\u003En_vclocks check logic in ptp_vclock_in_use()", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38087", "url": "https://patchblox.com/security/cve/CVE-2025-38087", "title": "net/sched: fix use-after-free in taprio_dev_notifier", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38257", "url": "https://patchblox.com/security/cve/CVE-2025-38257", "title": "s390/pkey: Prevent overflow in size calculation for memdup_user()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38091", "url": "https://patchblox.com/security/cve/CVE-2025-38091", "title": "drm/amd/display: check stream id dml21 wrapper to get plane_id", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38239", "url": "https://patchblox.com/security/cve/CVE-2025-38239", "title": "scsi: megaraid_sas: Fix invalid node index", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38304", "url": "https://patchblox.com/security/cve/CVE-2025-38304", "title": "Bluetooth: Fix NULL pointer deference on eir_get_service_data", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38259", "url": "https://patchblox.com/security/cve/CVE-2025-38259", "title": "ASoC: codecs: wcd9335: Fix missing free of regulator supplies", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38215", "url": "https://patchblox.com/security/cve/CVE-2025-38215", "title": "fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38485", "url": "https://patchblox.com/security/cve/CVE-2025-38485", "title": "iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38220", "url": "https://patchblox.com/security/cve/CVE-2025-38220", "title": "ext4: only dirty folios when data journaling regular files", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38310", "url": "https://patchblox.com/security/cve/CVE-2025-38310", "title": "seg6: Fix validation of nexthop addresses", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38496", "url": "https://patchblox.com/security/cve/CVE-2025-38496", "title": "dm-bufio: fix sched in atomic context", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38102", "url": "https://patchblox.com/security/cve/CVE-2025-38102", "title": "VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38108", "url": "https://patchblox.com/security/cve/CVE-2025-38108", "title": "net_sched: red: fix a race in __red_change()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38085", "url": "https://patchblox.com/security/cve/CVE-2025-38085", "title": "mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38107", "url": "https://patchblox.com/security/cve/CVE-2025-38107", "title": "net_sched: ets: fix a race in ets_qdisc_change()", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38461", "url": "https://patchblox.com/security/cve/CVE-2025-38461", "title": "vsock: Fix transport_* TOCTOU", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38477", "url": "https://patchblox.com/security/cve/CVE-2025-38477", "title": "net/sched: sch_qfq: Fix race condition on qfq_aggregate", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38112", "url": "https://patchblox.com/security/cve/CVE-2025-38112", "title": "net: Fix TOCTOU issue in sk_is_readable()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38462", "url": "https://patchblox.com/security/cve/CVE-2025-38462", "title": "vsock: Fix transport_{g2h,h2g} TOCTOU", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38373", "url": "https://patchblox.com/security/cve/CVE-2025-38373", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38380", "url": "https://patchblox.com/security/cve/CVE-2025-38380", "title": "i2c/designware: Fix an initialization issue", "priority": "High", "severity": "important", "cvss": 7.1, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2019-11135", "url": "https://patchblox.com/security/cve/CVE-2019-11135", "title": "Windows Kernel Information Disclosure Vulnerability", "priority": "Routine", "severity": "Important", "cvss": 6.5, "epss": 0.03133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38120", "url": "https://patchblox.com/security/cve/CVE-2025-38120", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00524, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38123", "url": "https://patchblox.com/security/cve/CVE-2025-38123", "title": "net: wwan: t7xx: Fix napi rx poll issue", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00474, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38393", "url": "https://patchblox.com/security/cve/CVE-2025-38393", "title": "NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38165", "url": "https://patchblox.com/security/cve/CVE-2025-38165", "title": "bpf, sockmap: Fix panic when calling skb_linearize", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38365", "url": "https://patchblox.com/security/cve/CVE-2025-38365", "title": "btrfs: fix a race between renames and directory logging", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00356, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38246", "url": "https://patchblox.com/security/cve/CVE-2025-38246", "title": "bnxt: properly flush XDP redirect lists", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00341, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-36348", "url": "https://patchblox.com/security/cve/CVE-2024-36348", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38287", "url": "https://patchblox.com/security/cve/CVE-2025-38287", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "epss": 0.00335, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37856", "url": "https://patchblox.com/security/cve/CVE-2025-37856", "title": "btrfs: harden block_group::bg_list against list_del() races", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0031, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37864", "url": "https://patchblox.com/security/cve/CVE-2025-37864", "title": "net: dsa: clean up FDB, MDB, VLAN entries on unbind", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38174", "url": "https://patchblox.com/security/cve/CVE-2025-38174", "title": "thunderbolt: Do not double dequeue a configuration request", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38064", "url": "https://patchblox.com/security/cve/CVE-2025-38064", "title": "virtio: break and reset virtio devices on device_shutdown()", "priority": "Routine", "severity": "medium", "cvss": 6.7, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38343", "url": "https://patchblox.com/security/cve/CVE-2025-38343", "title": "wifi: mt76: mt7996: drop fragments with multicast or broadcast RA", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-56742", "url": "https://patchblox.com/security/cve/CVE-2024-56742", "title": "vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-44963", "url": "https://patchblox.com/security/cve/CVE-2024-44963", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38303", "url": "https://patchblox.com/security/cve/CVE-2025-38303", "title": "Bluetooth: eir: Fix possible crashes on eir_create_adv_data", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00237, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38132", "url": "https://patchblox.com/security/cve/CVE-2025-38132", "title": "coresight: holding cscfg_csdev_lock while removing cscfg from csdev", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38272", "url": "https://patchblox.com/security/cve/CVE-2025-38272", "title": "net: dsa: b53: do not enable EEE on bcm63xx", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38291", "url": "https://patchblox.com/security/cve/CVE-2025-38291", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38400", "url": "https://patchblox.com/security/cve/CVE-2025-38400", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "low", "cvss": 5.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38034", "url": "https://patchblox.com/security/cve/CVE-2025-38034", "title": "btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38326", "url": "https://patchblox.com/security/cve/CVE-2025-38326", "title": "aoe: clean device rq_list in aoedev_downdev()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38135", "url": "https://patchblox.com/security/cve/CVE-2025-38135", "title": "serial: Fix potential null-ptr-deref in mlb_usio_probe()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38136", "url": "https://patchblox.com/security/cve/CVE-2025-38136", "title": "usb: renesas_usbhs: Reorder clock handling and power management in probe", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38145", "url": "https://patchblox.com/security/cve/CVE-2025-38145", "title": "soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38238", "url": "https://patchblox.com/security/cve/CVE-2025-38238", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38138", "url": "https://patchblox.com/security/cve/CVE-2025-38138", "title": "dmaengine: ti: Add NULL check in udma_probe()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21872", "url": "https://patchblox.com/security/cve/CVE-2025-21872", "title": "efi: Don\u0027t map the entire mokvar table to determine its size", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38143", "url": "https://patchblox.com/security/cve/CVE-2025-38143", "title": "backlight: pm8941: Add NULL check in wled_configure()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38387", "url": "https://patchblox.com/security/cve/CVE-2025-38387", "title": "RDMA/mlx5: Initialize obj_event-\u003Eobj_sub_list before xa_insert", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38391", "url": "https://patchblox.com/security/cve/CVE-2025-38391", "title": "usb: typec: altmodes/displayport: do not index invalid pin_assignments", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38406", "url": "https://patchblox.com/security/cve/CVE-2025-38406", "title": "wifi: ath6kl: remove WARN on bad firmware input", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38275", "url": "https://patchblox.com/security/cve/CVE-2025-38275", "title": "phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38273", "url": "https://patchblox.com/security/cve/CVE-2025-38273", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38470", "url": "https://patchblox.com/security/cve/CVE-2025-38470", "title": "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38061", "url": "https://patchblox.com/security/cve/CVE-2025-38061", "title": "net: pktgen: fix access outside of user given buffer in pktgen_thread_write()", "priority": "Routine", "severity": "medium", "cvss": 6.7, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38097", "url": "https://patchblox.com/security/cve/CVE-2025-38097", "title": "espintcp: remove encap socket caching to avoid reference leak", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38166", "url": "https://patchblox.com/security/cve/CVE-2025-38166", "title": "bpf: fix ktls panic with sockmap", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38127", "url": "https://patchblox.com/security/cve/CVE-2025-38127", "title": "ice: fix Tx scheduler error handling in XDP callback", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38382", "url": "https://patchblox.com/security/cve/CVE-2025-38382", "title": "btrfs: fix iteration of extrefs during log replay", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38460", "url": "https://patchblox.com/security/cve/CVE-2025-38460", "title": "atm: clip: Fix potential null-ptr-deref in to_atmarpd().", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38098", "url": "https://patchblox.com/security/cve/CVE-2025-38098", "title": "drm/amd/display: Don\u0027t treat wb connector as physical in create_validate_stream_for_sink", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38173", "url": "https://patchblox.com/security/cve/CVE-2025-38173", "title": "crypto: marvell/cesa - Handle zero-length skcipher requests", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38345", "url": "https://patchblox.com/security/cve/CVE-2025-38345", "title": "ACPICA: fix acpi operand cache leak in dswstate.c", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38336", "url": "https://patchblox.com/security/cve/CVE-2025-38336", "title": "ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38337", "url": "https://patchblox.com/security/cve/CVE-2025-38337", "title": "jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()", "priority": "Routine", "severity": "medium", "cvss": 6.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-42134", "url": "https://patchblox.com/security/cve/CVE-2024-42134", "title": "virtio-pci: Check if is_avq is NULL", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38371", "url": "https://patchblox.com/security/cve/CVE-2025-38371", "title": "drm/v3d: Disable interrupts before resetting the GPU", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38467", "url": "https://patchblox.com/security/cve/CVE-2025-38467", "title": "drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38122", "url": "https://patchblox.com/security/cve/CVE-2025-38122", "title": "gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38142", "url": "https://patchblox.com/security/cve/CVE-2025-38142", "title": "hwmon: (asus-ec-sensors) check sensor index in read_string()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38203", "url": "https://patchblox.com/security/cve/CVE-2025-38203", "title": "jfs: Fix null-ptr-deref in jfs_ioc_trim", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38344", "url": "https://patchblox.com/security/cve/CVE-2025-38344", "title": "ACPICA: fix acpi parse and parseext cache leaks", "priority": "Routine", "severity": "medium", "cvss": 6.2, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-36349", "url": "https://patchblox.com/security/cve/CVE-2024-36349", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38047", "url": "https://patchblox.com/security/cve/CVE-2025-38047", "title": "x86/fred: Fix system hang during S4 resume with FRED enabled", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38189", "url": "https://patchblox.com/security/cve/CVE-2025-38189", "title": "drm/v3d: Avoid NULL pointer dereference in \u0060v3d_job_update_stats()\u0060", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38384", "url": "https://patchblox.com/security/cve/CVE-2025-38384", "title": "mtd: spinand: fix memory leak of ECC engine conf", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38265", "url": "https://patchblox.com/security/cve/CVE-2025-38265", "title": "serial: jsm: fix NPE during jsm_uart_port_init", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38426", "url": "https://patchblox.com/security/cve/CVE-2025-38426", "title": "drm/amdgpu: Add basic validation for RAS header", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38455", "url": "https://patchblox.com/security/cve/CVE-2025-38455", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38480", "url": "https://patchblox.com/security/cve/CVE-2025-38480", "title": "comedi: Fix use of uninitialized data in insn_rw_emulate_bits()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38481", "url": "https://patchblox.com/security/cve/CVE-2025-38481", "title": "comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37984", "url": "https://patchblox.com/security/cve/CVE-2025-37984", "title": "crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()", "priority": "Routine", "severity": "medium", "cvss": 6.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38354", "url": "https://patchblox.com/security/cve/CVE-2025-38354", "title": "drm/msm/gpu: Fix crash when throttling GPU immediately during boot", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38364", "url": "https://patchblox.com/security/cve/CVE-2025-38364", "title": "maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38222", "url": "https://patchblox.com/security/cve/CVE-2025-38222", "title": "ext4: inline: fix len overflow in ext4_prepare_inline_data", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38355", "url": "https://patchblox.com/security/cve/CVE-2025-38355", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38356", "url": "https://patchblox.com/security/cve/CVE-2025-38356", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38202", "url": "https://patchblox.com/security/cve/CVE-2025-38202", "title": "bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38148", "url": "https://patchblox.com/security/cve/CVE-2025-38148", "title": "net: phy: mscc: Fix memory leak when using one step timestamping", "priority": "Routine", "severity": "low", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38151", "url": "https://patchblox.com/security/cve/CVE-2025-38151", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38487", "url": "https://patchblox.com/security/cve/CVE-2025-38487", "title": "soc: aspeed: lpc-snoop: Don\u0027t disable channels that aren\u0027t enabled", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-36028", "url": "https://patchblox.com/security/cve/CVE-2024-36028", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38188", "url": "https://patchblox.com/security/cve/CVE-2025-38188", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calli...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38300", "url": "https://patchblox.com/security/cve/CVE-2025-38300", "title": "crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38319", "url": "https://patchblox.com/security/cve/CVE-2025-38319", "title": "drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38376", "url": "https://patchblox.com/security/cve/CVE-2025-38376", "title": "usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38299", "url": "https://patchblox.com/security/cve/CVE-2025-38299", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38094", "url": "https://patchblox.com/security/cve/CVE-2025-38094", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38307", "url": "https://patchblox.com/security/cve/CVE-2025-38307", "title": "ASoC: Intel: avs: Verify content returned by parse_int_array()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38334", "url": "https://patchblox.com/security/cve/CVE-2025-38334", "title": "x86/sgx: Prevent attempts to reclaim poisoned pages", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38475", "url": "https://patchblox.com/security/cve/CVE-2025-38475", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38155", "url": "https://patchblox.com/security/cve/CVE-2025-38155", "title": "wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38225", "url": "https://patchblox.com/security/cve/CVE-2025-38225", "title": "media: imx-jpeg: Cleanup after an allocation error", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38489", "url": "https://patchblox.com/security/cve/CVE-2025-38489", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38256", "url": "https://patchblox.com/security/cve/CVE-2025-38256", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38315", "url": "https://patchblox.com/security/cve/CVE-2025-38315", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 6.4, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38436", "url": "https://patchblox.com/security/cve/CVE-2025-38436", "title": "drm/scheduler: signal scheduled fence when kill job", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-37920", "url": "https://patchblox.com/security/cve/CVE-2025-37920", "title": "xsk: Fix race condition in AF_XDP generic RX path", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38404", "url": "https://patchblox.com/security/cve/CVE-2025-38404", "title": "usb: typec: displayport: Fix potential deadlock", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23163", "url": "https://patchblox.com/security/cve/CVE-2025-23163", "title": "net: vlan: don\u0027t propagate flags on open", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38268", "url": "https://patchblox.com/security/cve/CVE-2025-38268", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38448", "url": "https://patchblox.com/security/cve/CVE-2025-38448", "title": "usb: gadget: u_serial: Fix race condition in TTY wakeup", "priority": "Routine", "severity": "medium", "cvss": 6.2, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38353", "url": "https://patchblox.com/security/cve/CVE-2025-38353", "title": "drm/xe: Fix taking invalid lock on wedge", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38335", "url": "https://patchblox.com/security/cve/CVE-2025-38335", "title": "Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38362", "url": "https://patchblox.com/security/cve/CVE-2025-38362", "title": "drm/amd/display: Add null pointer check for get_first_active_display()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38217", "url": "https://patchblox.com/security/cve/CVE-2025-38217", "title": "hwmon: (ftsteutates) Fix TOCTOU race in fts_read()", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38114", "url": "https://patchblox.com/security/cve/CVE-2025-38114", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\nThe following security bug...", "priority": "Routine", "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38158", "url": "https://patchblox.com/security/cve/CVE-2025-38158", "title": "hisi_acc_vfio_pci: fix XQE dma address error", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38213", "url": "https://patchblox.com/security/cve/CVE-2025-38213", "title": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "priority": "Routine", "severity": "important", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }