{
  "fix": "SUSE-SU-2025:03382-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03382-1",
  "summary": "SUSE-SU-2025:03382-1, released September 26, 2025, fixes 103 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_4 (version 1-150700.1.3.2). None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel-livepatch-SLE15-SP7-RT_Update_4 security update",
  "released": "2025-09-26T17:27:16Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2023-3867, high severity",
  "supported": true,
  "cveCount": 103,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.06273,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:03382-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_4",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-4",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-3867",
      "url": "https://patchblox.com/security/cve/CVE-2023-3867",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.06273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-49996",
      "url": "https://patchblox.com/security/cve/CVE-2024-49996",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00782,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38566",
      "url": "https://patchblox.com/security/cve/CVE-2025-38566",
      "title": "sunrpc: fix handling of server side tls alerts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00672,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38439",
      "url": "https://patchblox.com/security/cve/CVE-2025-38439",
      "title": "bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38146",
      "url": "https://patchblox.com/security/cve/CVE-2025-38146",
      "title": "net: openvswitch: Fix the dead loop of MPLS parse",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38472",
      "url": "https://patchblox.com/security/cve/CVE-2025-38472",
      "title": "netfilter: nf_conntrack: fix crash due to removal of uninitialised entry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38075",
      "url": "https://patchblox.com/security/cve/CVE-2025-38075",
      "title": "scsi: target: iscsi: Fix timeout on deleted connection",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38563",
      "url": "https://patchblox.com/security/cve/CVE-2025-38563",
      "title": "perf/core: Prevent VMA split of buffer mappings",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38608",
      "url": "https://patchblox.com/security/cve/CVE-2025-38608",
      "title": "bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38617",
      "url": "https://patchblox.com/security/cve/CVE-2025-38617",
      "title": "net/packet: fix a race in packet_set_ring() and packet_notifier()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38571",
      "url": "https://patchblox.com/security/cve/CVE-2025-38571",
      "title": "sunrpc: fix client side handling of tls alerts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38490",
      "url": "https://patchblox.com/security/cve/CVE-2025-38490",
      "title": "net: libwx: remove duplicate page_pool_put_full_page()",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37885",
      "url": "https://patchblox.com/security/cve/CVE-2025-37885",
      "title": "KVM: x86: Reset IRTE to host control if *new* route isn\u0027t postable",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38601",
      "url": "https://patchblox.com/security/cve/CVE-2025-38601",
      "title": "wifi: ath11k: clear initialized flag for deinit-ed srng lists",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38585",
      "url": "https://patchblox.com/security/cve/CVE-2025-38585",
      "title": "staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38512",
      "url": "https://patchblox.com/security/cve/CVE-2025-38512",
      "title": "wifi: prevent A-MSDU attacks in mesh networks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38491",
      "url": "https://patchblox.com/security/cve/CVE-2025-38491",
      "title": "mptcp: make fallback action and fallback decision atomic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38201",
      "url": "https://patchblox.com/security/cve/CVE-2025-38201",
      "title": "netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38103",
      "url": "https://patchblox.com/security/cve/CVE-2025-38103",
      "title": "HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38582",
      "url": "https://patchblox.com/security/cve/CVE-2025-38582",
      "title": "RDMA/hns: Fix double destruction of rsv_qp",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38184",
      "url": "https://patchblox.com/security/cve/CVE-2025-38184",
      "title": "tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38464",
      "url": "https://patchblox.com/security/cve/CVE-2025-38464",
      "title": "tipc: Fix use-after-free in tipc_conn_close().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38605",
      "url": "https://patchblox.com/security/cve/CVE-2025-38605",
      "title": "wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38656",
      "url": "https://patchblox.com/security/cve/CVE-2025-38656",
      "title": "wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38459",
      "url": "https://patchblox.com/security/cve/CVE-2025-38459",
      "title": "atm: clip: Fix infinite recursive call of clip_push().",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38565",
      "url": "https://patchblox.com/security/cve/CVE-2025-38565",
      "title": "perf/core: Exit early on perf_mmap() fail",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38572",
      "url": "https://patchblox.com/security/cve/CVE-2025-38572",
      "title": "ipv6: reject malicious packets in ipv6_gso_segment()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38445",
      "url": "https://patchblox.com/security/cve/CVE-2025-38445",
      "title": "md/raid1: Fix stack memory use after return in raid1_reshape",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38125",
      "url": "https://patchblox.com/security/cve/CVE-2025-38125",
      "title": "net: stmmac: make sure that ptp_rate is not 0 before configuring EST",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38555",
      "url": "https://patchblox.com/security/cve/CVE-2025-38555",
      "title": "usb: gadget : fix use-after-free in composite_dev_cleanup()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38529",
      "url": "https://patchblox.com/security/cve/CVE-2025-38529",
      "title": "comedi: aio_iiro_16: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38530",
      "url": "https://patchblox.com/security/cve/CVE-2025-38530",
      "title": "comedi: pcl812: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38458",
      "url": "https://patchblox.com/security/cve/CVE-2025-38458",
      "title": "atm: clip: Fix NULL pointer dereference in vcc_sendmsg()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38581",
      "url": "https://patchblox.com/security/cve/CVE-2025-38581",
      "title": "crypto: ccp - Fix crash when rebind ccp device for ccp.ko",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38160",
      "url": "https://patchblox.com/security/cve/CVE-2025-38160",
      "title": "clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38245",
      "url": "https://patchblox.com/security/cve/CVE-2025-38245",
      "title": "atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38560",
      "url": "https://patchblox.com/security/cve/CVE-2025-38560",
      "title": "x86/sev: Evict cache lines during SNP memory validation",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38538",
      "url": "https://patchblox.com/security/cve/CVE-2025-38538",
      "title": "dmaengine: nbpfaxi: Fix memory corruption in probe()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38568",
      "url": "https://patchblox.com/security/cve/CVE-2025-38568",
      "title": "net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38499",
      "url": "https://patchblox.com/security/cve/CVE-2025-38499",
      "title": "clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38535",
      "url": "https://patchblox.com/security/cve/CVE-2025-38535",
      "title": "phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38618",
      "url": "https://patchblox.com/security/cve/CVE-2025-38618",
      "title": "vsock: Do not allow binding to VMADDR_PORT_ANY",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38548",
      "url": "https://patchblox.com/security/cve/CVE-2025-38548",
      "title": "hwmon: (corsair-cpro) Validate the size of the received input buffer",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38208",
      "url": "https://patchblox.com/security/cve/CVE-2025-38208",
      "title": "smb: client: add NULL check in automount_fullpath",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38500",
      "url": "https://patchblox.com/security/cve/CVE-2025-38500",
      "title": "xfrm: interface: fix use-after-free after changing collect_md xfrm interface",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38587",
      "url": "https://patchblox.com/security/cve/CVE-2025-38587",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38609",
      "url": "https://patchblox.com/security/cve/CVE-2025-38609",
      "title": "PM / devfreq: Check governor before using governor-\u003Ename",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38550",
      "url": "https://patchblox.com/security/cve/CVE-2025-38550",
      "title": "ipv6: mcast: Delay put pmc-\u003Eidev in mld_del_delrec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38668",
      "url": "https://patchblox.com/security/cve/CVE-2025-38668",
      "title": "regulator: core: fix NULL dereference on unbind due to stale coupling data",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38670",
      "url": "https://patchblox.com/security/cve/CVE-2025-38670",
      "title": "arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38521",
      "url": "https://patchblox.com/security/cve/CVE-2025-38521",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38543",
      "url": "https://patchblox.com/security/cve/CVE-2025-38543",
      "title": "drm/tegra: nvdec: Fix dma_alloc_coherent error check",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38665",
      "url": "https://patchblox.com/security/cve/CVE-2025-38665",
      "title": "can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38440",
      "url": "https://patchblox.com/security/cve/CVE-2025-38440",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4130",
      "url": "https://patchblox.com/security/cve/CVE-2023-4130",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00509,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58239",
      "url": "https://patchblox.com/security/cve/CVE-2024-58239",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.0036,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4515",
      "url": "https://patchblox.com/security/cve/CVE-2023-4515",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38524",
      "url": "https://patchblox.com/security/cve/CVE-2025-38524",
      "title": "rxrpc: Fix recv-recv race of completed call",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26661",
      "url": "https://patchblox.com/security/cve/CVE-2024-26661",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38591",
      "url": "https://patchblox.com/security/cve/CVE-2025-38591",
      "title": "bpf: Reject narrower access to pointer ctx fields",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38190",
      "url": "https://patchblox.com/security/cve/CVE-2025-38190",
      "title": "atm: Revert atm_account_tx() if copy_from_iter_full() fails.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38185",
      "url": "https://patchblox.com/security/cve/CVE-2025-38185",
      "title": "atm: atmtcp: Free invalid length skb in atmtcp_c_send().",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38006",
      "url": "https://patchblox.com/security/cve/CVE-2025-38006",
      "title": "net: mctp: Don\u0027t access ifa_index when missing",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38612",
      "url": "https://patchblox.com/security/cve/CVE-2025-38612",
      "title": "staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38441",
      "url": "https://patchblox.com/security/cve/CVE-2025-38441",
      "title": "kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38604",
      "url": "https://patchblox.com/security/cve/CVE-2025-38604",
      "title": "wifi: rtl818x: Kill URBs before clearing tx status queue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38360",
      "url": "https://patchblox.com/security/cve/CVE-2025-38360",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58238",
      "url": "https://patchblox.com/security/cve/CVE-2024-58238",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38205",
      "url": "https://patchblox.com/security/cve/CVE-2025-38205",
      "title": "drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38576",
      "url": "https://patchblox.com/security/cve/CVE-2025-38576",
      "title": "powerpc/eeh: Make EEH driver device hotplug safe",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38513",
      "url": "https://patchblox.com/security/cve/CVE-2025-38513",
      "title": "wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38516",
      "url": "https://patchblox.com/security/cve/CVE-2025-38516",
      "title": "pinctrl: qcom: msm: mark certain pins as invalid for interrupts",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38528",
      "url": "https://patchblox.com/security/cve/CVE-2025-38528",
      "title": "bpf: Reject %p% format string in bprintf-like helpers",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38540",
      "url": "https://patchblox.com/security/cve/CVE-2025-38540",
      "title": "HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38546",
      "url": "https://patchblox.com/security/cve/CVE-2025-38546",
      "title": "atm: clip: Fix memory leak of struct clip_vcc.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38635",
      "url": "https://patchblox.com/security/cve/CVE-2025-38635",
      "title": "clk: davinci: Add NULL check in davinci_lpsc_clk_register()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38663",
      "url": "https://patchblox.com/security/cve/CVE-2025-38663",
      "title": "nilfs2: reject invalid file types when reading inodes",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38444",
      "url": "https://patchblox.com/security/cve/CVE-2025-38444",
      "title": "raid10: cleanup memleak at raid10_make_request",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38602",
      "url": "https://patchblox.com/security/cve/CVE-2025-38602",
      "title": "iwlwifi: Add missing check for alloc_ordered_workqueue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38251",
      "url": "https://patchblox.com/security/cve/CVE-2025-38251",
      "title": "atm: clip: prevent NULL deref in clip_push()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38588",
      "url": "https://patchblox.com/security/cve/CVE-2025-38588",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38610",
      "url": "https://patchblox.com/security/cve/CVE-2025-38610",
      "title": "powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38531",
      "url": "https://patchblox.com/security/cve/CVE-2025-38531",
      "title": "iio: common: st_sensors: Fix use of uninitialize device structs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38583",
      "url": "https://patchblox.com/security/cve/CVE-2025-38583",
      "title": "clk: xilinx: vcu: unregister pll_post only if registered correctly",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38630",
      "url": "https://patchblox.com/security/cve/CVE-2025-38630",
      "title": "fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-46733",
      "url": "https://patchblox.com/security/cve/CVE-2024-46733",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38511",
      "url": "https://patchblox.com/security/cve/CVE-2025-38511",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38515",
      "url": "https://patchblox.com/security/cve/CVE-2025-38515",
      "title": "drm/sched: Increment job count before swapping tail spsc queue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38624",
      "url": "https://patchblox.com/security/cve/CVE-2025-38624",
      "title": "PCI: pnv_php: Clean up allocated IRQs on unplug",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38671",
      "url": "https://patchblox.com/security/cve/CVE-2025-38671",
      "title": "i2c: qup: jump out of the loop in case of timeout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38644",
      "url": "https://patchblox.com/security/cve/CVE-2025-38644",
      "title": "wifi: mac80211: reject TDLS operations when station is not associated",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38510",
      "url": "https://patchblox.com/security/cve/CVE-2025-38510",
      "title": "kasan: remove kasan_find_vm_area() to prevent possible deadlock",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38634",
      "url": "https://patchblox.com/security/cve/CVE-2025-38634",
      "title": "power: supply: cpcap-charger: Fix null check for power_supply_get_by_name",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38646",
      "url": "https://patchblox.com/security/cve/CVE-2025-38646",
      "title": "wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38621",
      "url": "https://patchblox.com/security/cve/CVE-2025-38621",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38503",
      "url": "https://patchblox.com/security/cve/CVE-2025-38503",
      "title": "btrfs: fix assertion when building free space tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38537",
      "url": "https://patchblox.com/security/cve/CVE-2025-38537",
      "title": "net: phy: Don\u0027t register LEDs for genphy",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38541",
      "url": "https://patchblox.com/security/cve/CVE-2025-38541",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38632",
      "url": "https://patchblox.com/security/cve/CVE-2025-38632",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38650",
      "url": "https://patchblox.com/security/cve/CVE-2025-38650",
      "title": "hfsplus: remove mutex_lock check in hfsplus_free_extents",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38520",
      "url": "https://patchblox.com/security/cve/CVE-2025-38520",
      "title": "drm/amdkfd: Don\u0027t call mmput from MMU notifier callback",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38506",
      "url": "https://patchblox.com/security/cve/CVE-2025-38506",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38553",
      "url": "https://patchblox.com/security/cve/CVE-2025-38553",
      "title": "net/sched: Restrict conditions for adding duplicating netems to qdisc tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}