# SUSE-SU-2025:03023-1: Security update for 5 packages

SUSE-SU-2025:03023-1, released August 29, 2025, fixes 235 CVEs across 5 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-03023-1
- Platform: Linux
- Released: Aug 29, 2025
- Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV))
- CVEs: 235, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:03023-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP6-RT_Update_14](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-rt-update-14.md) | sles 15.6 | 1-150600.1.5.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.49.1 |
| [kernel-rt_debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kernel-rt-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.10.49.1 |
| [kernel-source-rt](https://patchblox.com/security/data/product/linux/kernel-source-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.49.1 |
| [kernel-syms-rt](https://patchblox.com/security/data/product/linux/kernel-syms-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.49.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV |
| [CVE-2024-36350](https://patchblox.com/security/data/cve/CVE-2024-36350.md) | Urgent | AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue | 7.8 | 0.0049 |  |
| [CVE-2024-36357](https://patchblox.com/security/data/cve/CVE-2024-36357.md) | Urgent | AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue | 7.8 | 0.0036 |  |
| [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 |  |
| [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 |  |
| [CVE-2025-38035](https://patchblox.com/security/data/cve/CVE-2025-38035.md) | High | nvmet-tcp: don't restore null sk_state_change | 7.5 | 0.0057 |  |
| [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 |  |
| [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 |  |
| [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 |  |
| [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0047 |  |
| [CVE-2025-38471](https://patchblox.com/security/data/cve/CVE-2025-38471.md) | High | tls: always refresh the queue when reading sock | 7.8 | 0.0047 |  |
| [CVE-2025-38429](https://patchblox.com/security/data/cve/CVE-2025-38429.md) | High | bus: mhi: ep: Update read pointer only after buffer is written | 7.1 | 0.0047 |  |
| [CVE-2025-38264](https://patchblox.com/security/data/cve/CVE-2025-38264.md) | High | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 |  |
| [CVE-2024-57947](https://patchblox.com/security/data/cve/CVE-2024-57947.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0044 |  |
| [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 |  |
| [CVE-2025-38476](https://patchblox.com/security/data/cve/CVE-2025-38476.md) | High | rpl: Fix use-after-free in rpl_do_srh_inline(). | 7.8 | 0.0040 |  |
| [CVE-2025-38495](https://patchblox.com/security/data/cve/CVE-2025-38495.md) | High | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 |  |
| [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 |  |
| [CVE-2025-37885](https://patchblox.com/security/data/cve/CVE-2025-37885.md) | High | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 |  |
| [CVE-2025-38292](https://patchblox.com/security/data/cve/CVE-2025-38292.md) | High | wifi: ath12k: fix invalid access to memory | 7.3 | 0.0031 |  |
| [CVE-2025-38248](https://patchblox.com/security/data/cve/CVE-2025-38248.md) | High | bridge: mcast: Fix use-after-free during router port configuration | 7.8 | 0.0030 |  |
| [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 |  |
| [CVE-2025-38236](https://patchblox.com/security/data/cve/CVE-2025-38236.md) | High | af_unix: Don't leave consecutive consumed OOB skbs. | 7.8 | 0.0030 |  |
| [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 |  |
| [CVE-2025-38494](https://patchblox.com/security/data/cve/CVE-2025-38494.md) | High | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 |  |
| [CVE-2025-38244](https://patchblox.com/security/data/cve/CVE-2025-38244.md) | High | smb: client: fix potential deadlock when reconnecting channels | 7.0 | 0.0025 |  |
| [CVE-2025-38416](https://patchblox.com/security/data/cve/CVE-2025-38416.md) | High | NFC: nci: uart: Set tty->disc_data only in success path | 7.8 | 0.0025 |  |
| [CVE-2025-38204](https://patchblox.com/security/data/cve/CVE-2025-38204.md) | High | jfs: fix array-index-out-of-bounds read in add_missing_indices | 7.1 | 0.0024 |  |
| [CVE-2025-38290](https://patchblox.com/security/data/cve/CVE-2025-38290.md) | High | wifi: ath12k: fix node corruption in ar->arvifs list | 7.8 | 0.0024 |  |
| [CVE-2025-38279](https://patchblox.com/security/data/cve/CVE-2025-38279.md) | High | bpf: Do not include stack ptr register in precision backtracking bookkeeping | 7.8 | 0.0024 |  |
| [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 |  |
| [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 |  |
| [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel-64kb: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061). | 7.8 | 0.0023 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 |  |
| [CVE-2025-38194](https://patchblox.com/security/data/cve/CVE-2025-38194.md) | High | jffs2: check that raw node were preallocated before writing summary | 7.0 | 0.0023 |  |
| [CVE-2025-38414](https://patchblox.com/security/data/cve/CVE-2025-38414.md) | High | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 7.0 | 0.0023 |  |
| [CVE-2025-38100](https://patchblox.com/security/data/cve/CVE-2025-38100.md) | High | x86/iopl: Cure TIF_IO_BITMAP inconsistencies | 7.0 | 0.0022 |  |
| [CVE-2025-38051](https://patchblox.com/security/data/cve/CVE-2025-38051.md) | High | smb: client: Fix use-after-free in cifs_fill_dirent | 7.1 | 0.0022 |  |
| [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 |  |
| [CVE-2025-38187](https://patchblox.com/security/data/cve/CVE-2025-38187.md) | High | kernel-64kb: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951). | 7.8 | 0.0022 |  |
| [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 |  |
| [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 |  |
| [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 |  |
| [CVE-2025-38328](https://patchblox.com/security/data/cve/CVE-2025-38328.md) | High | jffs2: check jffs2_prealloc_raw_node_refs() result in few other places | 7.1 | 0.0022 |  |
| [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 |  |
| [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 |  |
| [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0022 |  |
| [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 |  |
| [CVE-2025-38428](https://patchblox.com/security/data/cve/CVE-2025-38428.md) | High | Input: ims-pcu - check record size in ims_pcu_flash_firmware() | 7.8 | 0.0022 |  |
| [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 |  |
| [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 |  |
| [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 |  |
| [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 |  |
| [CVE-2025-38286](https://patchblox.com/security/data/cve/CVE-2025-38286.md) | High | pinctrl: at91: Fix possible out-of-boundary access | 7.1 | 0.0021 |  |
| [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 |  |
| [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 |  |
| [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 |  |
| [CVE-2025-38192](https://patchblox.com/security/data/cve/CVE-2025-38192.md) | High | net: clear the dst when changing skb protocol | 7.0 | 0.0021 |  |
| [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 |  |
| [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 |  |
| [CVE-2025-38131](https://patchblox.com/security/data/cve/CVE-2025-38131.md) | High | coresight: prevent deactivate active config while enabling the config | 7.8 | 0.0020 |  |
| [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 |  |
| [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 |  |
| [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 |  |
| [CVE-2025-38153](https://patchblox.com/security/data/cve/CVE-2025-38153.md) | High | net: usb: aqc111: fix error handling of usbnet read calls | 7.1 | 0.0020 |  |
| [CVE-2025-38074](https://patchblox.com/security/data/cve/CVE-2025-38074.md) | High | vhost-scsi: protect vq->log_used with vq->mutex | 7.0 | 0.0020 |  |
| [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 |  |
| [CVE-2025-38425](https://patchblox.com/security/data/cve/CVE-2025-38425.md) | High | i2c: tegra: check msg length in SMBUS block read | 7.8 | 0.0020 |  |
| [CVE-2025-38385](https://patchblox.com/security/data/cve/CVE-2025-38385.md) | High | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 |  |
| [CVE-2025-38449](https://patchblox.com/security/data/cve/CVE-2025-38449.md) | High | drm/gem: Acquire references on GEM handles for framebuffers | 7.8 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38118](https://patchblox.com/security/data/cve/CVE-2025-38118.md) | High | Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete | 7.8 | 0.0020 |  |
| [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 |  |
| [CVE-2025-38283](https://patchblox.com/security/data/cve/CVE-2025-38283.md) | High | hisi_acc_vfio_pci: bugfix live migration function without VF device driver | 7.1 | 0.0020 |  |
| [CVE-2025-38126](https://patchblox.com/security/data/cve/CVE-2025-38126.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping | 7.0 | 0.0020 |  |
| [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0020 |  |
| [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 |  |
| [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 |  |
| [CVE-2025-38105](https://patchblox.com/security/data/cve/CVE-2025-38105.md) | High | ALSA: usb-audio: Kill timer properly at removal | 7.0 | 0.0020 |  |
| [CVE-2025-38090](https://patchblox.com/security/data/cve/CVE-2025-38090.md) | High | drivers/rapidio/rio_cm.c: prevent possible heap overwrite | 7.8 | 0.0020 |  |
| [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0020 |  |
| [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 |  |
| [CVE-2025-38088](https://patchblox.com/security/data/cve/CVE-2025-38088.md) | High | powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap | 7.1 | 0.0020 |  |
| [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 |  |
| [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 |  |
| [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 |  |
| [CVE-2025-38062](https://patchblox.com/security/data/cve/CVE-2025-38062.md) | High | genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie | 7.8 | 0.0020 |  |
| [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 |  |
| [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 |  |
| [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 |  |
| [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 |  |
| [CVE-2025-38206](https://patchblox.com/security/data/cve/CVE-2025-38206.md) | High | exfat: fix double free in delayed_free | 7.8 | 0.0019 |  |
| [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 |  |
| [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 |  |
| [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 |  |
| [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 |  |
| [CVE-2025-38182](https://patchblox.com/security/data/cve/CVE-2025-38182.md) | High | ublk: santizize the arguments from userspace when adding a device | 7.8 | 0.0019 |  |
| [CVE-2025-38183](https://patchblox.com/security/data/cve/CVE-2025-38183.md) | High | net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() | 7.8 | 0.0019 |  |
| [CVE-2025-38099](https://patchblox.com/security/data/cve/CVE-2025-38099.md) | High | Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken | 7.0 | 0.0019 |  |
| [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38277](https://patchblox.com/security/data/cve/CVE-2025-38277.md) | High | mtd: nand: ecc-mxic: Fix use of uninitialized variable ret | 7.1 | 0.0019 |  |
| [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 |  |
| [CVE-2025-38289](https://patchblox.com/security/data/cve/CVE-2025-38289.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38313](https://patchblox.com/security/data/cve/CVE-2025-38313.md) | High | bus: fsl-mc: fix double-free on mc_dev | 7.8 | 0.0019 |  |
| [CVE-2025-38392](https://patchblox.com/security/data/cve/CVE-2025-38392.md) | High | kernel-64kb: idpf: convert control queue mutex to a spinlock (bsc#1247169). | 7.3 | 0.0019 |  |
| [CVE-2025-38409](https://patchblox.com/security/data/cve/CVE-2025-38409.md) | High | drm/msm: Fix another leak in the submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 |  |
| [CVE-2025-38463](https://patchblox.com/security/data/cve/CVE-2025-38463.md) | High | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 |  |
| [CVE-2025-38162](https://patchblox.com/security/data/cve/CVE-2025-38162.md) | High | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 7.0 | 0.0019 |  |
| [CVE-2025-38117](https://patchblox.com/security/data/cve/CVE-2025-38117.md) | High | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 7.8 | 0.0019 |  |
| [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 |  |
| [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 |  |
| [CVE-2025-38058](https://patchblox.com/security/data/cve/CVE-2025-38058.md) | High | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0019 |  |
| [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 |  |
| [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 |  |
| [CVE-2025-38227](https://patchblox.com/security/data/cve/CVE-2025-38227.md) | High | media: vidtv: Terminating the subsequent process of initialization failure | 7.8 | 0.0019 |  |
| [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 |  |
| [CVE-2025-38349](https://patchblox.com/security/data/cve/CVE-2025-38349.md) | High | eventpoll: don't decrement ep refcount while still holding the ep mutex | 8.4 | 0.0018 |  |
| [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 |  |
| [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 |  |
| [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 |  |
| [CVE-2025-38063](https://patchblox.com/security/data/cve/CVE-2025-38063.md) | High | dm: fix unconditional IO throttle caused by REQ_PREFLUSH | 7.0 | 0.0018 |  |
| [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 |  |
| [CVE-2025-38210](https://patchblox.com/security/data/cve/CVE-2025-38210.md) | High | kernel-64kb: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020). | 7.0 | 0.0018 |  |
| [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 |  |
| [CVE-2025-38087](https://patchblox.com/security/data/cve/CVE-2025-38087.md) | High | net/sched: fix use-after-free in taprio_dev_notifier | 7.8 | 0.0018 |  |
| [CVE-2025-38257](https://patchblox.com/security/data/cve/CVE-2025-38257.md) | High | s390/pkey: Prevent overflow in size calculation for memdup_user() | 7.8 | 0.0018 |  |
| [CVE-2025-38239](https://patchblox.com/security/data/cve/CVE-2025-38239.md) | High | scsi: megaraid_sas: Fix invalid node index | 7.8 | 0.0018 |  |
| [CVE-2025-38304](https://patchblox.com/security/data/cve/CVE-2025-38304.md) | High | Bluetooth: Fix NULL pointer deference on eir_get_service_data | 7.0 | 0.0018 |  |
| [CVE-2025-38259](https://patchblox.com/security/data/cve/CVE-2025-38259.md) | High | ASoC: codecs: wcd9335: Fix missing free of regulator supplies | 7.8 | 0.0018 |  |
| [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 |  |
| [CVE-2025-38485](https://patchblox.com/security/data/cve/CVE-2025-38485.md) | High | iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush | 7.8 | 0.0017 |  |
| [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 |  |
| [CVE-2025-38310](https://patchblox.com/security/data/cve/CVE-2025-38310.md) | High | seg6: Fix validation of nexthop addresses | 7.1 | 0.0017 |  |
| [CVE-2025-38496](https://patchblox.com/security/data/cve/CVE-2025-38496.md) | High | dm-bufio: fix sched in atomic context | 7.0 | 0.0017 |  |
| [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 |  |
| [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 |  |
| [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 |  |
| [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 |  |
| [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0015 |  |
| [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 |  |
| [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 |  |
| [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 |  |
| [CVE-2025-38373](https://patchblox.com/security/data/cve/CVE-2025-38373.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0013 |  |
| [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a |  |
| [CVE-2019-11135](https://patchblox.com/security/data/cve/CVE-2019-11135.md) | Routine | Windows Kernel Information Disclosure Vulnerability | 6.5 | 0.0313 |  |
| [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0052 |  |
| [CVE-2025-38123](https://patchblox.com/security/data/cve/CVE-2025-38123.md) | Routine | net: wwan: t7xx: Fix napi rx poll issue | 5.5 | 0.0047 |  |
| [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 |  |
| [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 |  |
| [CVE-2025-38365](https://patchblox.com/security/data/cve/CVE-2025-38365.md) | Routine | btrfs: fix a race between renames and directory logging | 5.5 | 0.0036 |  |
| [CVE-2025-38246](https://patchblox.com/security/data/cve/CVE-2025-38246.md) | Routine | bnxt: properly flush XDP redirect lists | 5.5 | 0.0034 |  |
| [CVE-2024-36348](https://patchblox.com/security/data/cve/CVE-2024-36348.md) | Routine | kernel-64kb: CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896). | n/a | 0.0034 |  |
| [CVE-2025-37856](https://patchblox.com/security/data/cve/CVE-2025-37856.md) | Routine | btrfs: harden block_group::bg_list against list_del() races | 5.5 | 0.0031 |  |
| [CVE-2025-37864](https://patchblox.com/security/data/cve/CVE-2025-37864.md) | Routine | net: dsa: clean up FDB, MDB, VLAN entries on unbind | 5.5 | 0.0030 |  |
| [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0025 |  |
| [CVE-2025-38064](https://patchblox.com/security/data/cve/CVE-2025-38064.md) | Routine | virtio: break and reset virtio devices on device_shutdown() | 6.7 | 0.0025 |  |
| [CVE-2025-38343](https://patchblox.com/security/data/cve/CVE-2025-38343.md) | Routine | wifi: mt76: mt7996: drop fragments with multicast or broadcast RA | 5.5 | 0.0025 |  |
| [CVE-2024-56742](https://patchblox.com/security/data/cve/CVE-2024-56742.md) | Routine | vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() | 6.1 | 0.0025 |  |
| [CVE-2024-44963](https://patchblox.com/security/data/cve/CVE-2024-44963.md) | Routine | kernel-64kb: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216). | 5.5 | 0.0024 |  |
| [CVE-2025-38303](https://patchblox.com/security/data/cve/CVE-2025-38303.md) | Routine | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | 5.5 | 0.0024 |  |
| [CVE-2025-38132](https://patchblox.com/security/data/cve/CVE-2025-38132.md) | Routine | coresight: holding cscfg_csdev_lock while removing cscfg from csdev | 5.5 | 0.0023 |  |
| [CVE-2025-38272](https://patchblox.com/security/data/cve/CVE-2025-38272.md) | Routine | net: dsa: b53: do not enable EEE on bcm63xx | 5.5 | 0.0023 |  |
| [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-38061](https://patchblox.com/security/data/cve/CVE-2025-38061.md) | Routine | net: pktgen: fix access outside of user given buffer in pktgen_thread_write() | 6.7 | 0.0022 |  |
| [CVE-2025-38034](https://patchblox.com/security/data/cve/CVE-2025-38034.md) | Routine | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 5.5 | 0.0022 |  |
| [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 |  |
| [CVE-2025-38135](https://patchblox.com/security/data/cve/CVE-2025-38135.md) | Routine | serial: Fix potential null-ptr-deref in mlb_usio_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 |  |
| [CVE-2025-38145](https://patchblox.com/security/data/cve/CVE-2025-38145.md) | Routine | soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() | 5.5 | 0.0021 |  |
| [CVE-2025-38138](https://patchblox.com/security/data/cve/CVE-2025-38138.md) | Routine | dmaengine: ti: Add NULL check in udma_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-21872](https://patchblox.com/security/data/cve/CVE-2025-21872.md) | Routine | efi: Don't map the entire mokvar table to determine its size | 5.5 | 0.0021 |  |
| [CVE-2025-38143](https://patchblox.com/security/data/cve/CVE-2025-38143.md) | Routine | backlight: pm8941: Add NULL check in wled_configure() | 5.5 | 0.0021 |  |
| [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 |  |
| [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 |  |
| [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 |  |
| [CVE-2025-38275](https://patchblox.com/security/data/cve/CVE-2025-38275.md) | Routine | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 5.5 | 0.0021 |  |
| [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0021 |  |
| [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 |  |
| [CVE-2025-38097](https://patchblox.com/security/data/cve/CVE-2025-38097.md) | Routine | espintcp: remove encap socket caching to avoid reference leak | 5.5 | 0.0021 |  |
| [CVE-2025-38166](https://patchblox.com/security/data/cve/CVE-2025-38166.md) | Routine | bpf: fix ktls panic with sockmap | 5.5 | 0.0020 |  |
| [CVE-2025-38127](https://patchblox.com/security/data/cve/CVE-2025-38127.md) | Routine | ice: fix Tx scheduler error handling in XDP callback | 5.5 | 0.0020 |  |
| [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 |  |
| [CVE-2025-38382](https://patchblox.com/security/data/cve/CVE-2025-38382.md) | Routine | btrfs: fix iteration of extrefs during log replay | 5.5 | 0.0020 |  |
| [CVE-2025-38098](https://patchblox.com/security/data/cve/CVE-2025-38098.md) | Routine | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 5.5 | 0.0020 |  |
| [CVE-2025-38173](https://patchblox.com/security/data/cve/CVE-2025-38173.md) | Routine | crypto: marvell/cesa - Handle zero-length skcipher requests | 5.5 | 0.0020 |  |
| [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 |  |
| [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 |  |
| [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 |  |
| [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 |  |
| [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 |  |
| [CVE-2025-38142](https://patchblox.com/security/data/cve/CVE-2025-38142.md) | Routine | hwmon: (asus-ec-sensors) check sensor index in read_string() | 5.5 | 0.0020 |  |
| [CVE-2025-38203](https://patchblox.com/security/data/cve/CVE-2025-38203.md) | Routine | jfs: Fix null-ptr-deref in jfs_ioc_trim | 5.5 | 0.0020 |  |
| [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 |  |
| [CVE-2024-36349](https://patchblox.com/security/data/cve/CVE-2024-36349.md) | Routine | kernel-docs: CVE-2024-36348, , CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896). | n/a | 0.0019 |  |
| [CVE-2025-38384](https://patchblox.com/security/data/cve/CVE-2025-38384.md) | Routine | mtd: spinand: fix memory leak of ECC engine conf | 5.5 | 0.0019 |  |
| [CVE-2025-38426](https://patchblox.com/security/data/cve/CVE-2025-38426.md) | Routine | drm/amdgpu: Add basic validation for RAS header | 5.5 | 0.0019 |  |
| [CVE-2025-38455](https://patchblox.com/security/data/cve/CVE-2025-38455.md) | Routine | kernel-64kb: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (bsc#1247101). | 5.5 | 0.0019 |  |
| [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 |  |
| [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 |  |
| [CVE-2025-37984](https://patchblox.com/security/data/cve/CVE-2025-37984.md) | Routine | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | 6.5 | 0.0019 |  |
| [CVE-2025-38354](https://patchblox.com/security/data/cve/CVE-2025-38354.md) | Routine | drm/msm/gpu: Fix crash when throttling GPU immediately during boot | 5.5 | 0.0019 |  |
| [CVE-2025-38364](https://patchblox.com/security/data/cve/CVE-2025-38364.md) | Routine | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 5.5 | 0.0019 |  |
| [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 |  |
| [CVE-2025-38202](https://patchblox.com/security/data/cve/CVE-2025-38202.md) | Routine | bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() | 5.5 | 0.0018 |  |
| [CVE-2025-38148](https://patchblox.com/security/data/cve/CVE-2025-38148.md) | Routine | net: phy: mscc: Fix memory leak when using one step timestamping | 5.5 | 0.0018 |  |
| [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38487](https://patchblox.com/security/data/cve/CVE-2025-38487.md) | Routine | soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled | 5.5 | 0.0018 |  |
| [CVE-2024-36028](https://patchblox.com/security/data/cve/CVE-2024-36028.md) | Routine | kernel-64kb: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707). | 4.7 | 0.0018 |  |
| [CVE-2025-38188](https://patchblox.com/security/data/cve/CVE-2025-38188.md) | Routine | kernel-64kb: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098). | 5.5 | 0.0018 |  |
| [CVE-2025-38300](https://patchblox.com/security/data/cve/CVE-2025-38300.md) | Routine | crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() | 5.5 | 0.0018 |  |
| [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 |  |
| [CVE-2025-38376](https://patchblox.com/security/data/cve/CVE-2025-38376.md) | Routine | usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume | 5.5 | 0.0018 |  |
| [CVE-2025-38094](https://patchblox.com/security/data/cve/CVE-2025-38094.md) | Routine | kernel-64kb: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649). | 5.5 | 0.0018 |  |
| [CVE-2025-38307](https://patchblox.com/security/data/cve/CVE-2025-38307.md) | Routine | ASoC: Intel: avs: Verify content returned by parse_int_array() | 5.5 | 0.0018 |  |
| [CVE-2025-38334](https://patchblox.com/security/data/cve/CVE-2025-38334.md) | Routine | x86/sgx: Prevent attempts to reclaim poisoned pages | 5.5 | 0.0018 |  |
| [CVE-2025-38155](https://patchblox.com/security/data/cve/CVE-2025-38155.md) | Routine | wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() | 5.5 | 0.0017 |  |
| [CVE-2025-38225](https://patchblox.com/security/data/cve/CVE-2025-38225.md) | Routine | media: imx-jpeg: Cleanup after an allocation error | 5.5 | 0.0017 |  |
| [CVE-2025-38489](https://patchblox.com/security/data/cve/CVE-2025-38489.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38436](https://patchblox.com/security/data/cve/CVE-2025-38436.md) | Routine | drm/scheduler: signal scheduled fence when kill job | 5.5 | 0.0016 |  |
| [CVE-2025-37920](https://patchblox.com/security/data/cve/CVE-2025-37920.md) | Routine | xsk: Fix race condition in AF_XDP generic RX path | 5.5 | 0.0016 |  |
| [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 |  |
| [CVE-2025-23163](https://patchblox.com/security/data/cve/CVE-2025-23163.md) | Routine | net: vlan: don't propagate flags on open | 5.5 | 0.0016 |  |
| [CVE-2025-38448](https://patchblox.com/security/data/cve/CVE-2025-38448.md) | Routine | usb: gadget: u_serial: Fix race condition in TTY wakeup | 6.2 | 0.0014 |  |
| [CVE-2025-38335](https://patchblox.com/security/data/cve/CVE-2025-38335.md) | Routine | Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT | 5.5 | 0.0014 |  |
| [CVE-2025-38362](https://patchblox.com/security/data/cve/CVE-2025-38362.md) | Routine | drm/amd/display: Add null pointer check for get_first_active_display() | 5.5 | 0.0013 |  |
| [CVE-2025-38217](https://patchblox.com/security/data/cve/CVE-2025-38217.md) | Routine | hwmon: (ftsteutates) Fix TOCTOU race in fts_read() | 5.5 | 0.0013 |  |
| [CVE-2025-38158](https://patchblox.com/security/data/cve/CVE-2025-38158.md) | Routine | hisi_acc_vfio_pci: fix XQE dma address error | 5.7 | 0.0011 |  |
| [CVE-2025-38213](https://patchblox.com/security/data/cve/CVE-2025-38213.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |

---

Data as of 2026-11-11T01:20:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.