# SUSE-SU-2025:02923-1: Security update for 4 packages

SUSE-SU-2025:02923-1, released August 20, 2025, fixes 446 CVEs across 4 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-02923-1
- Platform: Linux
- Released: Aug 20, 2025
- Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV))
- CVEs: 446, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:02923-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-coco](https://patchblox.com/security/data/product/linux/kernel-coco.md) | sles 15.6 | 6.4.0-15061.28.coco15sp6.1 |
| [kernel-coco_debug](https://patchblox.com/security/data/product/linux/kernel-coco-debug.md) | sles 15.6 | 6.4.0-15061.28.coco15sp6.1 |
| [kernel-source-coco](https://patchblox.com/security/data/product/linux/kernel-source-coco.md) | sles 15.6 | 6.4.0-15061.28.coco15sp6.1 |
| [kernel-syms-coco](https://patchblox.com/security/data/product/linux/kernel-syms-coco.md) | sles 15.6 | 6.4.0-15061.28.coco15sp6.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV |
| [CVE-2024-36350](https://patchblox.com/security/data/cve/CVE-2024-36350.md) | Urgent | AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue | 7.8 | 0.0049 |  |
| [CVE-2024-36357](https://patchblox.com/security/data/cve/CVE-2024-36357.md) | Urgent | AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue | 7.8 | 0.0036 |  |
| [CVE-2025-37928](https://patchblox.com/security/data/cve/CVE-2025-37928.md) | High | dm-bufio: don't schedule in atomic context | 7.8 | 0.0074 |  |
| [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 |  |
| [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 |  |
| [CVE-2025-38035](https://patchblox.com/security/data/cve/CVE-2025-38035.md) | High | nvmet-tcp: don't restore null sk_state_change | 7.5 | 0.0057 |  |
| [CVE-2025-37917](https://patchblox.com/security/data/cve/CVE-2025-37917.md) | High | kernel-64kb: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475). | 7.0 | 0.0056 |  |
| [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 |  |
| [CVE-2025-38001](https://patchblox.com/security/data/cve/CVE-2025-38001.md) | High | net_sched: hfsc: Address reentrant enqueue adding class to eltree twice | 7.8 | 0.0056 |  |
| [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 |  |
| [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 |  |
| [CVE-2024-50106](https://patchblox.com/security/data/cve/CVE-2024-50106.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0050 |  |
| [CVE-2025-38018](https://patchblox.com/security/data/cve/CVE-2025-38018.md) | High | kernel-64kb: net/tls: fix kernel panic when alloc_page failed (bsc#1244999). | 7.0 | 0.0048 |  |
| [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0047 |  |
| [CVE-2025-38471](https://patchblox.com/security/data/cve/CVE-2025-38471.md) | High | tls: always refresh the queue when reading sock | 7.8 | 0.0047 |  |
| [CVE-2025-38429](https://patchblox.com/security/data/cve/CVE-2025-38429.md) | High | bus: mhi: ep: Update read pointer only after buffer is written | 7.1 | 0.0047 |  |
| [CVE-2025-38264](https://patchblox.com/security/data/cve/CVE-2025-38264.md) | High | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 |  |
| [CVE-2024-57947](https://patchblox.com/security/data/cve/CVE-2024-57947.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0044 |  |
| [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 |  |
| [CVE-2025-38476](https://patchblox.com/security/data/cve/CVE-2025-38476.md) | High | rpl: Fix use-after-free in rpl_do_srh_inline(). | 7.8 | 0.0040 |  |
| [CVE-2025-38495](https://patchblox.com/security/data/cve/CVE-2025-38495.md) | High | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 |  |
| [CVE-2025-37954](https://patchblox.com/security/data/cve/CVE-2025-37954.md) | High | smb: client: Avoid race in open_cached_dir with lease breaks | 7.0 | 0.0037 |  |
| [CVE-2025-38490](https://patchblox.com/security/data/cve/CVE-2025-38490.md) | High | net: libwx: remove duplicate page_pool_put_full_page() | 9.8 | 0.0036 |  |
| [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 |  |
| [CVE-2025-37839](https://patchblox.com/security/data/cve/CVE-2025-37839.md) | High | jbd2: remove wrong sb->s_sequence check | 7.8 | 0.0033 |  |
| [CVE-2024-58099](https://patchblox.com/security/data/cve/CVE-2024-58099.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0033 |  |
| [CVE-2025-37840](https://patchblox.com/security/data/cve/CVE-2025-37840.md) | High | mtd: rawnand: brcmnand: fix PM resume warning | 7.8 | 0.0033 |  |
| [CVE-2025-37858](https://patchblox.com/security/data/cve/CVE-2025-37858.md) | High | fs/jfs: Prevent integer overflow in AG size calculation | 7.8 | 0.0031 |  |
| [CVE-2025-38292](https://patchblox.com/security/data/cve/CVE-2025-38292.md) | High | wifi: ath12k: fix invalid access to memory | 7.3 | 0.0031 |  |
| [CVE-2025-22035](https://patchblox.com/security/data/cve/CVE-2025-22035.md) | High | kernel-64kb: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544). | 7.8 | 0.0031 |  |
| [CVE-2025-37752](https://patchblox.com/security/data/cve/CVE-2025-37752.md) | High | kernel-64kb: net_sched: sch_sfq: move the limit validation (bsc#1242504). | 7.8 | 0.0030 |  |
| [CVE-2025-38248](https://patchblox.com/security/data/cve/CVE-2025-38248.md) | High | bridge: mcast: Fix use-after-free during router port configuration | 7.8 | 0.0030 |  |
| [CVE-2025-38003](https://patchblox.com/security/data/cve/CVE-2025-38003.md) | High | can: bcm: add missing rcu read protection for procfs content | 7.0 | 0.0030 |  |
| [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 |  |
| [CVE-2025-39735](https://patchblox.com/security/data/cve/CVE-2025-39735.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0030 |  |
| [CVE-2025-37927](https://patchblox.com/security/data/cve/CVE-2025-37927.md) | High | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | 7.8 | 0.0030 |  |
| [CVE-2025-38236](https://patchblox.com/security/data/cve/CVE-2025-38236.md) | High | af_unix: Don't leave consecutive consumed OOB skbs. | 7.8 | 0.0030 |  |
| [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 |  |
| [CVE-2025-38004](https://patchblox.com/security/data/cve/CVE-2025-38004.md) | High | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 |  |
| [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 |  |
| [CVE-2025-37854](https://patchblox.com/security/data/cve/CVE-2025-37854.md) | High | drm/amdkfd: Fix mode1 reset crash issue | 7.8 | 0.0027 |  |
| [CVE-2025-37943](https://patchblox.com/security/data/cve/CVE-2025-37943.md) | High | wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi | 8.0 | 0.0026 |  |
| [CVE-2025-22113](https://patchblox.com/security/data/cve/CVE-2025-22113.md) | High | ext4: avoid journaling sb update on error if journal is destroying | 7.8 | 0.0026 |  |
| [CVE-2025-37944](https://patchblox.com/security/data/cve/CVE-2025-37944.md) | High | wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process | 7.8 | 0.0026 |  |
| [CVE-2025-38494](https://patchblox.com/security/data/cve/CVE-2025-38494.md) | High | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 |  |
| [CVE-2024-57982](https://patchblox.com/security/data/cve/CVE-2024-57982.md) | High | xfrm: state: fix out-of-bounds read during lookup | 7.1 | 0.0025 |  |
| [CVE-2025-38244](https://patchblox.com/security/data/cve/CVE-2025-38244.md) | High | smb: client: fix potential deadlock when reconnecting channels | 7.0 | 0.0025 |  |
| [CVE-2025-38416](https://patchblox.com/security/data/cve/CVE-2025-38416.md) | High | NFC: nci: uart: Set tty->disc_data only in success path | 7.8 | 0.0025 |  |
| [CVE-2025-37810](https://patchblox.com/security/data/cve/CVE-2025-37810.md) | High | usb: dwc3: gadget: check that event count does not exceed event buffer length | 7.8 | 0.0025 |  |
| [CVE-2025-37923](https://patchblox.com/security/data/cve/CVE-2025-37923.md) | High | tracing: Fix oob write in trace_seq_to_buffer() | 7.8 | 0.0025 |  |
| [CVE-2025-37891](https://patchblox.com/security/data/cve/CVE-2025-37891.md) | High | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | 7.8 | 0.0025 |  |
| [CVE-2025-38060](https://patchblox.com/security/data/cve/CVE-2025-38060.md) | High | bpf: copy_verifier_state() should copy 'loop_entry' field | 7.8 | 0.0024 |  |
| [CVE-2024-49861](https://patchblox.com/security/data/cve/CVE-2024-49861.md) | High | bpf: Fix helper writes to read-only maps | 7.1 | 0.0024 |  |
| [CVE-2025-38000](https://patchblox.com/security/data/cve/CVE-2025-38000.md) | High | sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() | 7.8 | 0.0024 |  |
| [CVE-2025-40014](https://patchblox.com/security/data/cve/CVE-2025-40014.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-38204](https://patchblox.com/security/data/cve/CVE-2025-38204.md) | High | jfs: fix array-index-out-of-bounds read in add_missing_indices | 7.1 | 0.0024 |  |
| [CVE-2025-38290](https://patchblox.com/security/data/cve/CVE-2025-38290.md) | High | wifi: ath12k: fix node corruption in ar->arvifs list | 7.8 | 0.0024 |  |
| [CVE-2025-37911](https://patchblox.com/security/data/cve/CVE-2025-37911.md) | High | bnxt_en: Fix out-of-bound memcpy() during ethtool -w | 7.0 | 0.0024 |  |
| [CVE-2025-37913](https://patchblox.com/security/data/cve/CVE-2025-37913.md) | High | net_sched: qfq: Fix double list add in class with netem as child qdisc | 7.8 | 0.0024 |  |
| [CVE-2025-37921](https://patchblox.com/security/data/cve/CVE-2025-37921.md) | High | vxlan: vnifilter: Fix unlocked deletion of default FDB entry | 7.8 | 0.0024 |  |
| [CVE-2025-38279](https://patchblox.com/security/data/cve/CVE-2025-38279.md) | High | bpf: Do not include stack ptr register in precision backtracking bookkeeping | 7.8 | 0.0024 |  |
| [CVE-2025-37973](https://patchblox.com/security/data/cve/CVE-2025-37973.md) | High | wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation | 7.1 | 0.0024 |  |
| [CVE-2025-21920](https://patchblox.com/security/data/cve/CVE-2025-21920.md) | High | kernel-64kb: vlan: enforce underlying device type (bsc#1240686). | 7.1 | 0.0024 |  |
| [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 |  |
| [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 |  |
| [CVE-2025-37914](https://patchblox.com/security/data/cve/CVE-2025-37914.md) | High | net_sched: ets: Fix double list add in class with netem as child qdisc | 7.8 | 0.0023 |  |
| [CVE-2025-37930](https://patchblox.com/security/data/cve/CVE-2025-37930.md) | High | drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | 7.0 | 0.0023 |  |
| [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel-64kb: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061). | 7.8 | 0.0023 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 |  |
| [CVE-2025-38065](https://patchblox.com/security/data/cve/CVE-2025-38065.md) | High | orangefs: Do not truncate file size | 7.0 | 0.0023 |  |
| [CVE-2025-38024](https://patchblox.com/security/data/cve/CVE-2025-38024.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 |  |
| [CVE-2025-38023](https://patchblox.com/security/data/cve/CVE-2025-38023.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2025-38194](https://patchblox.com/security/data/cve/CVE-2025-38194.md) | High | jffs2: check that raw node were preallocated before writing summary | 7.0 | 0.0023 |  |
| [CVE-2025-23142](https://patchblox.com/security/data/cve/CVE-2025-23142.md) | High | sctp: detect and prevent references to a freed transport in sendmsg | 7.8 | 0.0023 |  |
| [CVE-2025-38077](https://patchblox.com/security/data/cve/CVE-2025-38077.md) | High | platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() | 7.8 | 0.0023 |  |
| [CVE-2025-37819](https://patchblox.com/security/data/cve/CVE-2025-37819.md) | High | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | 7.8 | 0.0023 |  |
| [CVE-2025-37915](https://patchblox.com/security/data/cve/CVE-2025-37915.md) | High | net_sched: drr: Fix double list add in class with netem as child qdisc | 7.0 | 0.0023 |  |
| [CVE-2025-38414](https://patchblox.com/security/data/cve/CVE-2025-38414.md) | High | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 7.0 | 0.0023 |  |
| [CVE-2025-23158](https://patchblox.com/security/data/cve/CVE-2025-23158.md) | High | media: venus: hfi: add check to handle incorrect queue size | 7.8 | 0.0022 |  |
| [CVE-2025-23156](https://patchblox.com/security/data/cve/CVE-2025-23156.md) | High | media: venus: hfi_parser: refactor hfi packet parsing logic | 7.1 | 0.0022 |  |
| [CVE-2025-23157](https://patchblox.com/security/data/cve/CVE-2025-23157.md) | High | media: venus: hfi_parser: add check to avoid out of bound access | 7.1 | 0.0022 |  |
| [CVE-2025-37963](https://patchblox.com/security/data/cve/CVE-2025-37963.md) | High | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | 7.0 | 0.0022 |  |
| [CVE-2025-37994](https://patchblox.com/security/data/cve/CVE-2025-37994.md) | High | usb: typec: ucsi: displayport: Fix NULL pointer access | 7.8 | 0.0022 |  |
| [CVE-2025-37890](https://patchblox.com/security/data/cve/CVE-2025-37890.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | 7.8 | 0.0022 |  |
| [CVE-2025-38100](https://patchblox.com/security/data/cve/CVE-2025-38100.md) | High | x86/iopl: Cure TIF_IO_BITMAP inconsistencies | 7.0 | 0.0022 |  |
| [CVE-2025-37979](https://patchblox.com/security/data/cve/CVE-2025-37979.md) | High | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | 7.8 | 0.0022 |  |
| [CVE-2025-37995](https://patchblox.com/security/data/cve/CVE-2025-37995.md) | High | module: ensure that kobject_put() is safe for module type kobjects | 7.0 | 0.0022 |  |
| [CVE-2025-38051](https://patchblox.com/security/data/cve/CVE-2025-38051.md) | High | smb: client: Fix use-after-free in cifs_fill_dirent | 7.1 | 0.0022 |  |
| [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 |  |
| [CVE-2025-38187](https://patchblox.com/security/data/cve/CVE-2025-38187.md) | High | kernel-64kb: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951). | 7.8 | 0.0022 |  |
| [CVE-2025-37936](https://patchblox.com/security/data/cve/CVE-2025-37936.md) | High | perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. | 7.0 | 0.0022 |  |
| [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 |  |
| [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 |  |
| [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 |  |
| [CVE-2025-38328](https://patchblox.com/security/data/cve/CVE-2025-38328.md) | High | jffs2: check jffs2_prealloc_raw_node_refs() result in few other places | 7.1 | 0.0022 |  |
| [CVE-2025-38005](https://patchblox.com/security/data/cve/CVE-2025-38005.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0022 |  |
| [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 |  |
| [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 |  |
| [CVE-2025-37738](https://patchblox.com/security/data/cve/CVE-2025-37738.md) | High | ext4: ignore xattrs past end | 7.8 | 0.0022 |  |
| [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0022 |  |
| [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 |  |
| [CVE-2025-38428](https://patchblox.com/security/data/cve/CVE-2025-38428.md) | High | Input: ims-pcu - check record size in ims_pcu_flash_firmware() | 7.8 | 0.0022 |  |
| [CVE-2025-38079](https://patchblox.com/security/data/cve/CVE-2025-38079.md) | High | crypto: algif_hash - fix double free in hash_accept | 7.8 | 0.0022 |  |
| [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 |  |
| [CVE-2025-37901](https://patchblox.com/security/data/cve/CVE-2025-37901.md) | High | irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs | 7.0 | 0.0021 |  |
| [CVE-2025-22083](https://patchblox.com/security/data/cve/CVE-2025-22083.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-37948](https://patchblox.com/security/data/cve/CVE-2025-37948.md) | High | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | 7.0 | 0.0021 |  |
| [CVE-2024-56699](https://patchblox.com/security/data/cve/CVE-2024-56699.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 |  |
| [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 |  |
| [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 |  |
| [CVE-2025-38286](https://patchblox.com/security/data/cve/CVE-2025-38286.md) | High | pinctrl: at91: Fix possible out-of-boundary access | 7.1 | 0.0021 |  |
| [CVE-2025-37905](https://patchblox.com/security/data/cve/CVE-2025-37905.md) | High | firmware: arm_scmi: Balance device refcount when destroying devices | 7.0 | 0.0021 |  |
| [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 |  |
| [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 |  |
| [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 |  |
| [CVE-2025-37892](https://patchblox.com/security/data/cve/CVE-2025-37892.md) | High | mtd: inftlcore: Add error check for inftl_read_oob() | 7.8 | 0.0021 |  |
| [CVE-2025-37903](https://patchblox.com/security/data/cve/CVE-2025-37903.md) | High | drm/amd/display: Fix slab-use-after-free in hdcp | 7.8 | 0.0021 |  |
| [CVE-2025-38192](https://patchblox.com/security/data/cve/CVE-2025-38192.md) | High | net: clear the dst when changing skb protocol | 7.0 | 0.0021 |  |
| [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 |  |
| [CVE-2025-21997](https://patchblox.com/security/data/cve/CVE-2025-21997.md) | High | kernel-64kb: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823). | 7.1 | 0.0021 |  |
| [CVE-2025-37938](https://patchblox.com/security/data/cve/CVE-2025-37938.md) | High | tracing: Verify event formats that have "%*p.." | 7.8 | 0.0021 |  |
| [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 |  |
| [CVE-2025-37897](https://patchblox.com/security/data/cve/CVE-2025-37897.md) | High | wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release | 7.0 | 0.0020 |  |
| [CVE-2025-37929](https://patchblox.com/security/data/cve/CVE-2025-37929.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-38131](https://patchblox.com/security/data/cve/CVE-2025-38131.md) | High | coresight: prevent deactivate active config while enabling the config | 7.8 | 0.0020 |  |
| [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 |  |
| [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 |  |
| [CVE-2025-38013](https://patchblox.com/security/data/cve/CVE-2025-38013.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-38068](https://patchblox.com/security/data/cve/CVE-2025-38068.md) | High | crypto: lzo - Fix compression buffer overrun | 7.8 | 0.0020 |  |
| [CVE-2025-38027](https://patchblox.com/security/data/cve/CVE-2025-38027.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 |  |
| [CVE-2025-38153](https://patchblox.com/security/data/cve/CVE-2025-38153.md) | High | net: usb: aqc111: fix error handling of usbnet read calls | 7.1 | 0.0020 |  |
| [CVE-2025-38074](https://patchblox.com/security/data/cve/CVE-2025-38074.md) | High | vhost-scsi: protect vq->log_used with vq->mutex | 7.0 | 0.0020 |  |
| [CVE-2025-37796](https://patchblox.com/security/data/cve/CVE-2025-37796.md) | High | wifi: at76c50x: fix use after free access in at76_disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 |  |
| [CVE-2025-38425](https://patchblox.com/security/data/cve/CVE-2025-38425.md) | High | i2c: tegra: check msg length in SMBUS block read | 7.8 | 0.0020 |  |
| [CVE-2025-37900](https://patchblox.com/security/data/cve/CVE-2025-37900.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-38385](https://patchblox.com/security/data/cve/CVE-2025-38385.md) | High | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 |  |
| [CVE-2025-38449](https://patchblox.com/security/data/cve/CVE-2025-38449.md) | High | drm/gem: Acquire references on GEM handles for framebuffers | 7.8 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38022](https://patchblox.com/security/data/cve/CVE-2025-38022.md) | High | RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem | 7.8 | 0.0020 |  |
| [CVE-2025-38118](https://patchblox.com/security/data/cve/CVE-2025-38118.md) | High | Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete | 7.8 | 0.0020 |  |
| [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 |  |
| [CVE-2025-38283](https://patchblox.com/security/data/cve/CVE-2025-38283.md) | High | hisi_acc_vfio_pci: bugfix live migration function without VF device driver | 7.1 | 0.0020 |  |
| [CVE-2025-38126](https://patchblox.com/security/data/cve/CVE-2025-38126.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping | 7.0 | 0.0020 |  |
| [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0020 |  |
| [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 |  |
| [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 |  |
| [CVE-2025-37989](https://patchblox.com/security/data/cve/CVE-2025-37989.md) | High | net: phy: leds: fix memory leak | 7.0 | 0.0020 |  |
| [CVE-2025-38015](https://patchblox.com/security/data/cve/CVE-2025-38015.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-38020](https://patchblox.com/security/data/cve/CVE-2025-38020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-38043](https://patchblox.com/security/data/cve/CVE-2025-38043.md) | High | firmware: arm_ffa: Set dma_mask for ffa devices | 7.0 | 0.0020 |  |
| [CVE-2025-38105](https://patchblox.com/security/data/cve/CVE-2025-38105.md) | High | ALSA: usb-audio: Kill timer properly at removal | 7.0 | 0.0020 |  |
| [CVE-2025-38090](https://patchblox.com/security/data/cve/CVE-2025-38090.md) | High | drivers/rapidio/rio_cm.c: prevent possible heap overwrite | 7.8 | 0.0020 |  |
| [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0020 |  |
| [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 |  |
| [CVE-2025-38088](https://patchblox.com/security/data/cve/CVE-2025-38088.md) | High | powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap | 7.1 | 0.0020 |  |
| [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 |  |
| [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 |  |
| [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 |  |
| [CVE-2025-37946](https://patchblox.com/security/data/cve/CVE-2025-37946.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-38062](https://patchblox.com/security/data/cve/CVE-2025-38062.md) | High | genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie | 7.8 | 0.0020 |  |
| [CVE-2025-38040](https://patchblox.com/security/data/cve/CVE-2025-38040.md) | High | serial: mctrl_gpio: split disable_ms into sync and no_sync APIs | 7.0 | 0.0020 |  |
| [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 |  |
| [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 |  |
| [CVE-2025-37786](https://patchblox.com/security/data/cve/CVE-2025-37786.md) | High | net: dsa: free routing table on probe failure | 7.8 | 0.0019 |  |
| [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 |  |
| [CVE-2025-37953](https://patchblox.com/security/data/cve/CVE-2025-37953.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-37982](https://patchblox.com/security/data/cve/CVE-2025-37982.md) | High | wifi: wl1251: fix memory leak in wl1251_tx_work | 7.0 | 0.0019 |  |
| [CVE-2025-38014](https://patchblox.com/security/data/cve/CVE-2025-38014.md) | High | dmaengine: idxd: Refactor remove call with idxd_cleanup() helper | 7.0 | 0.0019 |  |
| [CVE-2025-38045](https://patchblox.com/security/data/cve/CVE-2025-38045.md) | High | wifi: iwlwifi: fix debug actions order | 7.0 | 0.0019 |  |
| [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 |  |
| [CVE-2025-38206](https://patchblox.com/security/data/cve/CVE-2025-38206.md) | High | exfat: fix double free in delayed_free | 7.8 | 0.0019 |  |
| [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 |  |
| [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 |  |
| [CVE-2025-37987](https://patchblox.com/security/data/cve/CVE-2025-37987.md) | High | pds_core: Prevent possible adminq overflow/stuck condition | 7.0 | 0.0019 |  |
| [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 |  |
| [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 |  |
| [CVE-2025-38182](https://patchblox.com/security/data/cve/CVE-2025-38182.md) | High | ublk: santizize the arguments from userspace when adding a device | 7.8 | 0.0019 |  |
| [CVE-2025-38183](https://patchblox.com/security/data/cve/CVE-2025-38183.md) | High | net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() | 7.8 | 0.0019 |  |
| [CVE-2025-38053](https://patchblox.com/security/data/cve/CVE-2025-38053.md) | High | kernel-64kb: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746). | 7.1 | 0.0019 |  |
| [CVE-2025-38099](https://patchblox.com/security/data/cve/CVE-2025-38099.md) | High | Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken | 7.0 | 0.0019 |  |
| [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38277](https://patchblox.com/security/data/cve/CVE-2025-38277.md) | High | mtd: nand: ecc-mxic: Fix use of uninitialized variable ret | 7.1 | 0.0019 |  |
| [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-37972](https://patchblox.com/security/data/cve/CVE-2025-37972.md) | High | Input: mtk-pmic-keys - fix possible null pointer dereference | 7.0 | 0.0019 |  |
| [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 |  |
| [CVE-2025-38289](https://patchblox.com/security/data/cve/CVE-2025-38289.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-37951](https://patchblox.com/security/data/cve/CVE-2025-37951.md) | High | drm/v3d: Add job to pending list if the reset was skipped | 7.0 | 0.0019 |  |
| [CVE-2025-38313](https://patchblox.com/security/data/cve/CVE-2025-38313.md) | High | bus: fsl-mc: fix double-free on mc_dev | 7.8 | 0.0019 |  |
| [CVE-2025-38392](https://patchblox.com/security/data/cve/CVE-2025-38392.md) | High | kernel-64kb: idpf: convert control queue mutex to a spinlock (bsc#1247169). | 7.3 | 0.0019 |  |
| [CVE-2025-38409](https://patchblox.com/security/data/cve/CVE-2025-38409.md) | High | drm/msm: Fix another leak in the submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 |  |
| [CVE-2025-38463](https://patchblox.com/security/data/cve/CVE-2025-38463.md) | High | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 |  |
| [CVE-2025-38162](https://patchblox.com/security/data/cve/CVE-2025-38162.md) | High | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 7.0 | 0.0019 |  |
| [CVE-2025-38117](https://patchblox.com/security/data/cve/CVE-2025-38117.md) | High | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 7.8 | 0.0019 |  |
| [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 |  |
| [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 |  |
| [CVE-2025-38058](https://patchblox.com/security/data/cve/CVE-2025-38058.md) | High | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0019 |  |
| [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 |  |
| [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 |  |
| [CVE-2025-38227](https://patchblox.com/security/data/cve/CVE-2025-38227.md) | High | media: vidtv: Terminating the subsequent process of initialization failure | 7.8 | 0.0019 |  |
| [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 |  |
| [CVE-2025-38349](https://patchblox.com/security/data/cve/CVE-2025-38349.md) | High | eventpoll: don't decrement ep refcount while still holding the ep mutex | 8.4 | 0.0018 |  |
| [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 |  |
| [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 |  |
| [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 |  |
| [CVE-2025-37969](https://patchblox.com/security/data/cve/CVE-2025-37969.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | 7.0 | 0.0018 |  |
| [CVE-2025-38063](https://patchblox.com/security/data/cve/CVE-2025-38063.md) | High | dm: fix unconditional IO throttle caused by REQ_PREFLUSH | 7.0 | 0.0018 |  |
| [CVE-2025-38081](https://patchblox.com/security/data/cve/CVE-2025-38081.md) | High | spi-rockchip: Fix register out of bounds access | 7.1 | 0.0018 |  |
| [CVE-2025-37997](https://patchblox.com/security/data/cve/CVE-2025-37997.md) | High | netfilter: ipset: fix region locking in hash types | 7.0 | 0.0018 |  |
| [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 |  |
| [CVE-2025-37970](https://patchblox.com/security/data/cve/CVE-2025-37970.md) | High | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo | 7.0 | 0.0018 |  |
| [CVE-2025-38210](https://patchblox.com/security/data/cve/CVE-2025-38210.md) | High | kernel-64kb: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020). | 7.0 | 0.0018 |  |
| [CVE-2025-38080](https://patchblox.com/security/data/cve/CVE-2025-38080.md) | High | drm/amd/display: Increase block_sequence array size | 7.0 | 0.0018 |  |
| [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 |  |
| [CVE-2025-38087](https://patchblox.com/security/data/cve/CVE-2025-38087.md) | High | net/sched: fix use-after-free in taprio_dev_notifier | 7.8 | 0.0018 |  |
| [CVE-2025-38257](https://patchblox.com/security/data/cve/CVE-2025-38257.md) | High | s390/pkey: Prevent overflow in size calculation for memdup_user() | 7.8 | 0.0018 |  |
| [CVE-2025-38239](https://patchblox.com/security/data/cve/CVE-2025-38239.md) | High | scsi: megaraid_sas: Fix invalid node index | 7.8 | 0.0018 |  |
| [CVE-2025-38304](https://patchblox.com/security/data/cve/CVE-2025-38304.md) | High | Bluetooth: Fix NULL pointer deference on eir_get_service_data | 7.0 | 0.0018 |  |
| [CVE-2025-38259](https://patchblox.com/security/data/cve/CVE-2025-38259.md) | High | ASoC: codecs: wcd9335: Fix missing free of regulator supplies | 7.8 | 0.0018 |  |
| [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 |  |
| [CVE-2025-38485](https://patchblox.com/security/data/cve/CVE-2025-38485.md) | High | iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush | 7.8 | 0.0017 |  |
| [CVE-2025-38078](https://patchblox.com/security/data/cve/CVE-2025-38078.md) | High | ALSA: pcm: Fix race of buffer access at PCM OSS layer | 7.0 | 0.0017 |  |
| [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 |  |
| [CVE-2025-38310](https://patchblox.com/security/data/cve/CVE-2025-38310.md) | High | seg6: Fix validation of nexthop addresses | 7.1 | 0.0017 |  |
| [CVE-2025-38496](https://patchblox.com/security/data/cve/CVE-2025-38496.md) | High | dm-bufio: fix sched in atomic context | 7.0 | 0.0017 |  |
| [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 |  |
| [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 |  |
| [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 |  |
| [CVE-2025-37968](https://patchblox.com/security/data/cve/CVE-2025-37968.md) | High | iio: light: opt3001: fix deadlock due to concurrent flag access | 7.0 | 0.0016 |  |
| [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 |  |
| [CVE-2025-38083](https://patchblox.com/security/data/cve/CVE-2025-38083.md) | High | net_sched: prio: fix a race in prio_tune() | 7.0 | 0.0016 |  |
| [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0015 |  |
| [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 |  |
| [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 |  |
| [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 |  |
| [CVE-2025-38373](https://patchblox.com/security/data/cve/CVE-2025-38373.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0013 |  |
| [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a |  |
| [CVE-2019-11135](https://patchblox.com/security/data/cve/CVE-2019-11135.md) | Routine | Windows Kernel Information Disclosure Vulnerability | 6.5 | 0.0313 |  |
| [CVE-2025-37871](https://patchblox.com/security/data/cve/CVE-2025-37871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0079 |  |
| [CVE-2024-49568](https://patchblox.com/security/data/cve/CVE-2024-49568.md) | Routine | net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg | 5.5 | 0.0058 |  |
| [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0052 |  |
| [CVE-2025-38057](https://patchblox.com/security/data/cve/CVE-2025-38057.md) | Routine | espintcp: fix skb leaks | 5.5 | 0.0048 |  |
| [CVE-2025-38123](https://patchblox.com/security/data/cve/CVE-2025-38123.md) | Routine | net: wwan: t7xx: Fix napi rx poll issue | 5.5 | 0.0047 |  |
| [CVE-2024-58053](https://patchblox.com/security/data/cve/CVE-2024-58053.md) | Routine | rxrpc: Fix handling of received connection abort | 5.5 | 0.0046 |  |
| [CVE-2025-37757](https://patchblox.com/security/data/cve/CVE-2025-37757.md) | Routine | tipc: fix memory leak in tipc_link_xmit | 6.1 | 0.0045 |  |
| [CVE-2025-21959](https://patchblox.com/security/data/cve/CVE-2025-21959.md) | Routine | kernel-64kb: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814). | 5.5 | 0.0045 |  |
| [CVE-2025-21629](https://patchblox.com/security/data/cve/CVE-2025-21629.md) | Routine | net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets | 5.5 | 0.0043 |  |
| [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 |  |
| [CVE-2025-21938](https://patchblox.com/security/data/cve/CVE-2025-21938.md) | Routine | kernel-64kb: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723). | 5.9 | 0.0039 |  |
| [CVE-2025-21868](https://patchblox.com/security/data/cve/CVE-2025-21868.md) | Routine | kernel-64kb: kABI workaround for adding an header (bsc#1240180). | 5.5 | 0.0039 |  |
| [CVE-2025-37959](https://patchblox.com/security/data/cve/CVE-2025-37959.md) | Routine | bpf: Scrub packet on bpf_redirect_peer | 5.5 | 0.0038 |  |
| [CVE-2025-21720](https://patchblox.com/security/data/cve/CVE-2025-21720.md) | Routine | kernel-64kb: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859). | 5.5 | 0.0036 |  |
| [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 |  |
| [CVE-2025-38365](https://patchblox.com/security/data/cve/CVE-2025-38365.md) | Routine | btrfs: fix a race between renames and directory logging | 5.5 | 0.0036 |  |
| [CVE-2025-38246](https://patchblox.com/security/data/cve/CVE-2025-38246.md) | Routine | bnxt: properly flush XDP redirect lists | 5.5 | 0.0034 |  |
| [CVE-2024-36348](https://patchblox.com/security/data/cve/CVE-2024-36348.md) | Routine | kernel-64kb: CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896). | n/a | 0.0034 |  |
| [CVE-2025-37874](https://patchblox.com/security/data/cve/CVE-2025-37874.md) | Routine | net: ngbe: fix memory leak in ngbe_probe() error path | 5.5 | 0.0032 |  |
| [CVE-2025-37836](https://patchblox.com/security/data/cve/CVE-2025-37836.md) | Routine | PCI: Fix reference leak in pci_register_host_bridge() | 5.5 | 0.0031 |  |
| [CVE-2025-37881](https://patchblox.com/security/data/cve/CVE-2025-37881.md) | Routine | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | 5.5 | 0.0031 |  |
| [CVE-2025-37859](https://patchblox.com/security/data/cve/CVE-2025-37859.md) | Routine | page_pool: avoid infinite loop to schedule delayed worker | 5.5 | 0.0031 |  |
| [CVE-2025-37862](https://patchblox.com/security/data/cve/CVE-2025-37862.md) | Routine | HID: pidff: Fix null pointer dereference in pidff_find_fields | 5.5 | 0.0031 |  |
| [CVE-2025-37856](https://patchblox.com/security/data/cve/CVE-2025-37856.md) | Routine | btrfs: harden block_group::bg_list against list_del() races | 5.5 | 0.0031 |  |
| [CVE-2025-37867](https://patchblox.com/security/data/cve/CVE-2025-37867.md) | Routine | RDMA/core: Silence oversized kvmalloc() warning | 5.5 | 0.0031 |  |
| [CVE-2025-37756](https://patchblox.com/security/data/cve/CVE-2025-37756.md) | Routine | net: tls: explicitly disallow disconnect | 5.5 | 0.0030 |  |
| [CVE-2025-37864](https://patchblox.com/security/data/cve/CVE-2025-37864.md) | Routine | net: dsa: clean up FDB, MDB, VLAN entries on unbind | 5.5 | 0.0030 |  |
| [CVE-2025-37841](https://patchblox.com/security/data/cve/CVE-2025-37841.md) | Routine | pm: cpupower: bench: Prevent NULL dereference on malloc failure | 5.5 | 0.0030 |  |
| [CVE-2025-37844](https://patchblox.com/security/data/cve/CVE-2025-37844.md) | Routine | cifs: avoid NULL pointer dereference in dbg call | 5.5 | 0.0030 |  |
| [CVE-2025-37850](https://patchblox.com/security/data/cve/CVE-2025-37850.md) | Routine | kernel-livepatch-SLE15-SP7_Update_2: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37851](https://patchblox.com/security/data/cve/CVE-2025-37851.md) | Routine | fbdev: omapfb: Add 'plane' value check | 5.5 | 0.0030 |  |
| [CVE-2025-37925](https://patchblox.com/security/data/cve/CVE-2025-37925.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-37889](https://patchblox.com/security/data/cve/CVE-2025-37889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2025-37865](https://patchblox.com/security/data/cve/CVE-2025-37865.md) | Routine | net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported | 5.5 | 0.0029 |  |
| [CVE-2025-37875](https://patchblox.com/security/data/cve/CVE-2025-37875.md) | Routine | igc: fix PTM cycle trigger logic | 5.5 | 0.0029 |  |
| [CVE-2025-37852](https://patchblox.com/security/data/cve/CVE-2025-37852.md) | Routine | drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() | 5.5 | 0.0028 |  |
| [CVE-2025-37853](https://patchblox.com/security/data/cve/CVE-2025-37853.md) | Routine | drm/amdkfd: debugfs hang_hws skip GPU with MES | 5.5 | 0.0028 |  |
| [CVE-2025-37873](https://patchblox.com/security/data/cve/CVE-2025-37873.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2025-37998](https://patchblox.com/security/data/cve/CVE-2025-37998.md) | Routine | openvswitch: Fix unsafe attribute parsing in output_userspace() | 5.5 | 0.0027 |  |
| [CVE-2025-38240](https://patchblox.com/security/data/cve/CVE-2025-38240.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0025 |  |
| [CVE-2025-38064](https://patchblox.com/security/data/cve/CVE-2025-38064.md) | Routine | virtio: break and reset virtio devices on device_shutdown() | 6.7 | 0.0025 |  |
| [CVE-2025-38343](https://patchblox.com/security/data/cve/CVE-2025-38343.md) | Routine | wifi: mt76: mt7996: drop fragments with multicast or broadcast RA | 5.5 | 0.0025 |  |
| [CVE-2024-56742](https://patchblox.com/security/data/cve/CVE-2024-56742.md) | Routine | vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() | 6.1 | 0.0025 |  |
| [CVE-2025-37747](https://patchblox.com/security/data/cve/CVE-2025-37747.md) | Routine | perf: Fix hang while freeing sigtrap event | 5.5 | 0.0025 |  |
| [CVE-2025-37918](https://patchblox.com/security/data/cve/CVE-2025-37918.md) | Routine | Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() | 5.5 | 0.0025 |  |
| [CVE-2024-44963](https://patchblox.com/security/data/cve/CVE-2024-44963.md) | Routine | kernel-64kb: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216). | 5.5 | 0.0024 |  |
| [CVE-2025-37743](https://patchblox.com/security/data/cve/CVE-2025-37743.md) | Routine | wifi: ath12k: Avoid memory leak while enabling statistics | 5.5 | 0.0024 |  |
| [CVE-2025-37937](https://patchblox.com/security/data/cve/CVE-2025-37937.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52888](https://patchblox.com/security/data/cve/CVE-2023-52888.md) | Routine | media: mediatek: vcodec: Only free buffer VA that is not NULL | 5.5 | 0.0024 |  |
| [CVE-2025-37932](https://patchblox.com/security/data/cve/CVE-2025-37932.md) | Routine | sch_htb: make htb_qlen_notify() idempotent | 5.5 | 0.0024 |  |
| [CVE-2025-37990](https://patchblox.com/security/data/cve/CVE-2025-37990.md) | Routine | wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() | 5.5 | 0.0024 |  |
| [CVE-2025-38303](https://patchblox.com/security/data/cve/CVE-2025-38303.md) | Routine | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | 5.5 | 0.0024 |  |
| [CVE-2025-38044](https://patchblox.com/security/data/cve/CVE-2025-38044.md) | Routine | media: cx231xx: set device_caps for 417 | 5.5 | 0.0024 |  |
| [CVE-2025-21899](https://patchblox.com/security/data/cve/CVE-2025-21899.md) | Routine | tracing: Fix bad hist from corrupting named_triggers list | 6.0 | 0.0023 |  |
| [CVE-2025-21898](https://patchblox.com/security/data/cve/CVE-2025-21898.md) | Routine | kernel-64kb: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610). | 5.5 | 0.0023 |  |
| [CVE-2025-21854](https://patchblox.com/security/data/cve/CVE-2025-21854.md) | Routine | kernel-64kb: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470). | 5.5 | 0.0023 |  |
| [CVE-2025-38132](https://patchblox.com/security/data/cve/CVE-2025-38132.md) | Routine | coresight: holding cscfg_csdev_lock while removing cscfg from csdev | 5.5 | 0.0023 |  |
| [CVE-2025-37909](https://patchblox.com/security/data/cve/CVE-2025-37909.md) | Routine | net: lan743x: Fix memleak issue when GSO enabled | 5.5 | 0.0023 |  |
| [CVE-2025-23159](https://patchblox.com/security/data/cve/CVE-2025-23159.md) | Routine | media: venus: hfi: add a check to handle OOB in sfr region | 5.5 | 0.0023 |  |
| [CVE-2025-37912](https://patchblox.com/security/data/cve/CVE-2025-37912.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26831](https://patchblox.com/security/data/cve/CVE-2024-26831.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-38272](https://patchblox.com/security/data/cve/CVE-2025-38272.md) | Routine | net: dsa: b53: do not enable EEE on bcm63xx | 5.5 | 0.0023 |  |
| [CVE-2025-37765](https://patchblox.com/security/data/cve/CVE-2025-37765.md) | Routine | drm/nouveau: prime: fix ttm_bo_delayed_delete oops | 5.5 | 0.0022 |  |
| [CVE-2025-23144](https://patchblox.com/security/data/cve/CVE-2025-23144.md) | Routine | backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() | 5.5 | 0.0022 |  |
| [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-38072](https://patchblox.com/security/data/cve/CVE-2025-38072.md) | Routine | libnvdimm/labels: Fix divide error in nd_label_data_init() | 5.5 | 0.0022 |  |
| [CVE-2025-38061](https://patchblox.com/security/data/cve/CVE-2025-38061.md) | Routine | net: pktgen: fix access outside of user given buffer in pktgen_thread_write() | 6.7 | 0.0022 |  |
| [CVE-2025-38034](https://patchblox.com/security/data/cve/CVE-2025-38034.md) | Routine | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 5.5 | 0.0022 |  |
| [CVE-2025-22005](https://patchblox.com/security/data/cve/CVE-2025-22005.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 |  |
| [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 |  |
| [CVE-2025-22089](https://patchblox.com/security/data/cve/CVE-2025-22089.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22090](https://patchblox.com/security/data/cve/CVE-2025-22090.md) | Routine | x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() | 5.5 | 0.0022 |  |
| [CVE-2025-37931](https://patchblox.com/security/data/cve/CVE-2025-37931.md) | Routine | btrfs: adjust subpage bit start based on sectorsize | 5.5 | 0.0022 |  |
| [CVE-2025-23146](https://patchblox.com/security/data/cve/CVE-2025-23146.md) | Routine | mfd: ene-kb3930: Fix a potential NULL pointer dereference | 5.5 | 0.0022 |  |
| [CVE-2025-37992](https://patchblox.com/security/data/cve/CVE-2025-37992.md) | Routine | net_sched: Flush gso_skb list too during ->change() | 5.5 | 0.0022 |  |
| [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 |  |
| [CVE-2025-22066](https://patchblox.com/security/data/cve/CVE-2025-22066.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22095](https://patchblox.com/security/data/cve/CVE-2025-22095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-23147](https://patchblox.com/security/data/cve/CVE-2025-23147.md) | Routine | i3c: Add NULL pointer check in i3c_master_queue_ibi() | 5.5 | 0.0021 |  |
| [CVE-2025-23148](https://patchblox.com/security/data/cve/CVE-2025-23148.md) | Routine | soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-37766](https://patchblox.com/security/data/cve/CVE-2025-37766.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-37801](https://patchblox.com/security/data/cve/CVE-2025-37801.md) | Routine | spi: spi-imx: Add check for spi_imx_setupxfer() | 5.5 | 0.0021 |  |
| [CVE-2025-38009](https://patchblox.com/security/data/cve/CVE-2025-38009.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38031](https://patchblox.com/security/data/cve/CVE-2025-38031.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-37884](https://patchblox.com/security/data/cve/CVE-2025-37884.md) | Routine | bpf: Fix deadlock between rcu_tasks_trace and event_mutex. | 5.5 | 0.0021 |  |
| [CVE-2025-37945](https://patchblox.com/security/data/cve/CVE-2025-37945.md) | Routine | net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY | 5.5 | 0.0021 |  |
| [CVE-2025-38135](https://patchblox.com/security/data/cve/CVE-2025-38135.md) | Routine | serial: Fix potential null-ptr-deref in mlb_usio_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 |  |
| [CVE-2025-38145](https://patchblox.com/security/data/cve/CVE-2025-38145.md) | Routine | soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() | 5.5 | 0.0021 |  |
| [CVE-2024-43869](https://patchblox.com/security/data/cve/CVE-2024-43869.md) | Routine | kernel-64k: kernel: perf: Fix event leak upon exec and file release | 6.1 | 0.0021 |  |
| [CVE-2025-37754](https://patchblox.com/security/data/cve/CVE-2025-37754.md) | Routine | drm/i915/huc: Fix fence not released on early probe errors | 5.5 | 0.0021 |  |
| [CVE-2025-22111](https://patchblox.com/security/data/cve/CVE-2025-22111.md) | Routine | kernel-64kb: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572). | 5.5 | 0.0021 |  |
| [CVE-2025-38138](https://patchblox.com/security/data/cve/CVE-2025-38138.md) | Routine | dmaengine: ti: Add NULL check in udma_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-21872](https://patchblox.com/security/data/cve/CVE-2025-21872.md) | Routine | efi: Don't map the entire mokvar table to determine its size | 5.5 | 0.0021 |  |
| [CVE-2025-23155](https://patchblox.com/security/data/cve/CVE-2025-23155.md) | Routine | net: stmmac: Fix accessing freed irq affinity_hint | 5.5 | 0.0021 |  |
| [CVE-2025-37768](https://patchblox.com/security/data/cve/CVE-2025-37768.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-37770](https://patchblox.com/security/data/cve/CVE-2025-37770.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0021 |  |
| [CVE-2025-38143](https://patchblox.com/security/data/cve/CVE-2025-38143.md) | Routine | backlight: pm8941: Add NULL check in wled_configure() | 5.5 | 0.0021 |  |
| [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 |  |
| [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 |  |
| [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 |  |
| [CVE-2025-37933](https://patchblox.com/security/data/cve/CVE-2025-37933.md) | Routine | octeon_ep: Fix host hang issue during device reboot | 5.6 | 0.0021 |  |
| [CVE-2025-37781](https://patchblox.com/security/data/cve/CVE-2025-37781.md) | Routine | i2c: cros-ec-tunnel: defer probe if parent EC is not present | 5.5 | 0.0021 |  |
| [CVE-2025-37800](https://patchblox.com/security/data/cve/CVE-2025-37800.md) | Routine | driver core: fix potential NULL pointer dereference in dev_uevent() | 5.5 | 0.0021 |  |
| [CVE-2025-38275](https://patchblox.com/security/data/cve/CVE-2025-38275.md) | Routine | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 5.5 | 0.0021 |  |
| [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0021 |  |
| [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 |  |
| [CVE-2025-38097](https://patchblox.com/security/data/cve/CVE-2025-38097.md) | Routine | espintcp: remove encap socket caching to avoid reference leak | 5.5 | 0.0021 |  |
| [CVE-2025-37767](https://patchblox.com/security/data/cve/CVE-2025-37767.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 |  |
| [CVE-2025-37771](https://patchblox.com/security/data/cve/CVE-2025-37771.md) | Routine | drm/amd/pm: Prevent division by zero | 5.5 | 0.0020 |  |
| [CVE-2025-37805](https://patchblox.com/security/data/cve/CVE-2025-37805.md) | Routine | sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | 5.5 | 0.0020 |  |
| [CVE-2025-38166](https://patchblox.com/security/data/cve/CVE-2025-38166.md) | Routine | bpf: fix ktls panic with sockmap | 5.5 | 0.0020 |  |
| [CVE-2025-23149](https://patchblox.com/security/data/cve/CVE-2025-23149.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0020 |  |
| [CVE-2024-56613](https://patchblox.com/security/data/cve/CVE-2024-56613.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-21658](https://patchblox.com/security/data/cve/CVE-2025-21658.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-22124](https://patchblox.com/security/data/cve/CVE-2025-22124.md) | Routine | md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb | 6.0 | 0.0020 |  |
| [CVE-2025-37769](https://patchblox.com/security/data/cve/CVE-2025-37769.md) | Routine | drm/amd/pm/smu11: Prevent division by zero | 5.5 | 0.0020 |  |
| [CVE-2025-37772](https://patchblox.com/security/data/cve/CVE-2025-37772.md) | Routine | RDMA/cma: Fix workqueue crash in cma_netevent_work_handler | 5.5 | 0.0020 |  |
| [CVE-2025-37788](https://patchblox.com/security/data/cve/CVE-2025-37788.md) | Routine | cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path | 5.5 | 0.0020 |  |
| [CVE-2025-38011](https://patchblox.com/security/data/cve/CVE-2025-38011.md) | Routine | drm/amdgpu: csa unmap use uninterruptible lock | 5.5 | 0.0020 |  |
| [CVE-2025-38127](https://patchblox.com/security/data/cve/CVE-2025-38127.md) | Routine | ice: fix Tx scheduler error handling in XDP callback | 5.5 | 0.0020 |  |
| [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 |  |
| [CVE-2025-38382](https://patchblox.com/security/data/cve/CVE-2025-38382.md) | Routine | btrfs: fix iteration of extrefs during log replay | 5.5 | 0.0020 |  |
| [CVE-2025-38098](https://patchblox.com/security/data/cve/CVE-2025-38098.md) | Routine | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 5.5 | 0.0020 |  |
| [CVE-2025-38173](https://patchblox.com/security/data/cve/CVE-2025-38173.md) | Routine | crypto: marvell/cesa - Handle zero-length skcipher requests | 5.5 | 0.0020 |  |
| [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 |  |
| [CVE-2025-37740](https://patchblox.com/security/data/cve/CVE-2025-37740.md) | Routine | jfs: add sanity check for agwidth in dbMount | 5.5 | 0.0020 |  |
| [CVE-2025-37758](https://patchblox.com/security/data/cve/CVE-2025-37758.md) | Routine | ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | 5.5 | 0.0020 |  |
| [CVE-2025-37792](https://patchblox.com/security/data/cve/CVE-2025-37792.md) | Routine | Bluetooth: btrtl: Prevent potential NULL dereference | 5.5 | 0.0020 |  |
| [CVE-2025-37794](https://patchblox.com/security/data/cve/CVE-2025-37794.md) | Routine | wifi: mac80211: Purge vif txq in ieee80211_do_stop() | 5.5 | 0.0020 |  |
| [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 |  |
| [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 |  |
| [CVE-2024-58100](https://patchblox.com/security/data/cve/CVE-2024-58100.md) | Routine | bpf: check changes_pkt_data property for extension programs | 6.0 | 0.0020 |  |
| [CVE-2025-38007](https://patchblox.com/security/data/cve/CVE-2025-38007.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 |  |
| [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 |  |
| [CVE-2024-58098](https://patchblox.com/security/data/cve/CVE-2024-58098.md) | Routine | bpf: track changes_pkt_data property for global functions | 6.0 | 0.0020 |  |
| [CVE-2024-58237](https://patchblox.com/security/data/cve/CVE-2024-58237.md) | Routine | bpf: consider that tail calls invalidate packet pointers | 6.0 | 0.0020 |  |
| [CVE-2025-38142](https://patchblox.com/security/data/cve/CVE-2025-38142.md) | Routine | hwmon: (asus-ec-sensors) check sensor index in read_string() | 5.5 | 0.0020 |  |
| [CVE-2025-38203](https://patchblox.com/security/data/cve/CVE-2025-38203.md) | Routine | jfs: Fix null-ptr-deref in jfs_ioc_trim | 5.5 | 0.0020 |  |
| [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 |  |
| [CVE-2025-22119](https://patchblox.com/security/data/cve/CVE-2025-22119.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37980](https://patchblox.com/security/data/cve/CVE-2025-37980.md) | Routine | block: fix resource leak in blk_register_queue() error path | 5.5 | 0.0019 |  |
| [CVE-2025-37983](https://patchblox.com/security/data/cve/CVE-2025-37983.md) | Routine | qibfs: fix _another_ leak | 5.5 | 0.0019 |  |
| [CVE-2025-38010](https://patchblox.com/security/data/cve/CVE-2025-38010.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38059](https://patchblox.com/security/data/cve/CVE-2025-38059.md) | Routine | btrfs: avoid NULL pointer dereference if no valid csum tree | 5.5 | 0.0019 |  |
| [CVE-2025-22120](https://patchblox.com/security/data/cve/CVE-2025-22120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-36349](https://patchblox.com/security/data/cve/CVE-2024-36349.md) | Routine | kernel-docs: CVE-2024-36348, , CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896). | n/a | 0.0019 |  |
| [CVE-2025-38384](https://patchblox.com/security/data/cve/CVE-2025-38384.md) | Routine | mtd: spinand: fix memory leak of ECC engine conf | 5.5 | 0.0019 |  |
| [CVE-2025-37961](https://patchblox.com/security/data/cve/CVE-2025-37961.md) | Routine | ipvs: fix uninit-value for saddr in do_output_route4 | 6.5 | 0.0019 |  |
| [CVE-2023-53146](https://patchblox.com/security/data/cve/CVE-2023-53146.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37742](https://patchblox.com/security/data/cve/CVE-2025-37742.md) | Routine | jfs: Fix uninit-value access of imap allocated in the diMount() function | 5.5 | 0.0019 |  |
| [CVE-2025-37811](https://patchblox.com/security/data/cve/CVE-2025-37811.md) | Routine | kernel-64kb: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907). | 5.5 | 0.0019 |  |
| [CVE-2025-38426](https://patchblox.com/security/data/cve/CVE-2025-38426.md) | Routine | drm/amdgpu: Add basic validation for RAS header | 5.5 | 0.0019 |  |
| [CVE-2025-38455](https://patchblox.com/security/data/cve/CVE-2025-38455.md) | Routine | kernel-64kb: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (bsc#1247101). | 5.5 | 0.0019 |  |
| [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 |  |
| [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 |  |
| [CVE-2025-37984](https://patchblox.com/security/data/cve/CVE-2025-37984.md) | Routine | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | 6.5 | 0.0019 |  |
| [CVE-2025-37815](https://patchblox.com/security/data/cve/CVE-2025-37815.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37978](https://patchblox.com/security/data/cve/CVE-2025-37978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38354](https://patchblox.com/security/data/cve/CVE-2025-38354.md) | Routine | drm/msm/gpu: Fix crash when throttling GPU immediately during boot | 5.5 | 0.0019 |  |
| [CVE-2025-38364](https://patchblox.com/security/data/cve/CVE-2025-38364.md) | Routine | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 5.5 | 0.0019 |  |
| [CVE-2025-37793](https://patchblox.com/security/data/cve/CVE-2025-37793.md) | Routine | ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() | 5.5 | 0.0019 |  |
| [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 |  |
| [CVE-2025-37986](https://patchblox.com/security/data/cve/CVE-2025-37986.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38104](https://patchblox.com/security/data/cve/CVE-2025-38104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38202](https://patchblox.com/security/data/cve/CVE-2025-38202.md) | Routine | bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() | 5.5 | 0.0018 |  |
| [CVE-2025-38148](https://patchblox.com/security/data/cve/CVE-2025-38148.md) | Routine | net: phy: mscc: Fix memory leak when using one step timestamping | 5.5 | 0.0018 |  |
| [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38487](https://patchblox.com/security/data/cve/CVE-2025-38487.md) | Routine | soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled | 5.5 | 0.0018 |  |
| [CVE-2024-36028](https://patchblox.com/security/data/cve/CVE-2024-36028.md) | Routine | kernel-64kb: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707). | 4.7 | 0.0018 |  |
| [CVE-2025-38188](https://patchblox.com/security/data/cve/CVE-2025-38188.md) | Routine | kernel-64kb: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098). | 5.5 | 0.0018 |  |
| [CVE-2025-38300](https://patchblox.com/security/data/cve/CVE-2025-38300.md) | Routine | crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() | 5.5 | 0.0018 |  |
| [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 |  |
| [CVE-2025-38376](https://patchblox.com/security/data/cve/CVE-2025-38376.md) | Routine | usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume | 5.5 | 0.0018 |  |
| [CVE-2025-38094](https://patchblox.com/security/data/cve/CVE-2025-38094.md) | Routine | kernel-64kb: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649). | 5.5 | 0.0018 |  |
| [CVE-2025-38307](https://patchblox.com/security/data/cve/CVE-2025-38307.md) | Routine | ASoC: Intel: avs: Verify content returned by parse_int_array() | 5.5 | 0.0018 |  |
| [CVE-2025-38334](https://patchblox.com/security/data/cve/CVE-2025-38334.md) | Routine | x86/sgx: Prevent attempts to reclaim poisoned pages | 5.5 | 0.0018 |  |
| [CVE-2025-38155](https://patchblox.com/security/data/cve/CVE-2025-38155.md) | Routine | wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() | 5.5 | 0.0017 |  |
| [CVE-2025-38225](https://patchblox.com/security/data/cve/CVE-2025-38225.md) | Routine | media: imx-jpeg: Cleanup after an allocation error | 5.5 | 0.0017 |  |
| [CVE-2025-38489](https://patchblox.com/security/data/cve/CVE-2025-38489.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-37741](https://patchblox.com/security/data/cve/CVE-2025-37741.md) | Routine | jfs: Prevent copying of nlink with value 0 from disk inode | 5.5 | 0.0016 |  |
| [CVE-2025-38436](https://patchblox.com/security/data/cve/CVE-2025-38436.md) | Routine | drm/scheduler: signal scheduled fence when kill job | 5.5 | 0.0016 |  |
| [CVE-2025-37812](https://patchblox.com/security/data/cve/CVE-2025-37812.md) | Routine | usb: cdns3: Fix deadlock when using NCM gadget | 5.5 | 0.0016 |  |
| [CVE-2025-37920](https://patchblox.com/security/data/cve/CVE-2025-37920.md) | Routine | xsk: Fix race condition in AF_XDP generic RX path | 5.5 | 0.0016 |  |
| [CVE-2025-37967](https://patchblox.com/security/data/cve/CVE-2025-37967.md) | Routine | usb: typec: ucsi: displayport: Fix deadlock | 5.5 | 0.0016 |  |
| [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 |  |
| [CVE-2025-23163](https://patchblox.com/security/data/cve/CVE-2025-23163.md) | Routine | net: vlan: don't propagate flags on open | 5.5 | 0.0016 |  |
| [CVE-2025-23151](https://patchblox.com/security/data/cve/CVE-2025-23151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0016 |  |
| [CVE-2025-23161](https://patchblox.com/security/data/cve/CVE-2025-23161.md) | Routine | PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | 5.5 | 0.0015 |  |
| [CVE-2025-38448](https://patchblox.com/security/data/cve/CVE-2025-38448.md) | Routine | usb: gadget: u_serial: Fix race condition in TTY wakeup | 6.2 | 0.0014 |  |
| [CVE-2025-37985](https://patchblox.com/security/data/cve/CVE-2025-37985.md) | Routine | USB: wdm: close race between wdm_open and wdm_wwan_port_stop | 4.7 | 0.0014 |  |
| [CVE-2025-38335](https://patchblox.com/security/data/cve/CVE-2025-38335.md) | Routine | Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT | 5.5 | 0.0014 |  |
| [CVE-2025-38362](https://patchblox.com/security/data/cve/CVE-2025-38362.md) | Routine | drm/amd/display: Add null pointer check for get_first_active_display() | 5.5 | 0.0013 |  |
| [CVE-2025-38217](https://patchblox.com/security/data/cve/CVE-2025-38217.md) | Routine | hwmon: (ftsteutates) Fix TOCTOU race in fts_read() | 5.5 | 0.0013 |  |
| [CVE-2025-38158](https://patchblox.com/security/data/cve/CVE-2025-38158.md) | Routine | hisi_acc_vfio_pci: fix XQE dma address error | 5.7 | 0.0011 |  |
| [CVE-2025-38213](https://patchblox.com/security/data/cve/CVE-2025-38213.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2025-37782](https://patchblox.com/security/data/cve/CVE-2025-37782.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.