# SUSE-SU-2025:02853-1: kernel-livepatch-SLE15-SP7-RT_Update_3 security update

SUSE-SU-2025:02853-1, released August 18, 2025, fixes 260 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_3 (version 1-150700.1.5.1). One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-02853-1
- Platform: Linux
- Released: Aug 18, 2025
- Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV))
- CVEs: 260, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:02853-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP7-RT_Update_3](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-3.md) | sles 15.7 | 1-150700.1.5.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV |
| [CVE-2024-36350](https://patchblox.com/security/data/cve/CVE-2024-36350.md) | Urgent | AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue | 7.8 | 0.0049 |  |
| [CVE-2024-36357](https://patchblox.com/security/data/cve/CVE-2024-36357.md) | Urgent | AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue | 7.8 | 0.0036 |  |
| [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 |  |
| [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 |  |
| [CVE-2025-38035](https://patchblox.com/security/data/cve/CVE-2025-38035.md) | High | nvmet-tcp: don't restore null sk_state_change | 7.5 | 0.0057 |  |
| [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 |  |
| [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 |  |
| [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 |  |
| [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0047 |  |
| [CVE-2025-38471](https://patchblox.com/security/data/cve/CVE-2025-38471.md) | High | tls: always refresh the queue when reading sock | 7.8 | 0.0047 |  |
| [CVE-2025-38429](https://patchblox.com/security/data/cve/CVE-2025-38429.md) | High | bus: mhi: ep: Update read pointer only after buffer is written | 7.1 | 0.0047 |  |
| [CVE-2025-38264](https://patchblox.com/security/data/cve/CVE-2025-38264.md) | High | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 |  |
| [CVE-2024-57947](https://patchblox.com/security/data/cve/CVE-2024-57947.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.1 | 0.0044 |  |
| [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 |  |
| [CVE-2025-38476](https://patchblox.com/security/data/cve/CVE-2025-38476.md) | High | rpl: Fix use-after-free in rpl_do_srh_inline(). | 7.8 | 0.0040 |  |
| [CVE-2025-38495](https://patchblox.com/security/data/cve/CVE-2025-38495.md) | High | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 |  |
| [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 |  |
| [CVE-2025-37885](https://patchblox.com/security/data/cve/CVE-2025-37885.md) | High | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 |  |
| [CVE-2025-38292](https://patchblox.com/security/data/cve/CVE-2025-38292.md) | High | wifi: ath12k: fix invalid access to memory | 7.3 | 0.0031 |  |
| [CVE-2025-38248](https://patchblox.com/security/data/cve/CVE-2025-38248.md) | High | bridge: mcast: Fix use-after-free during router port configuration | 7.8 | 0.0030 |  |
| [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 |  |
| [CVE-2025-38236](https://patchblox.com/security/data/cve/CVE-2025-38236.md) | High | af_unix: Don't leave consecutive consumed OOB skbs. | 7.8 | 0.0030 |  |
| [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 |  |
| [CVE-2025-38494](https://patchblox.com/security/data/cve/CVE-2025-38494.md) | High | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 |  |
| [CVE-2025-38244](https://patchblox.com/security/data/cve/CVE-2025-38244.md) | High | smb: client: fix potential deadlock when reconnecting channels | 7.0 | 0.0025 |  |
| [CVE-2025-38416](https://patchblox.com/security/data/cve/CVE-2025-38416.md) | High | NFC: nci: uart: Set tty->disc_data only in success path | 7.8 | 0.0025 |  |
| [CVE-2025-38204](https://patchblox.com/security/data/cve/CVE-2025-38204.md) | High | jfs: fix array-index-out-of-bounds read in add_missing_indices | 7.1 | 0.0024 |  |
| [CVE-2025-38290](https://patchblox.com/security/data/cve/CVE-2025-38290.md) | High | wifi: ath12k: fix node corruption in ar->arvifs list | 7.8 | 0.0024 |  |
| [CVE-2025-38279](https://patchblox.com/security/data/cve/CVE-2025-38279.md) | High | bpf: Do not include stack ptr register in precision backtracking bookkeeping | 7.8 | 0.0024 |  |
| [CVE-2025-38361](https://patchblox.com/security/data/cve/CVE-2025-38361.md) | High | drm/amd/display: Check dce_hwseq before dereferencing it | 7.8 | 0.0024 |  |
| [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 |  |
| [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 |  |
| [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 |  |
| [CVE-2025-38194](https://patchblox.com/security/data/cve/CVE-2025-38194.md) | High | jffs2: check that raw node were preallocated before writing summary | 7.0 | 0.0023 |  |
| [CVE-2025-38414](https://patchblox.com/security/data/cve/CVE-2025-38414.md) | High | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 7.0 | 0.0023 |  |
| [CVE-2025-38051](https://patchblox.com/security/data/cve/CVE-2025-38051.md) | High | smb: client: Fix use-after-free in cifs_fill_dirent | 7.1 | 0.0022 |  |
| [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 |  |
| [CVE-2025-38187](https://patchblox.com/security/data/cve/CVE-2025-38187.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/nouveau: fix a use-after-free in r535_gsp_rp... | 7.8 | 0.0022 |  |
| [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 |  |
| [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 |  |
| [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 |  |
| [CVE-2025-38328](https://patchblox.com/security/data/cve/CVE-2025-38328.md) | High | jffs2: check jffs2_prealloc_raw_node_refs() result in few other places | 7.1 | 0.0022 |  |
| [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 |  |
| [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 |  |
| [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0022 |  |
| [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 |  |
| [CVE-2025-38428](https://patchblox.com/security/data/cve/CVE-2025-38428.md) | High | Input: ims-pcu - check record size in ims_pcu_flash_firmware() | 7.8 | 0.0022 |  |
| [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 |  |
| [CVE-2025-38100](https://patchblox.com/security/data/cve/CVE-2025-38100.md) | High | x86/iopl: Cure TIF_IO_BITMAP inconsistencies | 7.0 | 0.0022 |  |
| [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 |  |
| [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 |  |
| [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 |  |
| [CVE-2025-38286](https://patchblox.com/security/data/cve/CVE-2025-38286.md) | High | pinctrl: at91: Fix possible out-of-boundary access | 7.1 | 0.0021 |  |
| [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 |  |
| [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 |  |
| [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 |  |
| [CVE-2025-38192](https://patchblox.com/security/data/cve/CVE-2025-38192.md) | High | net: clear the dst when changing skb protocol | 7.0 | 0.0021 |  |
| [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 |  |
| [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 |  |
| [CVE-2025-38317](https://patchblox.com/security/data/cve/CVE-2025-38317.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.8 | 0.0020 |  |
| [CVE-2025-38131](https://patchblox.com/security/data/cve/CVE-2025-38131.md) | High | coresight: prevent deactivate active config while enabling the config | 7.8 | 0.0020 |  |
| [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 |  |
| [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 |  |
| [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 |  |
| [CVE-2025-38153](https://patchblox.com/security/data/cve/CVE-2025-38153.md) | High | net: usb: aqc111: fix error handling of usbnet read calls | 7.1 | 0.0020 |  |
| [CVE-2025-38074](https://patchblox.com/security/data/cve/CVE-2025-38074.md) | High | vhost-scsi: protect vq->log_used with vq->mutex | 7.0 | 0.0020 |  |
| [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 |  |
| [CVE-2025-38425](https://patchblox.com/security/data/cve/CVE-2025-38425.md) | High | i2c: tegra: check msg length in SMBUS block read | 7.8 | 0.0020 |  |
| [CVE-2025-38385](https://patchblox.com/security/data/cve/CVE-2025-38385.md) | High | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38283](https://patchblox.com/security/data/cve/CVE-2025-38283.md) | High | hisi_acc_vfio_pci: bugfix live migration function without VF device driver | 7.1 | 0.0020 |  |
| [CVE-2025-38118](https://patchblox.com/security/data/cve/CVE-2025-38118.md) | High | Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete | 7.8 | 0.0020 |  |
| [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 |  |
| [CVE-2025-38126](https://patchblox.com/security/data/cve/CVE-2025-38126.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping | 7.0 | 0.0020 |  |
| [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0020 |  |
| [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 |  |
| [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 |  |
| [CVE-2025-38449](https://patchblox.com/security/data/cve/CVE-2025-38449.md) | High | drm/gem: Acquire references on GEM handles for framebuffers | 7.8 | 0.0020 |  |
| [CVE-2025-38288](https://patchblox.com/security/data/cve/CVE-2025-38288.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.8 | 0.0020 |  |
| [CVE-2025-38105](https://patchblox.com/security/data/cve/CVE-2025-38105.md) | High | ALSA: usb-audio: Kill timer properly at removal | 7.0 | 0.0020 |  |
| [CVE-2025-38090](https://patchblox.com/security/data/cve/CVE-2025-38090.md) | High | drivers/rapidio/rio_cm.c: prevent possible heap overwrite | 7.8 | 0.0020 |  |
| [CVE-2025-38106](https://patchblox.com/security/data/cve/CVE-2025-38106.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 |  |
| [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0020 |  |
| [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 |  |
| [CVE-2025-38088](https://patchblox.com/security/data/cve/CVE-2025-38088.md) | High | powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap | 7.1 | 0.0020 |  |
| [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 |  |
| [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 |  |
| [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 |  |
| [CVE-2025-38062](https://patchblox.com/security/data/cve/CVE-2025-38062.md) | High | genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie | 7.8 | 0.0020 |  |
| [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 |  |
| [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 |  |
| [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 |  |
| [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 |  |
| [CVE-2025-38206](https://patchblox.com/security/data/cve/CVE-2025-38206.md) | High | exfat: fix double free in delayed_free | 7.8 | 0.0019 |  |
| [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 |  |
| [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 |  |
| [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 |  |
| [CVE-2025-38182](https://patchblox.com/security/data/cve/CVE-2025-38182.md) | High | ublk: santizize the arguments from userspace when adding a device | 7.8 | 0.0019 |  |
| [CVE-2025-38183](https://patchblox.com/security/data/cve/CVE-2025-38183.md) | High | net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() | 7.8 | 0.0019 |  |
| [CVE-2025-38099](https://patchblox.com/security/data/cve/CVE-2025-38099.md) | High | Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken | 7.0 | 0.0019 |  |
| [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.8 | 0.0019 |  |
| [CVE-2025-38277](https://patchblox.com/security/data/cve/CVE-2025-38277.md) | High | mtd: nand: ecc-mxic: Fix use of uninitialized variable ret | 7.1 | 0.0019 |  |
| [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.0 | 0.0019 |  |
| [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 |  |
| [CVE-2025-38289](https://patchblox.com/security/data/cve/CVE-2025-38289.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.8 | 0.0019 |  |
| [CVE-2025-38313](https://patchblox.com/security/data/cve/CVE-2025-38313.md) | High | bus: fsl-mc: fix double-free on mc_dev | 7.8 | 0.0019 |  |
| [CVE-2025-38392](https://patchblox.com/security/data/cve/CVE-2025-38392.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.3 | 0.0019 |  |
| [CVE-2025-38409](https://patchblox.com/security/data/cve/CVE-2025-38409.md) | High | drm/msm: Fix another leak in the submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38417](https://patchblox.com/security/data/cve/CVE-2025-38417.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.1 | 0.0019 |  |
| [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 |  |
| [CVE-2025-38427](https://patchblox.com/security/data/cve/CVE-2025-38427.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.0 | 0.0019 |  |
| [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 |  |
| [CVE-2025-38463](https://patchblox.com/security/data/cve/CVE-2025-38463.md) | High | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 |  |
| [CVE-2025-38162](https://patchblox.com/security/data/cve/CVE-2025-38162.md) | High | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 7.0 | 0.0019 |  |
| [CVE-2025-38117](https://patchblox.com/security/data/cve/CVE-2025-38117.md) | High | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 7.8 | 0.0019 |  |
| [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 |  |
| [CVE-2025-38453](https://patchblox.com/security/data/cve/CVE-2025-38453.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 |  |
| [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 |  |
| [CVE-2025-38058](https://patchblox.com/security/data/cve/CVE-2025-38058.md) | High | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0019 |  |
| [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 |  |
| [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 |  |
| [CVE-2025-38227](https://patchblox.com/security/data/cve/CVE-2025-38227.md) | High | media: vidtv: Terminating the subsequent process of initialization failure | 7.8 | 0.0019 |  |
| [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 |  |
| [CVE-2025-38349](https://patchblox.com/security/data/cve/CVE-2025-38349.md) | High | eventpoll: don't decrement ep refcount while still holding the ep mutex | 8.4 | 0.0018 |  |
| [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 |  |
| [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 |  |
| [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 |  |
| [CVE-2025-38063](https://patchblox.com/security/data/cve/CVE-2025-38063.md) | High | dm: fix unconditional IO throttle caused by REQ_PREFLUSH | 7.0 | 0.0018 |  |
| [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 |  |
| [CVE-2025-38186](https://patchblox.com/security/data/cve/CVE-2025-38186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix double invocation of bnxt_ulp_stop(... | 7.0 | 0.0018 |  |
| [CVE-2025-38210](https://patchblox.com/security/data/cve/CVE-2025-38210.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.0 | 0.0018 |  |
| [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 |  |
| [CVE-2025-38087](https://patchblox.com/security/data/cve/CVE-2025-38087.md) | High | net/sched: fix use-after-free in taprio_dev_notifier | 7.8 | 0.0018 |  |
| [CVE-2025-38257](https://patchblox.com/security/data/cve/CVE-2025-38257.md) | High | s390/pkey: Prevent overflow in size calculation for memdup_user() | 7.8 | 0.0018 |  |
| [CVE-2025-38091](https://patchblox.com/security/data/cve/CVE-2025-38091.md) | High | drm/amd/display: check stream id dml21 wrapper to get plane_id | 7.8 | 0.0018 |  |
| [CVE-2025-38239](https://patchblox.com/security/data/cve/CVE-2025-38239.md) | High | scsi: megaraid_sas: Fix invalid node index | 7.8 | 0.0018 |  |
| [CVE-2025-38304](https://patchblox.com/security/data/cve/CVE-2025-38304.md) | High | Bluetooth: Fix NULL pointer deference on eir_get_service_data | 7.0 | 0.0018 |  |
| [CVE-2025-38259](https://patchblox.com/security/data/cve/CVE-2025-38259.md) | High | ASoC: codecs: wcd9335: Fix missing free of regulator supplies | 7.8 | 0.0018 |  |
| [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 |  |
| [CVE-2025-38485](https://patchblox.com/security/data/cve/CVE-2025-38485.md) | High | iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush | 7.8 | 0.0017 |  |
| [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 |  |
| [CVE-2025-38310](https://patchblox.com/security/data/cve/CVE-2025-38310.md) | High | seg6: Fix validation of nexthop addresses | 7.1 | 0.0017 |  |
| [CVE-2025-38496](https://patchblox.com/security/data/cve/CVE-2025-38496.md) | High | dm-bufio: fix sched in atomic context | 7.0 | 0.0017 |  |
| [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 |  |
| [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 |  |
| [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 |  |
| [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 |  |
| [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0015 |  |
| [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 |  |
| [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 |  |
| [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 |  |
| [CVE-2025-38373](https://patchblox.com/security/data/cve/CVE-2025-38373.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 7.0 | 0.0013 |  |
| [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a |  |
| [CVE-2019-11135](https://patchblox.com/security/data/cve/CVE-2019-11135.md) | Routine | Windows Kernel Information Disclosure Vulnerability | 6.5 | 0.0313 |  |
| [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0052 |  |
| [CVE-2025-38123](https://patchblox.com/security/data/cve/CVE-2025-38123.md) | Routine | net: wwan: t7xx: Fix napi rx poll issue | 5.5 | 0.0047 |  |
| [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 |  |
| [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 |  |
| [CVE-2025-38365](https://patchblox.com/security/data/cve/CVE-2025-38365.md) | Routine | btrfs: fix a race between renames and directory logging | 5.5 | 0.0036 |  |
| [CVE-2025-38246](https://patchblox.com/security/data/cve/CVE-2025-38246.md) | Routine | bnxt: properly flush XDP redirect lists | 5.5 | 0.0034 |  |
| [CVE-2024-36348](https://patchblox.com/security/data/cve/CVE-2024-36348.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.  The following security bug... | n/a | 0.0034 |  |
| [CVE-2025-38287](https://patchblox.com/security/data/cve/CVE-2025-38287.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | n/a | 0.0034 |  |
| [CVE-2025-37856](https://patchblox.com/security/data/cve/CVE-2025-37856.md) | Routine | btrfs: harden block_group::bg_list against list_del() races | 5.5 | 0.0031 |  |
| [CVE-2025-37864](https://patchblox.com/security/data/cve/CVE-2025-37864.md) | Routine | net: dsa: clean up FDB, MDB, VLAN entries on unbind | 5.5 | 0.0030 |  |
| [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0025 |  |
| [CVE-2025-38064](https://patchblox.com/security/data/cve/CVE-2025-38064.md) | Routine | virtio: break and reset virtio devices on device_shutdown() | 6.7 | 0.0025 |  |
| [CVE-2025-38343](https://patchblox.com/security/data/cve/CVE-2025-38343.md) | Routine | wifi: mt76: mt7996: drop fragments with multicast or broadcast RA | 5.5 | 0.0025 |  |
| [CVE-2024-56742](https://patchblox.com/security/data/cve/CVE-2024-56742.md) | Routine | vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() | 6.1 | 0.0025 |  |
| [CVE-2024-44963](https://patchblox.com/security/data/cve/CVE-2024-44963.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0024 |  |
| [CVE-2025-38303](https://patchblox.com/security/data/cve/CVE-2025-38303.md) | Routine | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | 5.5 | 0.0024 |  |
| [CVE-2025-38132](https://patchblox.com/security/data/cve/CVE-2025-38132.md) | Routine | coresight: holding cscfg_csdev_lock while removing cscfg from csdev | 5.5 | 0.0023 |  |
| [CVE-2025-38272](https://patchblox.com/security/data/cve/CVE-2025-38272.md) | Routine | net: dsa: b53: do not enable EEE on bcm63xx | 5.5 | 0.0023 |  |
| [CVE-2025-38291](https://patchblox.com/security/data/cve/CVE-2025-38291.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | n/a | 0.0022 |  |
| [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0022 |  |
| [CVE-2025-38034](https://patchblox.com/security/data/cve/CVE-2025-38034.md) | Routine | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 5.5 | 0.0022 |  |
| [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 |  |
| [CVE-2025-38135](https://patchblox.com/security/data/cve/CVE-2025-38135.md) | Routine | serial: Fix potential null-ptr-deref in mlb_usio_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 |  |
| [CVE-2025-38145](https://patchblox.com/security/data/cve/CVE-2025-38145.md) | Routine | soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() | 5.5 | 0.0021 |  |
| [CVE-2025-38238](https://patchblox.com/security/data/cve/CVE-2025-38238.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0021 |  |
| [CVE-2025-38138](https://patchblox.com/security/data/cve/CVE-2025-38138.md) | Routine | dmaengine: ti: Add NULL check in udma_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-21872](https://patchblox.com/security/data/cve/CVE-2025-21872.md) | Routine | efi: Don't map the entire mokvar table to determine its size | 5.5 | 0.0021 |  |
| [CVE-2025-38143](https://patchblox.com/security/data/cve/CVE-2025-38143.md) | Routine | backlight: pm8941: Add NULL check in wled_configure() | 5.5 | 0.0021 |  |
| [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 |  |
| [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 |  |
| [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 |  |
| [CVE-2025-38275](https://patchblox.com/security/data/cve/CVE-2025-38275.md) | Routine | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 5.5 | 0.0021 |  |
| [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0021 |  |
| [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 |  |
| [CVE-2025-38061](https://patchblox.com/security/data/cve/CVE-2025-38061.md) | Routine | net: pktgen: fix access outside of user given buffer in pktgen_thread_write() | 6.7 | 0.0021 |  |
| [CVE-2025-38097](https://patchblox.com/security/data/cve/CVE-2025-38097.md) | Routine | espintcp: remove encap socket caching to avoid reference leak | 5.5 | 0.0021 |  |
| [CVE-2025-38166](https://patchblox.com/security/data/cve/CVE-2025-38166.md) | Routine | bpf: fix ktls panic with sockmap | 5.5 | 0.0020 |  |
| [CVE-2025-38127](https://patchblox.com/security/data/cve/CVE-2025-38127.md) | Routine | ice: fix Tx scheduler error handling in XDP callback | 5.5 | 0.0020 |  |
| [CVE-2025-38382](https://patchblox.com/security/data/cve/CVE-2025-38382.md) | Routine | btrfs: fix iteration of extrefs during log replay | 5.5 | 0.0020 |  |
| [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0020 |  |
| [CVE-2025-38098](https://patchblox.com/security/data/cve/CVE-2025-38098.md) | Routine | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 5.5 | 0.0020 |  |
| [CVE-2025-38173](https://patchblox.com/security/data/cve/CVE-2025-38173.md) | Routine | crypto: marvell/cesa - Handle zero-length skcipher requests | 5.5 | 0.0020 |  |
| [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 |  |
| [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 |  |
| [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 |  |
| [CVE-2024-42134](https://patchblox.com/security/data/cve/CVE-2024-42134.md) | Routine | virtio-pci: Check if is_avq is NULL | 5.5 | 0.0020 |  |
| [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 |  |
| [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 |  |
| [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 |  |
| [CVE-2025-38142](https://patchblox.com/security/data/cve/CVE-2025-38142.md) | Routine | hwmon: (asus-ec-sensors) check sensor index in read_string() | 5.5 | 0.0020 |  |
| [CVE-2025-38203](https://patchblox.com/security/data/cve/CVE-2025-38203.md) | Routine | jfs: Fix null-ptr-deref in jfs_ioc_trim | 5.5 | 0.0020 |  |
| [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 |  |
| [CVE-2024-36349](https://patchblox.com/security/data/cve/CVE-2024-36349.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.  The following security bug... | n/a | 0.0019 |  |
| [CVE-2025-38047](https://patchblox.com/security/data/cve/CVE-2025-38047.md) | Routine | x86/fred: Fix system hang during S4 resume with FRED enabled | 5.5 | 0.0019 |  |
| [CVE-2025-38189](https://patchblox.com/security/data/cve/CVE-2025-38189.md) | Routine | drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` | 5.5 | 0.0019 |  |
| [CVE-2025-38384](https://patchblox.com/security/data/cve/CVE-2025-38384.md) | Routine | mtd: spinand: fix memory leak of ECC engine conf | 5.5 | 0.0019 |  |
| [CVE-2025-38265](https://patchblox.com/security/data/cve/CVE-2025-38265.md) | Routine | serial: jsm: fix NPE during jsm_uart_port_init | 5.5 | 0.0019 |  |
| [CVE-2025-38426](https://patchblox.com/security/data/cve/CVE-2025-38426.md) | Routine | drm/amdgpu: Add basic validation for RAS header | 5.5 | 0.0019 |  |
| [CVE-2025-38455](https://patchblox.com/security/data/cve/CVE-2025-38455.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0019 |  |
| [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 |  |
| [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 |  |
| [CVE-2025-37984](https://patchblox.com/security/data/cve/CVE-2025-37984.md) | Routine | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | 6.5 | 0.0019 |  |
| [CVE-2025-38354](https://patchblox.com/security/data/cve/CVE-2025-38354.md) | Routine | drm/msm/gpu: Fix crash when throttling GPU immediately during boot | 5.5 | 0.0019 |  |
| [CVE-2025-38364](https://patchblox.com/security/data/cve/CVE-2025-38364.md) | Routine | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 5.5 | 0.0019 |  |
| [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 |  |
| [CVE-2025-38355](https://patchblox.com/security/data/cve/CVE-2025-38355.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0019 |  |
| [CVE-2025-38356](https://patchblox.com/security/data/cve/CVE-2025-38356.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0019 |  |
| [CVE-2025-38202](https://patchblox.com/security/data/cve/CVE-2025-38202.md) | Routine | bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() | 5.5 | 0.0018 |  |
| [CVE-2025-38148](https://patchblox.com/security/data/cve/CVE-2025-38148.md) | Routine | net: phy: mscc: Fix memory leak when using one step timestamping | 5.5 | 0.0018 |  |
| [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0018 |  |
| [CVE-2025-38487](https://patchblox.com/security/data/cve/CVE-2025-38487.md) | Routine | soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled | 5.5 | 0.0018 |  |
| [CVE-2024-36028](https://patchblox.com/security/data/cve/CVE-2024-36028.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.  The following security bug... | 4.7 | 0.0018 |  |
| [CVE-2025-38188](https://patchblox.com/security/data/cve/CVE-2025-38188.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE  Calli... | 5.5 | 0.0018 |  |
| [CVE-2025-38300](https://patchblox.com/security/data/cve/CVE-2025-38300.md) | Routine | crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() | 5.5 | 0.0018 |  |
| [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 |  |
| [CVE-2025-38376](https://patchblox.com/security/data/cve/CVE-2025-38376.md) | Routine | usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume | 5.5 | 0.0018 |  |
| [CVE-2025-38299](https://patchblox.com/security/data/cve/CVE-2025-38299.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0018 |  |
| [CVE-2025-38094](https://patchblox.com/security/data/cve/CVE-2025-38094.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0018 |  |
| [CVE-2025-38307](https://patchblox.com/security/data/cve/CVE-2025-38307.md) | Routine | ASoC: Intel: avs: Verify content returned by parse_int_array() | 5.5 | 0.0018 |  |
| [CVE-2025-38334](https://patchblox.com/security/data/cve/CVE-2025-38334.md) | Routine | x86/sgx: Prevent attempts to reclaim poisoned pages | 5.5 | 0.0018 |  |
| [CVE-2025-38475](https://patchblox.com/security/data/cve/CVE-2025-38475.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0017 |  |
| [CVE-2025-38155](https://patchblox.com/security/data/cve/CVE-2025-38155.md) | Routine | wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() | 5.5 | 0.0017 |  |
| [CVE-2025-38225](https://patchblox.com/security/data/cve/CVE-2025-38225.md) | Routine | media: imx-jpeg: Cleanup after an allocation error | 5.5 | 0.0017 |  |
| [CVE-2025-38489](https://patchblox.com/security/data/cve/CVE-2025-38489.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0017 |  |
| [CVE-2025-38256](https://patchblox.com/security/data/cve/CVE-2025-38256.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0017 |  |
| [CVE-2025-38315](https://patchblox.com/security/data/cve/CVE-2025-38315.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 6.4 | 0.0016 |  |
| [CVE-2025-38436](https://patchblox.com/security/data/cve/CVE-2025-38436.md) | Routine | drm/scheduler: signal scheduled fence when kill job | 5.5 | 0.0016 |  |
| [CVE-2025-37920](https://patchblox.com/security/data/cve/CVE-2025-37920.md) | Routine | xsk: Fix race condition in AF_XDP generic RX path | 5.5 | 0.0016 |  |
| [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 |  |
| [CVE-2025-23163](https://patchblox.com/security/data/cve/CVE-2025-23163.md) | Routine | net: vlan: don't propagate flags on open | 5.5 | 0.0016 |  |
| [CVE-2025-38268](https://patchblox.com/security/data/cve/CVE-2025-38268.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | 5.5 | 0.0014 |  |
| [CVE-2025-38448](https://patchblox.com/security/data/cve/CVE-2025-38448.md) | Routine | usb: gadget: u_serial: Fix race condition in TTY wakeup | 6.2 | 0.0014 |  |
| [CVE-2025-38353](https://patchblox.com/security/data/cve/CVE-2025-38353.md) | Routine | drm/xe: Fix taking invalid lock on wedge | 5.5 | 0.0014 |  |
| [CVE-2025-38335](https://patchblox.com/security/data/cve/CVE-2025-38335.md) | Routine | Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT | 5.5 | 0.0014 |  |
| [CVE-2025-38362](https://patchblox.com/security/data/cve/CVE-2025-38362.md) | Routine | drm/amd/display: Add null pointer check for get_first_active_display() | 5.5 | 0.0013 |  |
| [CVE-2025-38217](https://patchblox.com/security/data/cve/CVE-2025-38217.md) | Routine | hwmon: (ftsteutates) Fix TOCTOU race in fts_read() | 5.5 | 0.0013 |  |
| [CVE-2025-38114](https://patchblox.com/security/data/cve/CVE-2025-38114.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.  The following security bug... | n/a | 0.0013 |  |
| [CVE-2025-38158](https://patchblox.com/security/data/cve/CVE-2025-38158.md) | Routine | hisi_acc_vfio_pci: fix XQE dma address error | 5.7 | 0.0011 |  |
| [CVE-2025-38213](https://patchblox.com/security/data/cve/CVE-2025-38213.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |

---

Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.