{
  "fix": "SUSE-SU-2025:03633-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03633-1",
  "summary": "SUSE-SU-2025:03633-1, released October 17, 2025, fixes 194 CVEs across 3 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 3 packages",
  "released": "2025-10-17T14:32:41Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-39682, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 194,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.06273,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:03633-1",
  "appliesTo": [
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.15.2",
      "supported": true
    },
    {
      "product": "kernel-source-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.15.2",
      "supported": true
    },
    {
      "product": "kernel-syms-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.15.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39682",
      "url": "https://patchblox.com/security/cve/CVE-2025-39682",
      "title": "tls: fix handling of zero-length records on the rx_list",
      "priority": "Patch now",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.03198,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3867",
      "url": "https://patchblox.com/security/cve/CVE-2023-3867",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.06273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38488",
      "url": "https://patchblox.com/security/cve/CVE-2025-38488",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_0: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues\n\nThe following security...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00772,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38566",
      "url": "https://patchblox.com/security/cve/CVE-2025-38566",
      "title": "sunrpc: fix handling of server side tls alerts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38439",
      "url": "https://patchblox.com/security/cve/CVE-2025-38439",
      "title": "bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38146",
      "url": "https://patchblox.com/security/cve/CVE-2025-38146",
      "title": "net: openvswitch: Fix the dead loop of MPLS parse",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38472",
      "url": "https://patchblox.com/security/cve/CVE-2025-38472",
      "title": "netfilter: nf_conntrack: fix crash due to removal of uninitialised entry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38075",
      "url": "https://patchblox.com/security/cve/CVE-2025-38075",
      "title": "scsi: target: iscsi: Fix timeout on deleted connection",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38527",
      "url": "https://patchblox.com/security/cve/CVE-2025-38527",
      "title": "smb: client: fix use-after-free in cifs_oplock_break",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38676",
      "url": "https://patchblox.com/security/cve/CVE-2025-38676",
      "title": "iommu/amd: Avoid stack buffer overflow from kernel cmdline",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38608",
      "url": "https://patchblox.com/security/cve/CVE-2025-38608",
      "title": "bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38590",
      "url": "https://patchblox.com/security/cve/CVE-2025-38590",
      "title": "net/mlx5e: Remove skb secpath if xfrm state is not found",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38660",
      "url": "https://patchblox.com/security/cve/CVE-2025-38660",
      "title": "[ceph] parse_longname(): strrchr() expects NUL-terminated string",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38563",
      "url": "https://patchblox.com/security/cve/CVE-2025-38563",
      "title": "perf/core: Prevent VMA split of buffer mappings",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38617",
      "url": "https://patchblox.com/security/cve/CVE-2025-38617",
      "title": "net/packet: fix a race in packet_set_ring() and packet_notifier()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39703",
      "url": "https://patchblox.com/security/cve/CVE-2025-39703",
      "title": "net, hsr: reject HSR frame if skb can\u0027t hold tag",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38574",
      "url": "https://patchblox.com/security/cve/CVE-2025-38574",
      "title": "pptp: ensure minimal skb length in pptp_xmit()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40300",
      "url": "https://patchblox.com/security/cve/CVE-2025-40300",
      "title": "x86/vmscape: Add conditional IBPB mitigation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00378,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38490",
      "url": "https://patchblox.com/security/cve/CVE-2025-38490",
      "title": "net: libwx: remove duplicate page_pool_put_full_page()",
      "priority": "High",
      "severity": "high",
      "cvss": 9.8,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38571",
      "url": "https://patchblox.com/security/cve/CVE-2025-38571",
      "title": "sunrpc: fix client side handling of tls alerts",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00348,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38533",
      "url": "https://patchblox.com/security/cve/CVE-2025-38533",
      "title": "net: libwx: fix the using of Rx buffer DMA",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37885",
      "url": "https://patchblox.com/security/cve/CVE-2025-37885",
      "title": "KVM: x86: Reset IRTE to host control if *new* route isn\u0027t postable",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38678",
      "url": "https://patchblox.com/security/cve/CVE-2025-38678",
      "title": "netfilter: nf_tables: reject duplicate device on updates",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5633",
      "url": "https://patchblox.com/security/cve/CVE-2023-5633",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38601",
      "url": "https://patchblox.com/security/cve/CVE-2025-38601",
      "title": "wifi: ath11k: clear initialized flag for deinit-ed srng lists",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38512",
      "url": "https://patchblox.com/security/cve/CVE-2025-38512",
      "title": "wifi: prevent A-MSDU attacks in mesh networks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38201",
      "url": "https://patchblox.com/security/cve/CVE-2025-38201",
      "title": "netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38491",
      "url": "https://patchblox.com/security/cve/CVE-2025-38491",
      "title": "mptcp: make fallback action and fallback decision atomic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38466",
      "url": "https://patchblox.com/security/cve/CVE-2025-38466",
      "title": "perf: Revert to requiring CAP_SYS_ADMIN for uprobes",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38103",
      "url": "https://patchblox.com/security/cve/CVE-2025-38103",
      "title": "HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38184",
      "url": "https://patchblox.com/security/cve/CVE-2025-38184",
      "title": "tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38585",
      "url": "https://patchblox.com/security/cve/CVE-2025-38585",
      "title": "staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38464",
      "url": "https://patchblox.com/security/cve/CVE-2025-38464",
      "title": "tipc: Fix use-after-free in tipc_conn_close().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38582",
      "url": "https://patchblox.com/security/cve/CVE-2025-38582",
      "title": "RDMA/hns: Fix double destruction of rsv_qp",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38595",
      "url": "https://patchblox.com/security/cve/CVE-2025-38595",
      "title": "xen: fix UAF in dmabuf_exp_from_pages()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39677",
      "url": "https://patchblox.com/security/cve/CVE-2025-39677",
      "title": "net/sched: Fix backlog accounting in qdisc_dequeue_internal",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38616",
      "url": "https://patchblox.com/security/cve/CVE-2025-38616",
      "title": "tls: handle data disappearing from under the TLS ULP",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38656",
      "url": "https://patchblox.com/security/cve/CVE-2025-38656",
      "title": "wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38459",
      "url": "https://patchblox.com/security/cve/CVE-2025-38459",
      "title": "atm: clip: Fix infinite recursive call of clip_push().",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38722",
      "url": "https://patchblox.com/security/cve/CVE-2025-38722",
      "title": "habanalabs: fix UAF in export_dmabuf()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22022",
      "url": "https://patchblox.com/security/cve/CVE-2025-22022",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38445",
      "url": "https://patchblox.com/security/cve/CVE-2025-38445",
      "title": "md/raid1: Fix stack memory use after return in raid1_reshape",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38125",
      "url": "https://patchblox.com/security/cve/CVE-2025-38125",
      "title": "net: stmmac: make sure that ptp_rate is not 0 before configuring EST",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38529",
      "url": "https://patchblox.com/security/cve/CVE-2025-38529",
      "title": "comedi: aio_iiro_16: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38530",
      "url": "https://patchblox.com/security/cve/CVE-2025-38530",
      "title": "comedi: pcl812: Fix bit shift out of bounds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38119",
      "url": "https://patchblox.com/security/cve/CVE-2025-38119",
      "title": "scsi: core: ufs: Fix a hang in the error handler",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38605",
      "url": "https://patchblox.com/security/cve/CVE-2025-38605",
      "title": "wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38458",
      "url": "https://patchblox.com/security/cve/CVE-2025-38458",
      "title": "atm: clip: Fix NULL pointer dereference in vcc_sendmsg()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39691",
      "url": "https://patchblox.com/security/cve/CVE-2025-39691",
      "title": "fs/buffer: fix use-after-free when call bh_read() helper",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38351",
      "url": "https://patchblox.com/security/cve/CVE-2025-38351",
      "title": "KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38565",
      "url": "https://patchblox.com/security/cve/CVE-2025-38565",
      "title": "perf/core: Exit early on perf_mmap() fail",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38572",
      "url": "https://patchblox.com/security/cve/CVE-2025-38572",
      "title": "ipv6: reject malicious packets in ipv6_gso_segment()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38456",
      "url": "https://patchblox.com/security/cve/CVE-2025-38456",
      "title": "ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38701",
      "url": "https://patchblox.com/security/cve/CVE-2025-38701",
      "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38245",
      "url": "https://patchblox.com/security/cve/CVE-2025-38245",
      "title": "atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38538",
      "url": "https://patchblox.com/security/cve/CVE-2025-38538",
      "title": "dmaengine: nbpfaxi: Fix memory corruption in probe()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38499",
      "url": "https://patchblox.com/security/cve/CVE-2025-38499",
      "title": "clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38535",
      "url": "https://patchblox.com/security/cve/CVE-2025-38535",
      "title": "phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38555",
      "url": "https://patchblox.com/security/cve/CVE-2025-38555",
      "title": "usb: gadget : fix use-after-free in composite_dev_cleanup()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38614",
      "url": "https://patchblox.com/security/cve/CVE-2025-38614",
      "title": "eventpoll: Fix semi-unbounded recursion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39766",
      "url": "https://patchblox.com/security/cve/CVE-2025-39766",
      "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38581",
      "url": "https://patchblox.com/security/cve/CVE-2025-38581",
      "title": "crypto: ccp - Fix crash when rebind ccp device for ccp.ko",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38684",
      "url": "https://patchblox.com/security/cve/CVE-2025-38684",
      "title": "net/sched: ets: use old \u0027nbands\u0027 while purging unused classes",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38732",
      "url": "https://patchblox.com/security/cve/CVE-2025-38732",
      "title": "netfilter: nf_reject: don\u0027t leak dst refcount for loopback packets",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38548",
      "url": "https://patchblox.com/security/cve/CVE-2025-38548",
      "title": "hwmon: (corsair-cpro) Validate the size of the received input buffer",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38584",
      "url": "https://patchblox.com/security/cve/CVE-2025-38584",
      "title": "padata: Fix pd UAF once and for all",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38618",
      "url": "https://patchblox.com/security/cve/CVE-2025-38618",
      "title": "vsock: Do not allow binding to VMADDR_PORT_ANY",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38160",
      "url": "https://patchblox.com/security/cve/CVE-2025-38160",
      "title": "clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38208",
      "url": "https://patchblox.com/security/cve/CVE-2025-38208",
      "title": "smb: client: add NULL check in automount_fullpath",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39823",
      "url": "https://patchblox.com/security/cve/CVE-2025-39823",
      "title": "KVM: x86: use array_index_nospec with indices that come from guest",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38560",
      "url": "https://patchblox.com/security/cve/CVE-2025-38560",
      "title": "x86/sev: Evict cache lines during SNP memory validation",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38216",
      "url": "https://patchblox.com/security/cve/CVE-2025-38216",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38593",
      "url": "https://patchblox.com/security/cve/CVE-2025-38593",
      "title": "Bluetooth: hci_sync: fix double free in \u0027hci_discovery_filter_clear()\u0027",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38568",
      "url": "https://patchblox.com/security/cve/CVE-2025-38568",
      "title": "net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38703",
      "url": "https://patchblox.com/security/cve/CVE-2025-38703",
      "title": "drm/xe: Make dma-fences compliant with the safe access rules",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39738",
      "url": "https://patchblox.com/security/cve/CVE-2025-39738",
      "title": "btrfs: do not allow relocation of partially dropped subvolumes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39749",
      "url": "https://patchblox.com/security/cve/CVE-2025-39749",
      "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38550",
      "url": "https://patchblox.com/security/cve/CVE-2025-38550",
      "title": "ipv6: mcast: Delay put pmc-\u003Eidev in mld_del_delrec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38730",
      "url": "https://patchblox.com/security/cve/CVE-2025-38730",
      "title": "io_uring/net: commit partial buffers on retry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39835",
      "url": "https://patchblox.com/security/cve/CVE-2025-39835",
      "title": "xfs: do not propagate ENODATA disk errors into xattr code",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38679",
      "url": "https://patchblox.com/security/cve/CVE-2025-38679",
      "title": "media: venus: Fix OOB read due to missing payload bound check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38556",
      "url": "https://patchblox.com/security/cve/CVE-2025-38556",
      "title": "HID: core: Harden s32ton() against conversion to 0 bits",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38668",
      "url": "https://patchblox.com/security/cve/CVE-2025-38668",
      "title": "regulator: core: fix NULL dereference on unbind due to stale coupling data",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38500",
      "url": "https://patchblox.com/security/cve/CVE-2025-38500",
      "title": "xfrm: interface: fix use-after-free after changing collect_md xfrm interface",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38587",
      "url": "https://patchblox.com/security/cve/CVE-2025-38587",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39718",
      "url": "https://patchblox.com/security/cve/CVE-2025-39718",
      "title": "vsock/virtio: Validate length in packet header before skb_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38670",
      "url": "https://patchblox.com/security/cve/CVE-2025-38670",
      "title": "arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38609",
      "url": "https://patchblox.com/security/cve/CVE-2025-38609",
      "title": "PM / devfreq: Check governor before using governor-\u003Ename",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38521",
      "url": "https://patchblox.com/security/cve/CVE-2025-38521",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38543",
      "url": "https://patchblox.com/security/cve/CVE-2025-38543",
      "title": "drm/tegra: nvdec: Fix dma_alloc_coherent error check",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.1,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39744",
      "url": "https://patchblox.com/security/cve/CVE-2025-39744",
      "title": "rcu: Fix rcu_read_unlock() deadloop due to IRQ work",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38710",
      "url": "https://patchblox.com/security/cve/CVE-2025-38710",
      "title": "gfs2: Validate i_depth for exhash directories",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39865",
      "url": "https://patchblox.com/security/cve/CVE-2025-39865",
      "title": "tee: fix NULL pointer dereference in tee_shm_put",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39838",
      "url": "https://patchblox.com/security/cve/CVE-2025-39838",
      "title": "cifs: prevent NULL pointer dereference in UTF16 conversion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39746",
      "url": "https://patchblox.com/security/cve/CVE-2025-39746",
      "title": "wifi: ath10k: shutdown driver when hardware is unreliable",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39711",
      "url": "https://patchblox.com/security/cve/CVE-2025-39711",
      "title": "media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38665",
      "url": "https://patchblox.com/security/cve/CVE-2025-38665",
      "title": "can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38709",
      "url": "https://patchblox.com/security/cve/CVE-2025-38709",
      "title": "loop: Avoid updating block size under exclusive owner",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39922",
      "url": "https://patchblox.com/security/cve/CVE-2025-39922",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38440",
      "url": "https://patchblox.com/security/cve/CVE-2025-38440",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39825",
      "url": "https://patchblox.com/security/cve/CVE-2025-39825",
      "title": "smb: client: fix race with concurrent opens in rename(2)",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4130",
      "url": "https://patchblox.com/security/cve/CVE-2023-4130",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00509,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38526",
      "url": "https://patchblox.com/security/cve/CVE-2025-38526",
      "title": "ice: add NULL check in eswitch lag check",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38514",
      "url": "https://patchblox.com/security/cve/CVE-2025-38514",
      "title": "rxrpc: Fix oops due to non-existence of prealloc backlog struct",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39770",
      "url": "https://patchblox.com/security/cve/CVE-2025-39770",
      "title": "net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.7,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58239",
      "url": "https://patchblox.com/security/cve/CVE-2024-58239",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.0036,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4515",
      "url": "https://patchblox.com/security/cve/CVE-2023-4515",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38524",
      "url": "https://patchblox.com/security/cve/CVE-2025-38524",
      "title": "rxrpc: Fix recv-recv race of completed call",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39857",
      "url": "https://patchblox.com/security/cve/CVE-2025-39857",
      "title": "net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58090",
      "url": "https://patchblox.com/security/cve/CVE-2024-58090",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26661",
      "url": "https://patchblox.com/security/cve/CVE-2024-26661",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38591",
      "url": "https://patchblox.com/security/cve/CVE-2025-38591",
      "title": "bpf: Reject narrower access to pointer ctx fields",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38190",
      "url": "https://patchblox.com/security/cve/CVE-2025-38190",
      "title": "atm: Revert atm_account_tx() if copy_from_iter_full() fails.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38597",
      "url": "https://patchblox.com/security/cve/CVE-2025-38597",
      "title": "drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38705",
      "url": "https://patchblox.com/security/cve/CVE-2025-38705",
      "title": "drm/amd/pm: fix null pointer access",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39705",
      "url": "https://patchblox.com/security/cve/CVE-2025-39705",
      "title": "drm/amd/display: fix a Null pointer dereference vulnerability",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38408",
      "url": "https://patchblox.com/security/cve/CVE-2025-38408",
      "title": "genirq/irq_sim: Initialize work context pointers properly",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38185",
      "url": "https://patchblox.com/security/cve/CVE-2025-38185",
      "title": "atm: atmtcp: Free invalid length skb in atmtcp_c_send().",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38006",
      "url": "https://patchblox.com/security/cve/CVE-2025-38006",
      "title": "net: mctp: Don\u0027t access ifa_index when missing",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38441",
      "url": "https://patchblox.com/security/cve/CVE-2025-38441",
      "title": "kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38418",
      "url": "https://patchblox.com/security/cve/CVE-2025-38418",
      "title": "remoteproc: core: Release rproc-\u003Eclean_table after rproc_attach() fails",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38419",
      "url": "https://patchblox.com/security/cve/CVE-2025-38419",
      "title": "remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38639",
      "url": "https://patchblox.com/security/cve/CVE-2025-38639",
      "title": "netfilter: xt_nfacct: don\u0027t assume acct name is null-terminated",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39830",
      "url": "https://patchblox.com/security/cve/CVE-2025-39830",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: HWS, Fix memory leak in hws_pool_buddy...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39834",
      "url": "https://patchblox.com/security/cve/CVE-2025-39834",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: HWS, Fix memory leak in hws_action_get...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38643",
      "url": "https://patchblox.com/security/cve/CVE-2025-38643",
      "title": "wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38622",
      "url": "https://patchblox.com/security/cve/CVE-2025-38622",
      "title": "net: drop UFO packets in udp_rcv_segment()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38664",
      "url": "https://patchblox.com/security/cve/CVE-2025-38664",
      "title": "ice: Fix a null pointer dereference in ice_copy_and_init_pkg()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39681",
      "url": "https://patchblox.com/security/cve/CVE-2025-39681",
      "title": "x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38205",
      "url": "https://patchblox.com/security/cve/CVE-2025-38205",
      "title": "drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38513",
      "url": "https://patchblox.com/security/cve/CVE-2025-38513",
      "title": "wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38516",
      "url": "https://patchblox.com/security/cve/CVE-2025-38516",
      "title": "pinctrl: qcom: msm: mark certain pins as invalid for interrupts",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38528",
      "url": "https://patchblox.com/security/cve/CVE-2025-38528",
      "title": "bpf: Reject %p% format string in bprintf-like helpers",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38540",
      "url": "https://patchblox.com/security/cve/CVE-2025-38540",
      "title": "HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38546",
      "url": "https://patchblox.com/security/cve/CVE-2025-38546",
      "title": "atm: clip: Fix memory leak of struct clip_vcc.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38612",
      "url": "https://patchblox.com/security/cve/CVE-2025-38612",
      "title": "staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38635",
      "url": "https://patchblox.com/security/cve/CVE-2025-38635",
      "title": "clk: davinci: Add NULL check in davinci_lpsc_clk_register()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38663",
      "url": "https://patchblox.com/security/cve/CVE-2025-38663",
      "title": "nilfs2: reject invalid file types when reading inodes",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38444",
      "url": "https://patchblox.com/security/cve/CVE-2025-38444",
      "title": "raid10: cleanup memleak at raid10_make_request",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38251",
      "url": "https://patchblox.com/security/cve/CVE-2025-38251",
      "title": "atm: clip: prevent NULL deref in clip_push()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38263",
      "url": "https://patchblox.com/security/cve/CVE-2025-38263",
      "title": "bcache: fix NULL pointer in cache_set_flush()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38604",
      "url": "https://patchblox.com/security/cve/CVE-2025-38604",
      "title": "wifi: rtl818x: Kill URBs before clearing tx status queue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38402",
      "url": "https://patchblox.com/security/cve/CVE-2025-38402",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38531",
      "url": "https://patchblox.com/security/cve/CVE-2025-38531",
      "title": "iio: common: st_sensors: Fix use of uninitialize device structs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38721",
      "url": "https://patchblox.com/security/cve/CVE-2025-38721",
      "title": "netfilter: ctnetlink: fix refcount leak on table dump",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38630",
      "url": "https://patchblox.com/security/cve/CVE-2025-38630",
      "title": "fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38640",
      "url": "https://patchblox.com/security/cve/CVE-2025-38640",
      "title": "bpf: Disable migration in nf_hook_run_bpf().",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58238",
      "url": "https://patchblox.com/security/cve/CVE-2024-58238",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39764",
      "url": "https://patchblox.com/security/cve/CVE-2025-39764",
      "title": "netfilter: ctnetlink: remove refcounting in expectation dumpers",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38234",
      "url": "https://patchblox.com/security/cve/CVE-2025-38234",
      "title": "sched/rt: Fix race in push_rt_task",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38659",
      "url": "https://patchblox.com/security/cve/CVE-2025-38659",
      "title": "gfs2: No more self recovery",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39787",
      "url": "https://patchblox.com/security/cve/CVE-2025-39787",
      "title": "soc: qcom: mdt_loader: Ensure we don\u0027t read past the ELF header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-46733",
      "url": "https://patchblox.com/security/cve/CVE-2024-46733",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38511",
      "url": "https://patchblox.com/security/cve/CVE-2025-38511",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38576",
      "url": "https://patchblox.com/security/cve/CVE-2025-38576",
      "title": "powerpc/eeh: Make EEH driver device hotplug safe",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39842",
      "url": "https://patchblox.com/security/cve/CVE-2025-39842",
      "title": "ocfs2: prevent release journal inode after journal shutdown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38515",
      "url": "https://patchblox.com/security/cve/CVE-2025-38515",
      "title": "drm/sched: Increment job count before swapping tail spsc queue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38623",
      "url": "https://patchblox.com/security/cve/CVE-2025-38623",
      "title": "PCI: pnv_php: Fix surprise plug detection and recovery",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38624",
      "url": "https://patchblox.com/security/cve/CVE-2025-38624",
      "title": "PCI: pnv_php: Clean up allocated IRQs on unplug",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38602",
      "url": "https://patchblox.com/security/cve/CVE-2025-38602",
      "title": "iwlwifi: Add missing check for alloc_ordered_workqueue",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38671",
      "url": "https://patchblox.com/security/cve/CVE-2025-38671",
      "title": "i2c: qup: jump out of the loop in case of timeout",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38588",
      "url": "https://patchblox.com/security/cve/CVE-2025-38588",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38610",
      "url": "https://patchblox.com/security/cve/CVE-2025-38610",
      "title": "powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38628",
      "url": "https://patchblox.com/security/cve/CVE-2025-38628",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38644",
      "url": "https://patchblox.com/security/cve/CVE-2025-38644",
      "title": "wifi: mac80211: reject TDLS operations when station is not associated",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38255",
      "url": "https://patchblox.com/security/cve/CVE-2025-38255",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38510",
      "url": "https://patchblox.com/security/cve/CVE-2025-38510",
      "title": "kasan: remove kasan_find_vm_area() to prevent possible deadlock",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38583",
      "url": "https://patchblox.com/security/cve/CVE-2025-38583",
      "title": "clk: xilinx: vcu: unregister pll_post only if registered correctly",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38634",
      "url": "https://patchblox.com/security/cve/CVE-2025-38634",
      "title": "power: supply: cpcap-charger: Fix null check for power_supply_get_by_name",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38645",
      "url": "https://patchblox.com/security/cve/CVE-2025-38645",
      "title": "net/mlx5: Check device memory pointer before usage",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38646",
      "url": "https://patchblox.com/security/cve/CVE-2025-38646",
      "title": "wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38621",
      "url": "https://patchblox.com/security/cve/CVE-2025-38621",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38503",
      "url": "https://patchblox.com/security/cve/CVE-2025-38503",
      "title": "btrfs: fix assertion when building free space tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38537",
      "url": "https://patchblox.com/security/cve/CVE-2025-38537",
      "title": "net: phy: Don\u0027t register LEDs for genphy",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38544",
      "url": "https://patchblox.com/security/cve/CVE-2025-38544",
      "title": "rxrpc: Fix bug due to prealloc collision",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39678",
      "url": "https://patchblox.com/security/cve/CVE-2025-39678",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39695",
      "url": "https://patchblox.com/security/cve/CVE-2025-39695",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/rxe: Flush delayed SKBs while releasing RXE...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38541",
      "url": "https://patchblox.com/security/cve/CVE-2025-38541",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39747",
      "url": "https://patchblox.com/security/cve/CVE-2025-39747",
      "title": "drm/msm: Add error handling for krealloc in metadata setup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39807",
      "url": "https://patchblox.com/security/cve/CVE-2025-39807",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/mediatek: Add error handling for old state C...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39811",
      "url": "https://patchblox.com/security/cve/CVE-2025-39811",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/vm: Clear the scratch_pt pointer on error...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39707",
      "url": "https://patchblox.com/security/cve/CVE-2025-39707",
      "title": "drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39890",
      "url": "https://patchblox.com/security/cve/CVE-2025-39890",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath12k: fix memory leak in ath12k_service_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39816",
      "url": "https://patchblox.com/security/cve/CVE-2025-39816",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: always use READ_ONCE() to read ri...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53261",
      "url": "https://patchblox.com/security/cve/CVE-2023-53261",
      "title": "coresight: Fix memory leak in acpi_buffer-\u003Epointer",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38632",
      "url": "https://patchblox.com/security/cve/CVE-2025-38632",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39754",
      "url": "https://patchblox.com/security/cve/CVE-2025-39754",
      "title": "mm/smaps: fix race between smaps_hugetlb_range and migration",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38650",
      "url": "https://patchblox.com/security/cve/CVE-2025-38650",
      "title": "hfsplus: remove mutex_lock check in hfsplus_free_extents",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39782",
      "url": "https://patchblox.com/security/cve/CVE-2025-39782",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: prevent softlockup in jbd2_log_do_checkpoi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38520",
      "url": "https://patchblox.com/security/cve/CVE-2025-38520",
      "title": "drm/amdkfd: Don\u0027t call mmput from MMU notifier callback",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38506",
      "url": "https://patchblox.com/security/cve/CVE-2025-38506",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39773",
      "url": "https://patchblox.com/security/cve/CVE-2025-39773",
      "title": "net: bridge: fix soft lockup in br_multicast_query_expired()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39885",
      "url": "https://patchblox.com/security/cve/CVE-2025-39885",
      "title": "ocfs2: fix recursive semaphore deadlock in fiemap call",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38553",
      "url": "https://patchblox.com/security/cve/CVE-2025-38553",
      "title": "net/sched: Restrict conditions for adding duplicating netems to qdisc tree",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}