# SUSE-SU-2025:03600-1: Security update for 13 packages

SUSE-SU-2025:03600-1, released October 15, 2025, fixes 346 CVEs across 13 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-03600-1
- Platform: Linux
- Released: Oct 15, 2025
- Priority: Patch now (Closes CVE-2025-39682, exploited (CISA KEV))
- CVEs: 346, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:03600-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1.150600.12.32.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.73.1.150600.12.32.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-livepatch-SLE15-SP6_Update_16](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-16.md) | sles 15.6 | 1-150600.13.3.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.73.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.73.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-39682](https://patchblox.com/security/data/cve/CVE-2025-39682.md) | Patch now | tls: fix handling of zero-length records on the rx_list | 9.8 | 0.0331 | CISA KEV |
| [CVE-2025-39907](https://patchblox.com/security/data/cve/CVE-2025-39907.md) | Urgent | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer | 9.8 | 0.0015 |  |
| [CVE-2025-39925](https://patchblox.com/security/data/cve/CVE-2025-39925.md) | Urgent | can: j1939: implement NETDEV_UNREGISTER notification handler | 9.8 | 0.0015 |  |
| [CVE-2023-31248](https://patchblox.com/security/data/cve/CVE-2023-31248.md) | High | linux: Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to ch... | 7.8 | 0.0189 |  |
| [CVE-2023-39197](https://patchblox.com/security/data/cve/CVE-2023-39197.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0094 |  |
| [CVE-2025-38488](https://patchblox.com/security/data/cve/CVE-2025-38488.md) | High | kernel-64kb: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239). | 7.8 | 0.0077 |  |
| [CVE-2024-26584](https://patchblox.com/security/data/cve/CVE-2024-26584.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0075 |  |
| [CVE-2023-53338](https://patchblox.com/security/data/cve/CVE-2023-53338.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0055 |  |
| [CVE-2023-42753](https://patchblox.com/security/data/cve/CVE-2023-42753.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0051 |  |
| [CVE-2025-38734](https://patchblox.com/security/data/cve/CVE-2025-38734.md) | High | net/smc: fix UAF on smcsk after smc_listen_out() | 7.8 | 0.0048 |  |
| [CVE-2025-38527](https://patchblox.com/security/data/cve/CVE-2025-38527.md) | High | smb: client: fix use-after-free in cifs_oplock_break | 7.8 | 0.0046 |  |
| [CVE-2025-38590](https://patchblox.com/security/data/cve/CVE-2025-38590.md) | High | net/mlx5e: Remove skb secpath if xfrm state is not found | 7.5 | 0.0044 |  |
| [CVE-2025-38676](https://patchblox.com/security/data/cve/CVE-2025-38676.md) | High | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 7.8 | 0.0042 |  |
| [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0041 |  |
| [CVE-2025-38724](https://patchblox.com/security/data/cve/CVE-2025-38724.md) | High | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | 7.8 | 0.0041 |  |
| [CVE-2025-38660](https://patchblox.com/security/data/cve/CVE-2025-38660.md) | High | [ceph] parse_longname(): strrchr() expects NUL-terminated string | 7.1 | 0.0041 |  |
| [CVE-2025-39703](https://patchblox.com/security/data/cve/CVE-2025-39703.md) | High | net, hsr: reject HSR frame if skb can't hold tag | 7.0 | 0.0039 |  |
| [CVE-2023-53192](https://patchblox.com/security/data/cve/CVE-2023-53192.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0039 |  |
| [CVE-2025-40300](https://patchblox.com/security/data/cve/CVE-2025-40300.md) | High | x86/vmscape: Add conditional IBPB mitigation | 7.3 | 0.0038 |  |
| [CVE-2024-58240](https://patchblox.com/security/data/cve/CVE-2024-58240.md) | High | tls: separate no-async decryption request handling from async | 7.8 | 0.0034 |  |
| [CVE-2025-38533](https://patchblox.com/security/data/cve/CVE-2025-38533.md) | High | net: libwx: fix the using of Rx buffer DMA | 7.8 | 0.0033 |  |
| [CVE-2025-38678](https://patchblox.com/security/data/cve/CVE-2025-38678.md) | High | netfilter: nf_tables: reject duplicate device on updates | 7.1 | 0.0029 |  |
| [CVE-2023-53333](https://patchblox.com/security/data/cve/CVE-2023-53333.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 |  |
| [CVE-2025-39839](https://patchblox.com/security/data/cve/CVE-2025-39839.md) | High | batman-adv: fix OOB read/write in network-coding decode | 7.1 | 0.0026 |  |
| [CVE-2023-53226](https://patchblox.com/security/data/cve/CVE-2023-53226.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-39750](https://patchblox.com/security/data/cve/CVE-2025-39750.md) | High | wifi: ath12k: Correct tid cleanup when tid setup fails | 7.1 | 0.0024 |  |
| [CVE-2025-39761](https://patchblox.com/security/data/cve/CVE-2025-39761.md) | High | wifi: ath12k: Decrement TID on RX peer frag setup error handling | 7.1 | 0.0024 |  |
| [CVE-2025-39864](https://patchblox.com/security/data/cve/CVE-2025-39864.md) | High | wifi: cfg80211: fix use-after-free in cmp_bss() | 7.8 | 0.0024 |  |
| [CVE-2023-53454](https://patchblox.com/security/data/cve/CVE-2023-53454.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-53305](https://patchblox.com/security/data/cve/CVE-2023-53305.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-38466](https://patchblox.com/security/data/cve/CVE-2025-38466.md) | High | perf: Revert to requiring CAP_SYS_ADMIN for uprobes | 7.8 | 0.0023 |  |
| [CVE-2025-39860](https://patchblox.com/security/data/cve/CVE-2025-39860.md) | High | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 7.8 | 0.0023 |  |
| [CVE-2025-38595](https://patchblox.com/security/data/cve/CVE-2025-38595.md) | High | xen: fix UAF in dmabuf_exp_from_pages() | 7.8 | 0.0023 |  |
| [CVE-2025-39849](https://patchblox.com/security/data/cve/CVE-2025-39849.md) | High | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 |  |
| [CVE-2023-53374](https://patchblox.com/security/data/cve/CVE-2023-53374.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-39826](https://patchblox.com/security/data/cve/CVE-2025-39826.md) | High | net: rose: convert 'use' field to refcount_t | 7.0 | 0.0022 |  |
| [CVE-2023-53322](https://patchblox.com/security/data/cve/CVE-2023-53322.md) | High | kernel-azure: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53257](https://patchblox.com/security/data/cve/CVE-2023-53257.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-39677](https://patchblox.com/security/data/cve/CVE-2025-39677.md) | High | net/sched: Fix backlog accounting in qdisc_dequeue_internal | 7.0 | 0.0021 |  |
| [CVE-2025-38616](https://patchblox.com/security/data/cve/CVE-2025-38616.md) | High | tls: handle data disappearing from under the TLS ULP | 7.1 | 0.0021 |  |
| [CVE-2025-38605](https://patchblox.com/security/data/cve/CVE-2025-38605.md) | High | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | 7.0 | 0.0021 |  |
| [CVE-2023-53343](https://patchblox.com/security/data/cve/CVE-2023-53343.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53432](https://patchblox.com/security/data/cve/CVE-2023-53432.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-39732](https://patchblox.com/security/data/cve/CVE-2025-39732.md) | High | wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() | 7.0 | 0.0021 |  |
| [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 |  |
| [CVE-2023-53354](https://patchblox.com/security/data/cve/CVE-2023-53354.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2025-38722](https://patchblox.com/security/data/cve/CVE-2025-38722.md) | High | habanalabs: fix UAF in export_dmabuf() | 7.8 | 0.0021 |  |
| [CVE-2025-22022](https://patchblox.com/security/data/cve/CVE-2025-22022.md) | High | kernel-64kb: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292). | 7.8 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 |  |
| [CVE-2025-39810](https://patchblox.com/security/data/cve/CVE-2025-39810.md) | High | bnxt_en: Fix memory corruption when FW resources change during ifdown | 7.8 | 0.0020 |  |
| [CVE-2023-53357](https://patchblox.com/security/data/cve/CVE-2023-53357.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 |  |
| [CVE-2025-39686](https://patchblox.com/security/data/cve/CVE-2025-39686.md) | High | comedi: Make insn_rw_emulate_bits() do insn->n samples | 7.8 | 0.0020 |  |
| [CVE-2025-39701](https://patchblox.com/security/data/cve/CVE-2025-39701.md) | High | ACPI: pfr_update: Fix the driver update version check | 7.8 | 0.0020 |  |
| [CVE-2025-39850](https://patchblox.com/security/data/cve/CVE-2025-39850.md) | High | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 7.0 | 0.0020 |  |
| [CVE-2025-38614](https://patchblox.com/security/data/cve/CVE-2025-38614.md) | High | eventpoll: Fix semi-unbounded recursion | 7.5 | 0.0020 |  |
| [CVE-2025-38119](https://patchblox.com/security/data/cve/CVE-2025-38119.md) | High | scsi: core: ufs: Fix a hang in the error handler | 7.0 | 0.0020 |  |
| [CVE-2023-53365](https://patchblox.com/security/data/cve/CVE-2023-53365.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0019 |  |
| [CVE-2025-38584](https://patchblox.com/security/data/cve/CVE-2025-38584.md) | High | padata: Fix pd UAF once and for all | 7.8 | 0.0019 |  |
| [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 |  |
| [CVE-2025-38697](https://patchblox.com/security/data/cve/CVE-2025-38697.md) | High | jfs: upper bound check of tree index in dbAllocAG | 7.8 | 0.0019 |  |
| [CVE-2025-38351](https://patchblox.com/security/data/cve/CVE-2025-38351.md) | High | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 7.5 | 0.0019 |  |
| [CVE-2023-53485](https://patchblox.com/security/data/cve/CVE-2023-53485.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38456](https://patchblox.com/security/data/cve/CVE-2025-38456.md) | High | ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() | 7.8 | 0.0019 |  |
| [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 |  |
| [CVE-2025-38593](https://patchblox.com/security/data/cve/CVE-2025-38593.md) | High | Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' | 7.8 | 0.0019 |  |
| [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 |  |
| [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 |  |
| [CVE-2023-53465](https://patchblox.com/security/data/cve/CVE-2023-53465.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2025-39743](https://patchblox.com/security/data/cve/CVE-2025-39743.md) | High | jfs: truncate good inode pages when hard link is 0 | 9.8 | 0.0018 |  |
| [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 |  |
| [CVE-2025-38698](https://patchblox.com/security/data/cve/CVE-2025-38698.md) | High | jfs: Regular file corruption check | 7.1 | 0.0018 |  |
| [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 |  |
| [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 |  |
| [CVE-2025-38732](https://patchblox.com/security/data/cve/CVE-2025-38732.md) | High | netfilter: nf_reject: don't leak dst refcount for loopback packets | 7.0 | 0.0018 |  |
| [CVE-2025-38556](https://patchblox.com/security/data/cve/CVE-2025-38556.md) | High | HID: core: Harden s32ton() against conversion to 0 bits | 8.0 | 0.0018 |  |
| [CVE-2025-39823](https://patchblox.com/security/data/cve/CVE-2025-39823.md) | High | KVM: x86: use array_index_nospec with indices that come from guest | 7.8 | 0.0018 |  |
| [CVE-2025-38736](https://patchblox.com/security/data/cve/CVE-2025-38736.md) | High | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization | 7.1 | 0.0018 |  |
| [CVE-2025-38714](https://patchblox.com/security/data/cve/CVE-2025-38714.md) | High | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 9.0 | 0.0018 |  |
| [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 |  |
| [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 |  |
| [CVE-2025-38715](https://patchblox.com/security/data/cve/CVE-2025-38715.md) | High | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 7.1 | 0.0018 |  |
| [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 |  |
| [CVE-2025-38735](https://patchblox.com/security/data/cve/CVE-2025-38735.md) | High | gve: prevent ethtool ops after shutdown | 7.0 | 0.0018 |  |
| [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 |  |
| [CVE-2025-39738](https://patchblox.com/security/data/cve/CVE-2025-39738.md) | High | btrfs: do not allow relocation of partially dropped subvolumes | 7.8 | 0.0018 |  |
| [CVE-2025-38713](https://patchblox.com/security/data/cve/CVE-2025-38713.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | 7.1 | 0.0017 |  |
| [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 |  |
| [CVE-2025-38730](https://patchblox.com/security/data/cve/CVE-2025-38730.md) | High | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 |  |
| [CVE-2025-39835](https://patchblox.com/security/data/cve/CVE-2025-39835.md) | High | xfs: do not propagate ENODATA disk errors into xattr code | 7.8 | 0.0017 |  |
| [CVE-2025-38679](https://patchblox.com/security/data/cve/CVE-2025-38679.md) | High | media: venus: Fix OOB read due to missing payload bound check | 7.1 | 0.0017 |  |
| [CVE-2025-39685](https://patchblox.com/security/data/cve/CVE-2025-39685.md) | High | comedi: pcl726: Prevent invalid irq number | 7.1 | 0.0017 |  |
| [CVE-2023-53179](https://patchblox.com/security/data/cve/CVE-2023-53179.md) | High | kernel-livepatch-SLE15-SP7_Update_6: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39694](https://patchblox.com/security/data/cve/CVE-2025-39694.md) | High | s390/sclp: Fix SCCB present check | 7.3 | 0.0017 |  |
| [CVE-2023-53205](https://patchblox.com/security/data/cve/CVE-2023-53205.md) | High | kernel-azure: Security update for the Linux Kernel | 8.0 | 0.0017 |  |
| [CVE-2023-53495](https://patchblox.com/security/data/cve/CVE-2023-53495.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 |  |
| [CVE-2023-53148](https://patchblox.com/security/data/cve/CVE-2023-53148.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0017 |  |
| [CVE-2023-53215](https://patchblox.com/security/data/cve/CVE-2023-53215.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53217](https://patchblox.com/security/data/cve/CVE-2023-53217.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53235](https://patchblox.com/security/data/cve/CVE-2023-53235.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53487](https://patchblox.com/security/data/cve/CVE-2023-53487.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53492](https://patchblox.com/security/data/cve/CVE-2023-53492.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53222](https://patchblox.com/security/data/cve/CVE-2023-53222.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2025-39718](https://patchblox.com/security/data/cve/CVE-2025-39718.md) | High | vsock/virtio: Validate length in packet header before skb_put() | 7.8 | 0.0017 |  |
| [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 |  |
| [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 |  |
| [CVE-2025-39853](https://patchblox.com/security/data/cve/CVE-2025-39853.md) | High | i40e: Fix potential invalid access when MAC list is empty | 7.1 | 0.0017 |  |
| [CVE-2025-39891](https://patchblox.com/security/data/cve/CVE-2025-39891.md) | High | wifi: mwifiex: Initialize the chan_stats array to zero | 7.1 | 0.0017 |  |
| [CVE-2023-53184](https://patchblox.com/security/data/cve/CVE-2023-53184.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53508](https://patchblox.com/security/data/cve/CVE-2023-53508.md) | High | kernel-syms: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-38692](https://patchblox.com/security/data/cve/CVE-2025-38692.md) | High | exfat: add cluster chain loop check for dir | 7.0 | 0.0017 |  |
| [CVE-2023-53311](https://patchblox.com/security/data/cve/CVE-2023-53311.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53316](https://patchblox.com/security/data/cve/CVE-2023-53316.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53500](https://patchblox.com/security/data/cve/CVE-2023-53500.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53238](https://patchblox.com/security/data/cve/CVE-2023-53238.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2025-39744](https://patchblox.com/security/data/cve/CVE-2025-39744.md) | High | rcu: Fix rcu_read_unlock() deadloop due to IRQ work | 7.1 | 0.0016 |  |
| [CVE-2025-39869](https://patchblox.com/security/data/cve/CVE-2025-39869.md) | High | dmaengine: ti: edma: Fix memory allocation size for queue_priority_map | 7.1 | 0.0016 |  |
| [CVE-2025-39865](https://patchblox.com/security/data/cve/CVE-2025-39865.md) | High | tee: fix NULL pointer dereference in tee_shm_put | 7.0 | 0.0016 |  |
| [CVE-2023-53272](https://patchblox.com/security/data/cve/CVE-2023-53272.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2023-53420](https://patchblox.com/security/data/cve/CVE-2023-53420.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2023-53185](https://patchblox.com/security/data/cve/CVE-2023-53185.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0016 |  |
| [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 |  |
| [CVE-2025-39873](https://patchblox.com/security/data/cve/CVE-2025-39873.md) | High | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB | 7.8 | 0.0016 |  |
| [CVE-2023-53187](https://patchblox.com/security/data/cve/CVE-2023-53187.md) | High | btrfs: fix use-after-free of new block group that became unused | 7.8 | 0.0016 |  |
| [CVE-2023-53263](https://patchblox.com/security/data/cve/CVE-2023-53263.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53331](https://patchblox.com/security/data/cve/CVE-2023-53331.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53479](https://patchblox.com/security/data/cve/CVE-2023-53479.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39790](https://patchblox.com/security/data/cve/CVE-2025-39790.md) | High | bus: mhi: host: Detect events pointing to unexpected TREs | 7.8 | 0.0016 |  |
| [CVE-2023-53150](https://patchblox.com/security/data/cve/CVE-2023-53150.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53275](https://patchblox.com/security/data/cve/CVE-2023-53275.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53280](https://patchblox.com/security/data/cve/CVE-2023-53280.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53451](https://patchblox.com/security/data/cve/CVE-2023-53451.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Fix potential NULL pointer derefe... | 8.0 | 0.0016 |  |
| [CVE-2025-39797](https://patchblox.com/security/data/cve/CVE-2025-39797.md) | High | xfrm: Duplicate SPI Handling | 7.8 | 0.0016 |  |
| [CVE-2025-39719](https://patchblox.com/security/data/cve/CVE-2025-39719.md) | High | iio: imu: bno055: fix OOB access of hw_xlate array | 7.1 | 0.0016 |  |
| [CVE-2025-39739](https://patchblox.com/security/data/cve/CVE-2025-39739.md) | High | iommu/arm-smmu-qcom: Add SM6115 MDSS compatible | 7.0 | 0.0016 |  |
| [CVE-2025-39838](https://patchblox.com/security/data/cve/CVE-2025-39838.md) | High | cifs: prevent NULL pointer dereference in UTF16 conversion | 7.0 | 0.0016 |  |
| [CVE-2023-53210](https://patchblox.com/security/data/cve/CVE-2023-53210.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2025-39746](https://patchblox.com/security/data/cve/CVE-2025-39746.md) | High | wifi: ath10k: shutdown driver when hardware is unreliable | 7.0 | 0.0016 |  |
| [CVE-2023-53493](https://patchblox.com/security/data/cve/CVE-2023-53493.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39870](https://patchblox.com/security/data/cve/CVE-2025-39870.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53371](https://patchblox.com/security/data/cve/CVE-2023-53371.md) | High | net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create | 8.0 | 0.0016 |  |
| [CVE-2023-53274](https://patchblox.com/security/data/cve/CVE-2023-53274.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53395](https://patchblox.com/security/data/cve/CVE-2023-53395.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53504](https://patchblox.com/security/data/cve/CVE-2023-53504.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53507](https://patchblox.com/security/data/cve/CVE-2023-53507.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53286](https://patchblox.com/security/data/cve/CVE-2023-53286.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53510](https://patchblox.com/security/data/cve/CVE-2023-53510.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39861](https://patchblox.com/security/data/cve/CVE-2025-39861.md) | High | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 7.8 | 0.0016 |  |
| [CVE-2025-39882](https://patchblox.com/security/data/cve/CVE-2025-39882.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53426](https://patchblox.com/security/data/cve/CVE-2023-53426.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-38709](https://patchblox.com/security/data/cve/CVE-2025-38709.md) | High | loop: Avoid updating block size under exclusive owner | 7.0 | 0.0016 |  |
| [CVE-2023-53386](https://patchblox.com/security/data/cve/CVE-2023-53386.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39871](https://patchblox.com/security/data/cve/CVE-2025-39871.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39854](https://patchblox.com/security/data/cve/CVE-2025-39854.md) | High | kernel-64kb: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297). | 7.8 | 0.0015 |  |
| [CVE-2023-53377](https://patchblox.com/security/data/cve/CVE-2023-53377.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53446](https://patchblox.com/security/data/cve/CVE-2023-53446.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53515](https://patchblox.com/security/data/cve/CVE-2023-53515.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53321](https://patchblox.com/security/data/cve/CVE-2023-53321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211_hwsim: drop short frames  While t... | 7.1 | 0.0015 |  |
| [CVE-2025-39721](https://patchblox.com/security/data/cve/CVE-2025-39721.md) | High | crypto: qat - flush misc workqueue during device shutdown | 7.0 | 0.0015 |  |
| [CVE-2023-53501](https://patchblox.com/security/data/cve/CVE-2023-53501.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53252](https://patchblox.com/security/data/cve/CVE-2023-53252.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53380](https://patchblox.com/security/data/cve/CVE-2023-53380.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2025-39833](https://patchblox.com/security/data/cve/CVE-2025-39833.md) | High | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 7.0 | 0.0015 |  |
| [CVE-2023-53441](https://patchblox.com/security/data/cve/CVE-2023-53441.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53530](https://patchblox.com/security/data/cve/CVE-2023-53530.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53442](https://patchblox.com/security/data/cve/CVE-2023-53442.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53516](https://patchblox.com/security/data/cve/CVE-2023-53516.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 |  |
| [CVE-2023-53496](https://patchblox.com/security/data/cve/CVE-2023-53496.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0014 |  |
| [CVE-2023-53401](https://patchblox.com/security/data/cve/CVE-2023-53401.md) | High | mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() | 7.8 | 0.0014 |  |
| [CVE-2023-53151](https://patchblox.com/security/data/cve/CVE-2023-53151.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0012 |  |
| [CVE-2025-39825](https://patchblox.com/security/data/cve/CVE-2025-39825.md) | High | smb: client: fix race with concurrent opens in rename(2) | 7.6 | 0.0012 |  |
| [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 |  |
| [CVE-2025-39832](https://patchblox.com/security/data/cve/CVE-2025-39832.md) | High | net/mlx5: Fix lockdep assertion on sync reset unload event | 7.0 | 0.0012 |  |
| [CVE-2025-39751](https://patchblox.com/security/data/cve/CVE-2025-39751.md) | High | ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control | 7.8 | n/a |  |
| [CVE-2023-3772](https://patchblox.com/security/data/cve/CVE-2023-3772.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 |  |
| [CVE-2025-39758](https://patchblox.com/security/data/cve/CVE-2025-39758.md) | Routine | RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages | 5.5 | 0.0042 |  |
| [CVE-2023-53360](https://patchblox.com/security/data/cve/CVE-2023-53360.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0041 |  |
| [CVE-2025-38526](https://patchblox.com/security/data/cve/CVE-2025-38526.md) | Routine | ice: add NULL check in eswitch lag check | 5.5 | 0.0041 |  |
| [CVE-2025-38514](https://patchblox.com/security/data/cve/CVE-2025-38514.md) | Routine | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 6.5 | 0.0039 |  |
| [CVE-2025-39770](https://patchblox.com/security/data/cve/CVE-2025-39770.md) | Routine | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0038 |  |
| [CVE-2023-53463](https://patchblox.com/security/data/cve/CVE-2023-53463.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0036 |  |
| [CVE-2023-53491](https://patchblox.com/security/data/cve/CVE-2023-53491.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0035 |  |
| [CVE-2025-39857](https://patchblox.com/security/data/cve/CVE-2025-39857.md) | Routine | net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() | 5.8 | 0.0031 |  |
| [CVE-2025-39726](https://patchblox.com/security/data/cve/CVE-2025-39726.md) | Routine | s390/ism: fix concurrency management in ism_cmd() | 5.5 | 0.0025 |  |
| [CVE-2025-39848](https://patchblox.com/security/data/cve/CVE-2025-39848.md) | Routine | ax25: properly unshare skbs in ax25_kiss_rcv() | 5.5 | 0.0024 |  |
| [CVE-2024-58090](https://patchblox.com/security/data/cve/CVE-2024-58090.md) | Routine | kernel-64kb: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324). | 5.5 | 0.0023 |  |
| [CVE-2023-53462](https://patchblox.com/security/data/cve/CVE-2023-53462.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-39827](https://patchblox.com/security/data/cve/CVE-2025-39827.md) | Routine | net: rose: include node references in rose_neigh refcount | 5.5 | 0.0023 |  |
| [CVE-2025-38597](https://patchblox.com/security/data/cve/CVE-2025-38597.md) | Routine | drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port | 5.5 | 0.0022 |  |
| [CVE-2023-53336](https://patchblox.com/security/data/cve/CVE-2023-53336.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53339](https://patchblox.com/security/data/cve/CVE-2023-53339.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38705](https://patchblox.com/security/data/cve/CVE-2025-38705.md) | Routine | drm/amd/pm: fix null pointer access | 5.5 | 0.0020 |  |
| [CVE-2025-38706](https://patchblox.com/security/data/cve/CVE-2025-38706.md) | Routine | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 5.5 | 0.0020 |  |
| [CVE-2025-39705](https://patchblox.com/security/data/cve/CVE-2025-39705.md) | Routine | drm/amd/display: fix a Null pointer dereference vulnerability | 5.5 | 0.0020 |  |
| [CVE-2023-53352](https://patchblox.com/security/data/cve/CVE-2023-53352.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38408](https://patchblox.com/security/data/cve/CVE-2025-38408.md) | Routine | genirq/irq_sim: Initialize work context pointers properly | 5.5 | 0.0020 |  |
| [CVE-2023-53342](https://patchblox.com/security/data/cve/CVE-2023-53342.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38418](https://patchblox.com/security/data/cve/CVE-2025-38418.md) | Routine | remoteproc: core: Release rproc->clean_table after rproc_attach() fails | 5.5 | 0.0019 |  |
| [CVE-2025-38419](https://patchblox.com/security/data/cve/CVE-2025-38419.md) | Routine | remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() | 5.5 | 0.0019 |  |
| [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 |  |
| [CVE-2023-53356](https://patchblox.com/security/data/cve/CVE-2023-53356.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 |  |
| [CVE-2025-39684](https://patchblox.com/security/data/cve/CVE-2025-39684.md) | Routine | comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() | 5.5 | 0.0019 |  |
| [CVE-2023-53362](https://patchblox.com/security/data/cve/CVE-2023-53362.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38643](https://patchblox.com/security/data/cve/CVE-2025-38643.md) | Routine | wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() | 5.5 | 0.0019 |  |
| [CVE-2023-53350](https://patchblox.com/security/data/cve/CVE-2023-53350.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 |  |
| [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 |  |
| [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39681](https://patchblox.com/security/data/cve/CVE-2025-39681.md) | Routine | x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | 5.5 | 0.0018 |  |
| [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 |  |
| [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 |  |
| [CVE-2025-38263](https://patchblox.com/security/data/cve/CVE-2025-38263.md) | Routine | bcache: fix NULL pointer in cache_set_flush() | 5.5 | 0.0018 |  |
| [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38402](https://patchblox.com/security/data/cve/CVE-2025-38402.md) | Routine | kernel-64kb: idpf: return 0 size for RSS key if not supported (bsc#1247262). | 5.5 | 0.0018 |  |
| [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 |  |
| [CVE-2023-53369](https://patchblox.com/security/data/cve/CVE-2023-53369.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 |  |
| [CVE-2025-38640](https://patchblox.com/security/data/cve/CVE-2025-38640.md) | Routine | bpf: Disable migration in nf_hook_run_bpf(). | 5.5 | 0.0017 |  |
| [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0017 |  |
| [CVE-2025-38234](https://patchblox.com/security/data/cve/CVE-2025-38234.md) | Routine | sched/rt: Fix race in push_rt_task | 5.5 | 0.0017 |  |
| [CVE-2025-38659](https://patchblox.com/security/data/cve/CVE-2025-38659.md) | Routine | gfs2: No more self recovery | 5.5 | 0.0017 |  |
| [CVE-2025-39787](https://patchblox.com/security/data/cve/CVE-2025-39787.md) | Routine | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | 5.5 | 0.0017 |  |
| [CVE-2023-53367](https://patchblox.com/security/data/cve/CVE-2023-53367.md) | Routine | accel/habanalabs: fix mem leak in capture user mappings | 5.5 | 0.0017 |  |
| [CVE-2025-39842](https://patchblox.com/security/data/cve/CVE-2025-39842.md) | Routine | ocfs2: prevent release journal inode after journal shutdown | 5.5 | 0.0017 |  |
| [CVE-2025-38623](https://patchblox.com/security/data/cve/CVE-2025-38623.md) | Routine | PCI: pnv_php: Fix surprise plug detection and recovery | 5.5 | 0.0017 |  |
| [CVE-2025-38712](https://patchblox.com/security/data/cve/CVE-2025-38712.md) | Routine | hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() | 5.5 | 0.0017 |  |
| [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 |  |
| [CVE-2023-53189](https://patchblox.com/security/data/cve/CVE-2023-53189.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53314](https://patchblox.com/security/data/cve/CVE-2023-53314.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39675](https://patchblox.com/security/data/cve/CVE-2025-39675.md) | Routine | drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() | 5.5 | 0.0017 |  |
| [CVE-2025-39693](https://patchblox.com/security/data/cve/CVE-2025-39693.md) | Routine | drm/amd/display: Avoid a NULL pointer dereference | 5.5 | 0.0017 |  |
| [CVE-2023-53201](https://patchblox.com/security/data/cve/CVE-2023-53201.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53364](https://patchblox.com/security/data/cve/CVE-2023-53364.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39920](https://patchblox.com/security/data/cve/CVE-2025-39920.md) | Routine | pcmcia: Add error handling for add_interval() in do_validate_mem() | 5.5 | 0.0017 |  |
| [CVE-2025-38255](https://patchblox.com/security/data/cve/CVE-2025-38255.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38645](https://patchblox.com/security/data/cve/CVE-2025-38645.md) | Routine | net/mlx5: Check device memory pointer before usage | 5.5 | 0.0017 |  |
| [CVE-2023-53421](https://patchblox.com/security/data/cve/CVE-2023-53421.md) | Routine | blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() | 5.5 | 0.0017 |  |
| [CVE-2025-39679](https://patchblox.com/security/data/cve/CVE-2025-39679.md) | Routine | drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). | 5.5 | 0.0017 |  |
| [CVE-2025-38544](https://patchblox.com/security/data/cve/CVE-2025-38544.md) | Routine | rxrpc: Fix bug due to prealloc collision | 5.5 | 0.0016 |  |
| [CVE-2025-38725](https://patchblox.com/security/data/cve/CVE-2025-38725.md) | Routine | net: usb: asix_devices: add phy_mask for ax88772 mdio bus | 5.5 | 0.0016 |  |
| [CVE-2025-39678](https://patchblox.com/security/data/cve/CVE-2025-39678.md) | Routine | kernel-64kb: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (bsc#1249290). | 5.5 | 0.0016 |  |
| [CVE-2025-39846](https://patchblox.com/security/data/cve/CVE-2025-39846.md) | Routine | pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() | 5.5 | 0.0016 |  |
| [CVE-2025-39847](https://patchblox.com/security/data/cve/CVE-2025-39847.md) | Routine | ppp: fix memory leak in pad_compress_skb | 5.5 | 0.0016 |  |
| [CVE-2023-53313](https://patchblox.com/security/data/cve/CVE-2023-53313.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53456](https://patchblox.com/security/data/cve/CVE-2023-53456.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53428](https://patchblox.com/security/data/cve/CVE-2023-53428.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53147](https://patchblox.com/security/data/cve/CVE-2023-53147.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53165](https://patchblox.com/security/data/cve/CVE-2023-53165.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53167](https://patchblox.com/security/data/cve/CVE-2023-53167.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53174](https://patchblox.com/security/data/cve/CVE-2023-53174.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53196](https://patchblox.com/security/data/cve/CVE-2023-53196.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53220](https://patchblox.com/security/data/cve/CVE-2023-53220.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53304](https://patchblox.com/security/data/cve/CVE-2023-53304.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53309](https://patchblox.com/security/data/cve/CVE-2023-53309.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53457](https://patchblox.com/security/data/cve/CVE-2023-53457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  FS: JFS: Fix null-ptr-deref Read in txBegin   Sy... | 5.5 | 0.0016 |  |
| [CVE-2023-53472](https://patchblox.com/security/data/cve/CVE-2023-53472.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53480](https://patchblox.com/security/data/cve/CVE-2023-53480.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53488](https://patchblox.com/security/data/cve/CVE-2023-53488.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53505](https://patchblox.com/security/data/cve/CVE-2023-53505.md) | Routine | kernel-livepatch-SLE15-SP6_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53518](https://patchblox.com/security/data/cve/CVE-2023-53518.md) | Routine | kernel-livepatch-SLE15-SP6_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39763](https://patchblox.com/security/data/cve/CVE-2025-39763.md) | Routine | ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered | 5.5 | 0.0016 |  |
| [CVE-2023-53175](https://patchblox.com/security/data/cve/CVE-2023-53175.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53221](https://patchblox.com/security/data/cve/CVE-2023-53221.md) | Routine | bpf: Fix memleak due to fentry attach failure | 5.5 | 0.0016 |  |
| [CVE-2023-53230](https://patchblox.com/security/data/cve/CVE-2023-53230.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53231](https://patchblox.com/security/data/cve/CVE-2023-53231.md) | Routine | erofs: Fix detection of atomic context | 5.5 | 0.0016 |  |
| [CVE-2023-53243](https://patchblox.com/security/data/cve/CVE-2023-53243.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: add handling for RAID1C23/DUP to btrfs_re... | 5.5 | 0.0016 |  |
| [CVE-2023-53264](https://patchblox.com/security/data/cve/CVE-2023-53264.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53461](https://patchblox.com/security/data/cve/CVE-2023-53461.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39800](https://patchblox.com/security/data/cve/CVE-2025-39800.md) | Routine | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 5.5 | 0.0016 |  |
| [CVE-2023-53152](https://patchblox.com/security/data/cve/CVE-2023-53152.md) | Routine | drm/amdgpu: fix calltrace warning in amddrm_buddy_fini | 5.5 | 0.0016 |  |
| [CVE-2023-53177](https://patchblox.com/security/data/cve/CVE-2023-53177.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53181](https://patchblox.com/security/data/cve/CVE-2023-53181.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53195](https://patchblox.com/security/data/cve/CVE-2023-53195.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53207](https://patchblox.com/security/data/cve/CVE-2023-53207.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53208](https://patchblox.com/security/data/cve/CVE-2023-53208.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53209](https://patchblox.com/security/data/cve/CVE-2023-53209.md) | Routine | wifi: mac80211_hwsim: Fix possible NULL dereference | 5.5 | 0.0016 |  |
| [CVE-2023-53312](https://patchblox.com/security/data/cve/CVE-2023-53312.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53370](https://patchblox.com/security/data/cve/CVE-2023-53370.md) | Routine | drm/amdgpu: fix memory leak in mes self test | 5.5 | 0.0016 |  |
| [CVE-2023-53448](https://patchblox.com/security/data/cve/CVE-2023-53448.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39845](https://patchblox.com/security/data/cve/CVE-2025-39845.md) | Routine | x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() | 5.5 | 0.0016 |  |
| [CVE-2023-53526](https://patchblox.com/security/data/cve/CVE-2023-53526.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39706](https://patchblox.com/security/data/cve/CVE-2025-39706.md) | Routine | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | 5.5 | 0.0016 |  |
| [CVE-2023-53394](https://patchblox.com/security/data/cve/CVE-2023-53394.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.7 | 0.0015 |  |
| [CVE-2023-53429](https://patchblox.com/security/data/cve/CVE-2023-53429.md) | Routine | btrfs: don't check PageError in __extent_writepage | 5.5 | 0.0015 |  |
| [CVE-2023-53531](https://patchblox.com/security/data/cve/CVE-2023-53531.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39801](https://patchblox.com/security/data/cve/CVE-2025-39801.md) | Routine | usb: dwc3: Remove WARN_ON for device endpoint command timeouts | 6.2 | 0.0015 |  |
| [CVE-2025-39923](https://patchblox.com/security/data/cve/CVE-2025-39923.md) | Routine | dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees | 5.5 | 0.0015 |  |
| [CVE-2023-53384](https://patchblox.com/security/data/cve/CVE-2023-53384.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53292](https://patchblox.com/security/data/cve/CVE-2023-53292.md) | Routine | blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none | 5.5 | 0.0015 |  |
| [CVE-2025-39772](https://patchblox.com/security/data/cve/CVE-2025-39772.md) | Routine | drm/hisilicon/hibmc: fix the hibmc loaded failed bug | 5.5 | 0.0015 |  |
| [CVE-2025-39844](https://patchblox.com/security/data/cve/CVE-2025-39844.md) | Routine | mm: move page table sync declarations to linux/pgtable.h | 5.5 | 0.0015 |  |
| [CVE-2023-53245](https://patchblox.com/security/data/cve/CVE-2023-53245.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53249](https://patchblox.com/security/data/cve/CVE-2023-53249.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53255](https://patchblox.com/security/data/cve/CVE-2023-53255.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: stratix10-svc: Fix a potential resourc... | 5.5 | 0.0015 |  |
| [CVE-2023-53288](https://patchblox.com/security/data/cve/CVE-2023-53288.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53291](https://patchblox.com/security/data/cve/CVE-2023-53291.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53324](https://patchblox.com/security/data/cve/CVE-2023-53324.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm/mdp5: Don't leak some plane state  Appar... | 5.5 | 0.0015 |  |
| [CVE-2023-53379](https://patchblox.com/security/data/cve/CVE-2023-53379.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53397](https://patchblox.com/security/data/cve/CVE-2023-53397.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53425](https://patchblox.com/security/data/cve/CVE-2023-53425.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53436](https://patchblox.com/security/data/cve/CVE-2023-53436.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53251](https://patchblox.com/security/data/cve/CVE-2023-53251.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53287](https://patchblox.com/security/data/cve/CVE-2023-53287.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53328](https://patchblox.com/security/data/cve/CVE-2023-53328.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53391](https://patchblox.com/security/data/cve/CVE-2023-53391.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53424](https://patchblox.com/security/data/cve/CVE-2023-53424.md) | Routine | clk: mediatek: fix of_iomap memory leak | 5.5 | 0.0015 |  |
| [CVE-2023-53438](https://patchblox.com/security/data/cve/CVE-2023-53438.md) | Routine | x86/MCE: Always save CS register on AMD Zen IF Poison errors | 5.5 | 0.0015 |  |
| [CVE-2023-53170](https://patchblox.com/security/data/cve/CVE-2023-53170.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53248](https://patchblox.com/security/data/cve/CVE-2023-53248.md) | Routine | drm/amdgpu: install stub fence into potential unused fence pointers | 6.0 | 0.0015 |  |
| [CVE-2023-53206](https://patchblox.com/security/data/cve/CVE-2023-53206.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53247](https://patchblox.com/security/data/cve/CVE-2023-53247.md) | Routine | btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand | 5.5 | 0.0015 |  |
| [CVE-2023-53258](https://patchblox.com/security/data/cve/CVE-2023-53258.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix possible underflow for disp... | 5.5 | 0.0015 |  |
| [CVE-2023-53260](https://patchblox.com/security/data/cve/CVE-2023-53260.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53261](https://patchblox.com/security/data/cve/CVE-2023-53261.md) | Routine | coresight: Fix memory leak in acpi_buffer->pointer | 5.5 | 0.0015 |  |
| [CVE-2023-53323](https://patchblox.com/security/data/cve/CVE-2023-53323.md) | Routine | ext2/dax: Fix ext2_setsize when len is page aligned | 5.5 | 0.0015 |  |
| [CVE-2023-53325](https://patchblox.com/security/data/cve/CVE-2023-53325.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53385](https://patchblox.com/security/data/cve/CVE-2023-53385.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53444](https://patchblox.com/security/data/cve/CVE-2023-53444.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/ttm: fix bulk_move corruption when adding a... | 5.5 | 0.0015 |  |
| [CVE-2023-53523](https://patchblox.com/security/data/cve/CVE-2023-53523.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53528](https://patchblox.com/security/data/cve/CVE-2023-53528.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53180](https://patchblox.com/security/data/cve/CVE-2023-53180.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53319](https://patchblox.com/security/data/cve/CVE-2023-53319.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-39754](https://patchblox.com/security/data/cve/CVE-2025-39754.md) | Routine | mm/smaps: fix race between smaps_hugetlb_range and migration | 5.5 | 0.0014 |  |
| [CVE-2025-38681](https://patchblox.com/security/data/cve/CVE-2025-38681.md) | Routine | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | 5.5 | 0.0014 |  |
| [CVE-2023-53368](https://patchblox.com/security/data/cve/CVE-2023-53368.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0014 |  |
| [CVE-2025-38687](https://patchblox.com/security/data/cve/CVE-2025-38687.md) | Routine | comedi: fix race between polling and detaching | 5.5 | 0.0013 |  |
| [CVE-2025-39782](https://patchblox.com/security/data/cve/CVE-2025-39782.md) | Routine | kernel-64kb: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526). | 5.5 | 0.0013 |  |
| [CVE-2023-53303](https://patchblox.com/security/data/cve/CVE-2023-53303.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53527](https://patchblox.com/security/data/cve/CVE-2023-53527.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-39773](https://patchblox.com/security/data/cve/CVE-2025-39773.md) | Routine | net: bridge: fix soft lockup in br_multicast_query_expired() | 5.5 | 0.0012 |  |
| [CVE-2023-53490](https://patchblox.com/security/data/cve/CVE-2023-53490.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0012 |  |
| [CVE-2025-39885](https://patchblox.com/security/data/cve/CVE-2025-39885.md) | Routine | ocfs2: fix recursive semaphore deadlock in fiemap call | 5.5 | 0.0012 |  |
| [CVE-2023-53204](https://patchblox.com/security/data/cve/CVE-2023-53204.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.3 | 0.0012 |  |
| [CVE-2023-53520](https://patchblox.com/security/data/cve/CVE-2023-53520.md) | Routine | kernel-docs: Security update for the Linux Kernel | 4.7 | 0.0012 |  |
| [CVE-2023-53519](https://patchblox.com/security/data/cve/CVE-2023-53519.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2023-53447](https://patchblox.com/security/data/cve/CVE-2023-53447.md) | Routine | f2fs: don't reset unchangable mount option in f2fs_remount() | 4.7 | 0.0011 |  |
| [CVE-2025-39889](https://patchblox.com/security/data/cve/CVE-2025-39889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2023-53183](https://patchblox.com/security/data/cve/CVE-2023-53183.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | n/a |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
