# SUSE-SU-2025:03634-1: Security update for 3 packages

SUSE-SU-2025:03634-1, released October 17, 2025, fixes 444 CVEs across 3 products. One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-03634-1
- Platform: Linux
- Released: Oct 17, 2025
- Priority: Patch now (Closes CVE-2025-39682, exploited (CISA KEV))
- CVEs: 444, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:03634-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.52.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.6 | 6.4.0-150600.8.52.1 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.52.1 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.6 | 6.4.0-150600.8.52.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.52.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.6 | 6.4.0-150600.8.52.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-39682](https://patchblox.com/security/data/cve/CVE-2025-39682.md) | Patch now | tls: fix handling of zero-length records on the rx_list | 9.8 | 0.0331 | CISA KEV |
| [CVE-2025-39907](https://patchblox.com/security/data/cve/CVE-2025-39907.md) | Urgent | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer | 9.8 | 0.0015 |  |
| [CVE-2025-39925](https://patchblox.com/security/data/cve/CVE-2025-39925.md) | Urgent | can: j1939: implement NETDEV_UNREGISTER notification handler | 9.8 | 0.0015 |  |
| [CVE-2023-3867](https://patchblox.com/security/data/cve/CVE-2023-3867.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0627 |  |
| [CVE-2023-31248](https://patchblox.com/security/data/cve/CVE-2023-31248.md) | High | linux: Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to ch... | 7.8 | 0.0189 |  |
| [CVE-2023-39197](https://patchblox.com/security/data/cve/CVE-2023-39197.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0094 |  |
| [CVE-2025-38488](https://patchblox.com/security/data/cve/CVE-2025-38488.md) | High | kernel-64kb: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239). | 7.8 | 0.0077 |  |
| [CVE-2024-26584](https://patchblox.com/security/data/cve/CVE-2024-26584.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0075 |  |
| [CVE-2025-38566](https://patchblox.com/security/data/cve/CVE-2025-38566.md) | High | sunrpc: fix handling of server side tls alerts | 8.1 | 0.0067 |  |
| [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 |  |
| [CVE-2023-53338](https://patchblox.com/security/data/cve/CVE-2023-53338.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0055 |  |
| [CVE-2023-42753](https://patchblox.com/security/data/cve/CVE-2023-42753.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0051 |  |
| [CVE-2025-38146](https://patchblox.com/security/data/cve/CVE-2025-38146.md) | High | net: openvswitch: Fix the dead loop of MPLS parse | 7.8 | 0.0049 |  |
| [CVE-2025-38734](https://patchblox.com/security/data/cve/CVE-2025-38734.md) | High | net/smc: fix UAF on smcsk after smc_listen_out() | 7.8 | 0.0048 |  |
| [CVE-2025-38472](https://patchblox.com/security/data/cve/CVE-2025-38472.md) | High | netfilter: nf_conntrack: fix crash due to removal of uninitialised entry | 7.5 | 0.0046 |  |
| [CVE-2025-38075](https://patchblox.com/security/data/cve/CVE-2025-38075.md) | High | scsi: target: iscsi: Fix timeout on deleted connection | 7.0 | 0.0046 |  |
| [CVE-2025-38527](https://patchblox.com/security/data/cve/CVE-2025-38527.md) | High | smb: client: fix use-after-free in cifs_oplock_break | 7.8 | 0.0046 |  |
| [CVE-2025-38563](https://patchblox.com/security/data/cve/CVE-2025-38563.md) | High | perf/core: Prevent VMA split of buffer mappings | 7.8 | 0.0044 |  |
| [CVE-2025-38608](https://patchblox.com/security/data/cve/CVE-2025-38608.md) | High | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 7.1 | 0.0044 |  |
| [CVE-2025-38590](https://patchblox.com/security/data/cve/CVE-2025-38590.md) | High | net/mlx5e: Remove skb secpath if xfrm state is not found | 7.5 | 0.0044 |  |
| [CVE-2025-38617](https://patchblox.com/security/data/cve/CVE-2025-38617.md) | High | net/packet: fix a race in packet_set_ring() and packet_notifier() | 7.0 | 0.0043 |  |
| [CVE-2025-38676](https://patchblox.com/security/data/cve/CVE-2025-38676.md) | High | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 7.8 | 0.0042 |  |
| [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0041 |  |
| [CVE-2025-38724](https://patchblox.com/security/data/cve/CVE-2025-38724.md) | High | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | 7.8 | 0.0041 |  |
| [CVE-2025-38660](https://patchblox.com/security/data/cve/CVE-2025-38660.md) | High | [ceph] parse_longname(): strrchr() expects NUL-terminated string | 7.1 | 0.0041 |  |
| [CVE-2025-39703](https://patchblox.com/security/data/cve/CVE-2025-39703.md) | High | net, hsr: reject HSR frame if skb can't hold tag | 7.0 | 0.0039 |  |
| [CVE-2023-53192](https://patchblox.com/security/data/cve/CVE-2023-53192.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0039 |  |
| [CVE-2025-40300](https://patchblox.com/security/data/cve/CVE-2025-40300.md) | High | x86/vmscape: Add conditional IBPB mitigation | 7.3 | 0.0038 |  |
| [CVE-2025-38571](https://patchblox.com/security/data/cve/CVE-2025-38571.md) | High | sunrpc: fix client side handling of tls alerts | 8.1 | 0.0037 |  |
| [CVE-2025-38490](https://patchblox.com/security/data/cve/CVE-2025-38490.md) | High | net: libwx: remove duplicate page_pool_put_full_page() | 9.8 | 0.0036 |  |
| [CVE-2024-58240](https://patchblox.com/security/data/cve/CVE-2024-58240.md) | High | tls: separate no-async decryption request handling from async | 7.8 | 0.0034 |  |
| [CVE-2025-38533](https://patchblox.com/security/data/cve/CVE-2025-38533.md) | High | net: libwx: fix the using of Rx buffer DMA | 7.8 | 0.0033 |  |
| [CVE-2025-37885](https://patchblox.com/security/data/cve/CVE-2025-37885.md) | High | KVM: x86: Reset IRTE to host control if *new* route isn't postable | 7.8 | 0.0032 |  |
| [CVE-2025-38678](https://patchblox.com/security/data/cve/CVE-2025-38678.md) | High | netfilter: nf_tables: reject duplicate device on updates | 7.1 | 0.0029 |  |
| [CVE-2023-53333](https://patchblox.com/security/data/cve/CVE-2023-53333.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 |  |
| [CVE-2025-38601](https://patchblox.com/security/data/cve/CVE-2025-38601.md) | High | wifi: ath11k: clear initialized flag for deinit-ed srng lists | 7.0 | 0.0027 |  |
| [CVE-2025-39839](https://patchblox.com/security/data/cve/CVE-2025-39839.md) | High | batman-adv: fix OOB read/write in network-coding decode | 7.1 | 0.0026 |  |
| [CVE-2025-38585](https://patchblox.com/security/data/cve/CVE-2025-38585.md) | High | staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() | 7.8 | 0.0025 |  |
| [CVE-2025-38512](https://patchblox.com/security/data/cve/CVE-2025-38512.md) | High | wifi: prevent A-MSDU attacks in mesh networks | 7.8 | 0.0025 |  |
| [CVE-2023-53226](https://patchblox.com/security/data/cve/CVE-2023-53226.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2025-38491](https://patchblox.com/security/data/cve/CVE-2025-38491.md) | High | mptcp: make fallback action and fallback decision atomic | 7.0 | 0.0024 |  |
| [CVE-2025-38201](https://patchblox.com/security/data/cve/CVE-2025-38201.md) | High | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX | 7.8 | 0.0024 |  |
| [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-39750](https://patchblox.com/security/data/cve/CVE-2025-39750.md) | High | wifi: ath12k: Correct tid cleanup when tid setup fails | 7.1 | 0.0024 |  |
| [CVE-2025-39761](https://patchblox.com/security/data/cve/CVE-2025-39761.md) | High | wifi: ath12k: Decrement TID on RX peer frag setup error handling | 7.1 | 0.0024 |  |
| [CVE-2025-39864](https://patchblox.com/security/data/cve/CVE-2025-39864.md) | High | wifi: cfg80211: fix use-after-free in cmp_bss() | 7.8 | 0.0024 |  |
| [CVE-2023-53454](https://patchblox.com/security/data/cve/CVE-2023-53454.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-53305](https://patchblox.com/security/data/cve/CVE-2023-53305.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-38466](https://patchblox.com/security/data/cve/CVE-2025-38466.md) | High | perf: Revert to requiring CAP_SYS_ADMIN for uprobes | 7.8 | 0.0023 |  |
| [CVE-2025-39860](https://patchblox.com/security/data/cve/CVE-2025-39860.md) | High | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 7.8 | 0.0023 |  |
| [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 |  |
| [CVE-2025-38582](https://patchblox.com/security/data/cve/CVE-2025-38582.md) | High | RDMA/hns: Fix double destruction of rsv_qp | 7.8 | 0.0023 |  |
| [CVE-2025-38595](https://patchblox.com/security/data/cve/CVE-2025-38595.md) | High | xen: fix UAF in dmabuf_exp_from_pages() | 7.8 | 0.0023 |  |
| [CVE-2025-38184](https://patchblox.com/security/data/cve/CVE-2025-38184.md) | High | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 7.0 | 0.0022 |  |
| [CVE-2025-39849](https://patchblox.com/security/data/cve/CVE-2025-39849.md) | High | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 |  |
| [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 |  |
| [CVE-2023-53374](https://patchblox.com/security/data/cve/CVE-2023-53374.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-39826](https://patchblox.com/security/data/cve/CVE-2025-39826.md) | High | net: rose: convert 'use' field to refcount_t | 7.0 | 0.0022 |  |
| [CVE-2023-53322](https://patchblox.com/security/data/cve/CVE-2023-53322.md) | High | kernel-azure: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53257](https://patchblox.com/security/data/cve/CVE-2023-53257.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-39677](https://patchblox.com/security/data/cve/CVE-2025-39677.md) | High | net/sched: Fix backlog accounting in qdisc_dequeue_internal | 7.0 | 0.0021 |  |
| [CVE-2025-38616](https://patchblox.com/security/data/cve/CVE-2025-38616.md) | High | tls: handle data disappearing from under the TLS ULP | 7.1 | 0.0021 |  |
| [CVE-2025-38605](https://patchblox.com/security/data/cve/CVE-2025-38605.md) | High | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | 7.0 | 0.0021 |  |
| [CVE-2023-53343](https://patchblox.com/security/data/cve/CVE-2023-53343.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53432](https://patchblox.com/security/data/cve/CVE-2023-53432.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-38656](https://patchblox.com/security/data/cve/CVE-2025-38656.md) | High | wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() | 7.8 | 0.0021 |  |
| [CVE-2025-39732](https://patchblox.com/security/data/cve/CVE-2025-39732.md) | High | wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() | 7.0 | 0.0021 |  |
| [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 |  |
| [CVE-2023-53354](https://patchblox.com/security/data/cve/CVE-2023-53354.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 |  |
| [CVE-2025-38722](https://patchblox.com/security/data/cve/CVE-2025-38722.md) | High | habanalabs: fix UAF in export_dmabuf() | 7.8 | 0.0021 |  |
| [CVE-2025-22022](https://patchblox.com/security/data/cve/CVE-2025-22022.md) | High | kernel-64kb: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292). | 7.8 | 0.0020 |  |
| [CVE-2025-38565](https://patchblox.com/security/data/cve/CVE-2025-38565.md) | High | perf/core: Exit early on perf_mmap() fail | 7.8 | 0.0020 |  |
| [CVE-2025-38572](https://patchblox.com/security/data/cve/CVE-2025-38572.md) | High | ipv6: reject malicious packets in ipv6_gso_segment() | 7.8 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 |  |
| [CVE-2025-39810](https://patchblox.com/security/data/cve/CVE-2025-39810.md) | High | bnxt_en: Fix memory corruption when FW resources change during ifdown | 7.8 | 0.0020 |  |
| [CVE-2023-53357](https://patchblox.com/security/data/cve/CVE-2023-53357.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 |  |
| [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 |  |
| [CVE-2025-38125](https://patchblox.com/security/data/cve/CVE-2025-38125.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring EST | 7.0 | 0.0020 |  |
| [CVE-2025-38555](https://patchblox.com/security/data/cve/CVE-2025-38555.md) | High | usb: gadget : fix use-after-free in composite_dev_cleanup() | 7.8 | 0.0020 |  |
| [CVE-2025-39686](https://patchblox.com/security/data/cve/CVE-2025-39686.md) | High | comedi: Make insn_rw_emulate_bits() do insn->n samples | 7.8 | 0.0020 |  |
| [CVE-2025-39701](https://patchblox.com/security/data/cve/CVE-2025-39701.md) | High | ACPI: pfr_update: Fix the driver update version check | 7.8 | 0.0020 |  |
| [CVE-2025-38529](https://patchblox.com/security/data/cve/CVE-2025-38529.md) | High | comedi: aio_iiro_16: Fix bit shift out of bounds | 7.1 | 0.0020 |  |
| [CVE-2025-38530](https://patchblox.com/security/data/cve/CVE-2025-38530.md) | High | comedi: pcl812: Fix bit shift out of bounds | 7.1 | 0.0020 |  |
| [CVE-2025-39850](https://patchblox.com/security/data/cve/CVE-2025-39850.md) | High | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 7.0 | 0.0020 |  |
| [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 |  |
| [CVE-2025-38614](https://patchblox.com/security/data/cve/CVE-2025-38614.md) | High | eventpoll: Fix semi-unbounded recursion | 7.5 | 0.0020 |  |
| [CVE-2025-38119](https://patchblox.com/security/data/cve/CVE-2025-38119.md) | High | scsi: core: ufs: Fix a hang in the error handler | 7.0 | 0.0020 |  |
| [CVE-2023-53365](https://patchblox.com/security/data/cve/CVE-2023-53365.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0019 |  |
| [CVE-2025-38584](https://patchblox.com/security/data/cve/CVE-2025-38584.md) | High | padata: Fix pd UAF once and for all | 7.8 | 0.0019 |  |
| [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 |  |
| [CVE-2025-38581](https://patchblox.com/security/data/cve/CVE-2025-38581.md) | High | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 7.0 | 0.0019 |  |
| [CVE-2025-38697](https://patchblox.com/security/data/cve/CVE-2025-38697.md) | High | jfs: upper bound check of tree index in dbAllocAG | 7.8 | 0.0019 |  |
| [CVE-2025-38351](https://patchblox.com/security/data/cve/CVE-2025-38351.md) | High | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 7.5 | 0.0019 |  |
| [CVE-2025-38160](https://patchblox.com/security/data/cve/CVE-2025-38160.md) | High | clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() | 7.0 | 0.0019 |  |
| [CVE-2023-53485](https://patchblox.com/security/data/cve/CVE-2023-53485.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38456](https://patchblox.com/security/data/cve/CVE-2025-38456.md) | High | ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() | 7.8 | 0.0019 |  |
| [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 |  |
| [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 |  |
| [CVE-2025-38560](https://patchblox.com/security/data/cve/CVE-2025-38560.md) | High | x86/sev: Evict cache lines during SNP memory validation | 7.5 | 0.0019 |  |
| [CVE-2025-38538](https://patchblox.com/security/data/cve/CVE-2025-38538.md) | High | dmaengine: nbpfaxi: Fix memory corruption in probe() | 7.8 | 0.0019 |  |
| [CVE-2025-38568](https://patchblox.com/security/data/cve/CVE-2025-38568.md) | High | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 7.8 | 0.0019 |  |
| [CVE-2025-38593](https://patchblox.com/security/data/cve/CVE-2025-38593.md) | High | Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' | 7.8 | 0.0019 |  |
| [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 |  |
| [CVE-2025-38499](https://patchblox.com/security/data/cve/CVE-2025-38499.md) | High | clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns | 8.2 | 0.0019 |  |
| [CVE-2025-38535](https://patchblox.com/security/data/cve/CVE-2025-38535.md) | High | phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode | 7.8 | 0.0019 |  |
| [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 |  |
| [CVE-2023-53465](https://patchblox.com/security/data/cve/CVE-2023-53465.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2025-39743](https://patchblox.com/security/data/cve/CVE-2025-39743.md) | High | jfs: truncate good inode pages when hard link is 0 | 9.8 | 0.0018 |  |
| [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 |  |
| [CVE-2025-38618](https://patchblox.com/security/data/cve/CVE-2025-38618.md) | High | vsock: Do not allow binding to VMADDR_PORT_ANY | 7.8 | 0.0018 |  |
| [CVE-2025-38698](https://patchblox.com/security/data/cve/CVE-2025-38698.md) | High | jfs: Regular file corruption check | 7.1 | 0.0018 |  |
| [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 |  |
| [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 |  |
| [CVE-2025-38732](https://patchblox.com/security/data/cve/CVE-2025-38732.md) | High | netfilter: nf_reject: don't leak dst refcount for loopback packets | 7.0 | 0.0018 |  |
| [CVE-2025-38548](https://patchblox.com/security/data/cve/CVE-2025-38548.md) | High | hwmon: (corsair-cpro) Validate the size of the received input buffer | 7.8 | 0.0018 |  |
| [CVE-2025-38208](https://patchblox.com/security/data/cve/CVE-2025-38208.md) | High | smb: client: add NULL check in automount_fullpath | 7.0 | 0.0018 |  |
| [CVE-2025-38556](https://patchblox.com/security/data/cve/CVE-2025-38556.md) | High | HID: core: Harden s32ton() against conversion to 0 bits | 8.0 | 0.0018 |  |
| [CVE-2025-39823](https://patchblox.com/security/data/cve/CVE-2025-39823.md) | High | KVM: x86: use array_index_nospec with indices that come from guest | 7.8 | 0.0018 |  |
| [CVE-2025-38500](https://patchblox.com/security/data/cve/CVE-2025-38500.md) | High | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 7.8 | 0.0018 |  |
| [CVE-2025-38736](https://patchblox.com/security/data/cve/CVE-2025-38736.md) | High | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization | 7.1 | 0.0018 |  |
| [CVE-2025-38714](https://patchblox.com/security/data/cve/CVE-2025-38714.md) | High | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 9.0 | 0.0018 |  |
| [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 |  |
| [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 |  |
| [CVE-2025-38715](https://patchblox.com/security/data/cve/CVE-2025-38715.md) | High | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 7.1 | 0.0018 |  |
| [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 |  |
| [CVE-2025-38587](https://patchblox.com/security/data/cve/CVE-2025-38587.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0018 |  |
| [CVE-2025-38735](https://patchblox.com/security/data/cve/CVE-2025-38735.md) | High | gve: prevent ethtool ops after shutdown | 7.0 | 0.0018 |  |
| [CVE-2025-38609](https://patchblox.com/security/data/cve/CVE-2025-38609.md) | High | PM / devfreq: Check governor before using governor->name | 7.8 | 0.0018 |  |
| [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 |  |
| [CVE-2025-39738](https://patchblox.com/security/data/cve/CVE-2025-39738.md) | High | btrfs: do not allow relocation of partially dropped subvolumes | 7.8 | 0.0018 |  |
| [CVE-2025-38713](https://patchblox.com/security/data/cve/CVE-2025-38713.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | 7.1 | 0.0017 |  |
| [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 |  |
| [CVE-2025-38550](https://patchblox.com/security/data/cve/CVE-2025-38550.md) | High | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | 7.8 | 0.0017 |  |
| [CVE-2025-38730](https://patchblox.com/security/data/cve/CVE-2025-38730.md) | High | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 |  |
| [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 |  |
| [CVE-2025-39835](https://patchblox.com/security/data/cve/CVE-2025-39835.md) | High | xfs: do not propagate ENODATA disk errors into xattr code | 7.8 | 0.0017 |  |
| [CVE-2025-38679](https://patchblox.com/security/data/cve/CVE-2025-38679.md) | High | media: venus: Fix OOB read due to missing payload bound check | 7.1 | 0.0017 |  |
| [CVE-2025-39685](https://patchblox.com/security/data/cve/CVE-2025-39685.md) | High | comedi: pcl726: Prevent invalid irq number | 7.1 | 0.0017 |  |
| [CVE-2023-53179](https://patchblox.com/security/data/cve/CVE-2023-53179.md) | High | kernel-livepatch-SLE15-SP7_Update_6: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39694](https://patchblox.com/security/data/cve/CVE-2025-39694.md) | High | s390/sclp: Fix SCCB present check | 7.3 | 0.0017 |  |
| [CVE-2023-53205](https://patchblox.com/security/data/cve/CVE-2023-53205.md) | High | kernel-azure: Security update for the Linux Kernel | 8.0 | 0.0017 |  |
| [CVE-2023-53495](https://patchblox.com/security/data/cve/CVE-2023-53495.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 |  |
| [CVE-2023-53148](https://patchblox.com/security/data/cve/CVE-2023-53148.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0017 |  |
| [CVE-2023-53215](https://patchblox.com/security/data/cve/CVE-2023-53215.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53217](https://patchblox.com/security/data/cve/CVE-2023-53217.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53235](https://patchblox.com/security/data/cve/CVE-2023-53235.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53487](https://patchblox.com/security/data/cve/CVE-2023-53487.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53492](https://patchblox.com/security/data/cve/CVE-2023-53492.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53222](https://patchblox.com/security/data/cve/CVE-2023-53222.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2025-39718](https://patchblox.com/security/data/cve/CVE-2025-39718.md) | High | vsock/virtio: Validate length in packet header before skb_put() | 7.8 | 0.0017 |  |
| [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 |  |
| [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 |  |
| [CVE-2025-38670](https://patchblox.com/security/data/cve/CVE-2025-38670.md) | High | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | 7.1 | 0.0017 |  |
| [CVE-2025-39853](https://patchblox.com/security/data/cve/CVE-2025-39853.md) | High | i40e: Fix potential invalid access when MAC list is empty | 7.1 | 0.0017 |  |
| [CVE-2025-39891](https://patchblox.com/security/data/cve/CVE-2025-39891.md) | High | wifi: mwifiex: Initialize the chan_stats array to zero | 7.1 | 0.0017 |  |
| [CVE-2023-53184](https://patchblox.com/security/data/cve/CVE-2023-53184.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53508](https://patchblox.com/security/data/cve/CVE-2023-53508.md) | High | kernel-syms: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-38692](https://patchblox.com/security/data/cve/CVE-2025-38692.md) | High | exfat: add cluster chain loop check for dir | 7.0 | 0.0017 |  |
| [CVE-2025-38543](https://patchblox.com/security/data/cve/CVE-2025-38543.md) | High | drm/tegra: nvdec: Fix dma_alloc_coherent error check | 7.1 | 0.0017 |  |
| [CVE-2023-53311](https://patchblox.com/security/data/cve/CVE-2023-53311.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53316](https://patchblox.com/security/data/cve/CVE-2023-53316.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53500](https://patchblox.com/security/data/cve/CVE-2023-53500.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53238](https://patchblox.com/security/data/cve/CVE-2023-53238.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2025-39744](https://patchblox.com/security/data/cve/CVE-2025-39744.md) | High | rcu: Fix rcu_read_unlock() deadloop due to IRQ work | 7.1 | 0.0016 |  |
| [CVE-2025-39869](https://patchblox.com/security/data/cve/CVE-2025-39869.md) | High | dmaengine: ti: edma: Fix memory allocation size for queue_priority_map | 7.1 | 0.0016 |  |
| [CVE-2025-39865](https://patchblox.com/security/data/cve/CVE-2025-39865.md) | High | tee: fix NULL pointer dereference in tee_shm_put | 7.0 | 0.0016 |  |
| [CVE-2023-53272](https://patchblox.com/security/data/cve/CVE-2023-53272.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2023-53420](https://patchblox.com/security/data/cve/CVE-2023-53420.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2023-53185](https://patchblox.com/security/data/cve/CVE-2023-53185.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0016 |  |
| [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 |  |
| [CVE-2025-39873](https://patchblox.com/security/data/cve/CVE-2025-39873.md) | High | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB | 7.8 | 0.0016 |  |
| [CVE-2023-53187](https://patchblox.com/security/data/cve/CVE-2023-53187.md) | High | btrfs: fix use-after-free of new block group that became unused | 7.8 | 0.0016 |  |
| [CVE-2023-53263](https://patchblox.com/security/data/cve/CVE-2023-53263.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53331](https://patchblox.com/security/data/cve/CVE-2023-53331.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53479](https://patchblox.com/security/data/cve/CVE-2023-53479.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39790](https://patchblox.com/security/data/cve/CVE-2025-39790.md) | High | bus: mhi: host: Detect events pointing to unexpected TREs | 7.8 | 0.0016 |  |
| [CVE-2023-53150](https://patchblox.com/security/data/cve/CVE-2023-53150.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53275](https://patchblox.com/security/data/cve/CVE-2023-53275.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53280](https://patchblox.com/security/data/cve/CVE-2023-53280.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53451](https://patchblox.com/security/data/cve/CVE-2023-53451.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Fix potential NULL pointer derefe... | 8.0 | 0.0016 |  |
| [CVE-2025-39719](https://patchblox.com/security/data/cve/CVE-2025-39719.md) | High | iio: imu: bno055: fix OOB access of hw_xlate array | 7.1 | 0.0016 |  |
| [CVE-2025-39739](https://patchblox.com/security/data/cve/CVE-2025-39739.md) | High | iommu/arm-smmu-qcom: Add SM6115 MDSS compatible | 7.0 | 0.0016 |  |
| [CVE-2025-39838](https://patchblox.com/security/data/cve/CVE-2025-39838.md) | High | cifs: prevent NULL pointer dereference in UTF16 conversion | 7.0 | 0.0016 |  |
| [CVE-2023-53210](https://patchblox.com/security/data/cve/CVE-2023-53210.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2025-39746](https://patchblox.com/security/data/cve/CVE-2025-39746.md) | High | wifi: ath10k: shutdown driver when hardware is unreliable | 7.0 | 0.0016 |  |
| [CVE-2023-53493](https://patchblox.com/security/data/cve/CVE-2023-53493.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39870](https://patchblox.com/security/data/cve/CVE-2025-39870.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53371](https://patchblox.com/security/data/cve/CVE-2023-53371.md) | High | net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create | 8.0 | 0.0016 |  |
| [CVE-2023-53274](https://patchblox.com/security/data/cve/CVE-2023-53274.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53395](https://patchblox.com/security/data/cve/CVE-2023-53395.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53504](https://patchblox.com/security/data/cve/CVE-2023-53504.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53507](https://patchblox.com/security/data/cve/CVE-2023-53507.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53286](https://patchblox.com/security/data/cve/CVE-2023-53286.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53510](https://patchblox.com/security/data/cve/CVE-2023-53510.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39861](https://patchblox.com/security/data/cve/CVE-2025-39861.md) | High | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 7.8 | 0.0016 |  |
| [CVE-2025-39882](https://patchblox.com/security/data/cve/CVE-2025-39882.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53426](https://patchblox.com/security/data/cve/CVE-2023-53426.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-38665](https://patchblox.com/security/data/cve/CVE-2025-38665.md) | High | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 7.0 | 0.0016 |  |
| [CVE-2025-38709](https://patchblox.com/security/data/cve/CVE-2025-38709.md) | High | loop: Avoid updating block size under exclusive owner | 7.0 | 0.0016 |  |
| [CVE-2023-53386](https://patchblox.com/security/data/cve/CVE-2023-53386.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39871](https://patchblox.com/security/data/cve/CVE-2025-39871.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39854](https://patchblox.com/security/data/cve/CVE-2025-39854.md) | High | kernel-64kb: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297). | 7.8 | 0.0015 |  |
| [CVE-2023-53377](https://patchblox.com/security/data/cve/CVE-2023-53377.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53446](https://patchblox.com/security/data/cve/CVE-2023-53446.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53515](https://patchblox.com/security/data/cve/CVE-2023-53515.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53321](https://patchblox.com/security/data/cve/CVE-2023-53321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211_hwsim: drop short frames  While t... | 7.1 | 0.0015 |  |
| [CVE-2025-39721](https://patchblox.com/security/data/cve/CVE-2025-39721.md) | High | crypto: qat - flush misc workqueue during device shutdown | 7.0 | 0.0015 |  |
| [CVE-2023-53501](https://patchblox.com/security/data/cve/CVE-2023-53501.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53252](https://patchblox.com/security/data/cve/CVE-2023-53252.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53380](https://patchblox.com/security/data/cve/CVE-2023-53380.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2025-39833](https://patchblox.com/security/data/cve/CVE-2025-39833.md) | High | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 7.0 | 0.0015 |  |
| [CVE-2023-53441](https://patchblox.com/security/data/cve/CVE-2023-53441.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53530](https://patchblox.com/security/data/cve/CVE-2023-53530.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53442](https://patchblox.com/security/data/cve/CVE-2023-53442.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53516](https://patchblox.com/security/data/cve/CVE-2023-53516.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 |  |
| [CVE-2023-53496](https://patchblox.com/security/data/cve/CVE-2023-53496.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0014 |  |
| [CVE-2023-53401](https://patchblox.com/security/data/cve/CVE-2023-53401.md) | High | mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() | 7.8 | 0.0014 |  |
| [CVE-2023-53151](https://patchblox.com/security/data/cve/CVE-2023-53151.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0012 |  |
| [CVE-2025-39825](https://patchblox.com/security/data/cve/CVE-2025-39825.md) | High | smb: client: fix race with concurrent opens in rename(2) | 7.6 | 0.0012 |  |
| [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 |  |
| [CVE-2025-39832](https://patchblox.com/security/data/cve/CVE-2025-39832.md) | High | net/mlx5: Fix lockdep assertion on sync reset unload event | 7.0 | 0.0012 |  |
| [CVE-2025-39751](https://patchblox.com/security/data/cve/CVE-2025-39751.md) | High | ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control | 7.8 | n/a |  |
| [CVE-2023-4130](https://patchblox.com/security/data/cve/CVE-2023-4130.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ksmbd: fix wrong next length validation of ea bu... | 5.5 | 0.0051 |  |
| [CVE-2023-3772](https://patchblox.com/security/data/cve/CVE-2023-3772.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 |  |
| [CVE-2025-39758](https://patchblox.com/security/data/cve/CVE-2025-39758.md) | Routine | RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages | 5.5 | 0.0042 |  |
| [CVE-2023-53360](https://patchblox.com/security/data/cve/CVE-2023-53360.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0041 |  |
| [CVE-2025-38526](https://patchblox.com/security/data/cve/CVE-2025-38526.md) | Routine | ice: add NULL check in eswitch lag check | 5.5 | 0.0041 |  |
| [CVE-2025-38514](https://patchblox.com/security/data/cve/CVE-2025-38514.md) | Routine | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 6.5 | 0.0039 |  |
| [CVE-2025-39770](https://patchblox.com/security/data/cve/CVE-2025-39770.md) | Routine | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0038 |  |
| [CVE-2023-53463](https://patchblox.com/security/data/cve/CVE-2023-53463.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0036 |  |
| [CVE-2024-58239](https://patchblox.com/security/data/cve/CVE-2024-58239.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.9 | 0.0036 |  |
| [CVE-2023-53491](https://patchblox.com/security/data/cve/CVE-2023-53491.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0035 |  |
| [CVE-2023-4515](https://patchblox.com/security/data/cve/CVE-2023-4515.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0033 |  |
| [CVE-2025-38524](https://patchblox.com/security/data/cve/CVE-2025-38524.md) | Routine | rxrpc: Fix recv-recv race of completed call | 4.7 | 0.0032 |  |
| [CVE-2025-39857](https://patchblox.com/security/data/cve/CVE-2025-39857.md) | Routine | net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() | 5.8 | 0.0031 |  |
| [CVE-2025-39726](https://patchblox.com/security/data/cve/CVE-2025-39726.md) | Routine | s390/ism: fix concurrency management in ism_cmd() | 5.5 | 0.0025 |  |
| [CVE-2025-39848](https://patchblox.com/security/data/cve/CVE-2025-39848.md) | Routine | ax25: properly unshare skbs in ax25_kiss_rcv() | 5.5 | 0.0024 |  |
| [CVE-2024-58090](https://patchblox.com/security/data/cve/CVE-2024-58090.md) | Routine | kernel-64kb: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324). | 5.5 | 0.0023 |  |
| [CVE-2023-53462](https://patchblox.com/security/data/cve/CVE-2023-53462.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-53125](https://patchblox.com/security/data/cve/CVE-2024-53125.md) | Routine | kernel-64kb: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156). | 5.5 | 0.0023 |  |
| [CVE-2024-26661](https://patchblox.com/security/data/cve/CVE-2024-26661.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-39827](https://patchblox.com/security/data/cve/CVE-2025-39827.md) | Routine | net: rose: include node references in rose_neigh refcount | 5.5 | 0.0023 |  |
| [CVE-2025-38591](https://patchblox.com/security/data/cve/CVE-2025-38591.md) | Routine | bpf: Reject narrower access to pointer ctx fields | 5.5 | 0.0022 |  |
| [CVE-2025-38597](https://patchblox.com/security/data/cve/CVE-2025-38597.md) | Routine | drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port | 5.5 | 0.0022 |  |
| [CVE-2023-53336](https://patchblox.com/security/data/cve/CVE-2023-53336.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53339](https://patchblox.com/security/data/cve/CVE-2023-53339.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38190](https://patchblox.com/security/data/cve/CVE-2025-38190.md) | Routine | atm: Revert atm_account_tx() if copy_from_iter_full() fails. | 5.5 | 0.0021 |  |
| [CVE-2025-38705](https://patchblox.com/security/data/cve/CVE-2025-38705.md) | Routine | drm/amd/pm: fix null pointer access | 5.5 | 0.0020 |  |
| [CVE-2025-38706](https://patchblox.com/security/data/cve/CVE-2025-38706.md) | Routine | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 5.5 | 0.0020 |  |
| [CVE-2025-39705](https://patchblox.com/security/data/cve/CVE-2025-39705.md) | Routine | drm/amd/display: fix a Null pointer dereference vulnerability | 5.5 | 0.0020 |  |
| [CVE-2023-53352](https://patchblox.com/security/data/cve/CVE-2023-53352.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38408](https://patchblox.com/security/data/cve/CVE-2025-38408.md) | Routine | genirq/irq_sim: Initialize work context pointers properly | 5.5 | 0.0020 |  |
| [CVE-2025-38185](https://patchblox.com/security/data/cve/CVE-2025-38185.md) | Routine | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 5.5 | 0.0020 |  |
| [CVE-2023-53342](https://patchblox.com/security/data/cve/CVE-2023-53342.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38006](https://patchblox.com/security/data/cve/CVE-2025-38006.md) | Routine | net: mctp: Don't access ifa_index when missing | 5.5 | 0.0020 |  |
| [CVE-2025-38612](https://patchblox.com/security/data/cve/CVE-2025-38612.md) | Routine | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | 5.5 | 0.0019 |  |
| [CVE-2025-38441](https://patchblox.com/security/data/cve/CVE-2025-38441.md) | Routine | kernel-64kb: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167). | 5.5 | 0.0019 |  |
| [CVE-2025-38418](https://patchblox.com/security/data/cve/CVE-2025-38418.md) | Routine | remoteproc: core: Release rproc->clean_table after rproc_attach() fails | 5.5 | 0.0019 |  |
| [CVE-2025-38419](https://patchblox.com/security/data/cve/CVE-2025-38419.md) | Routine | remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() | 5.5 | 0.0019 |  |
| [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 |  |
| [CVE-2023-53356](https://patchblox.com/security/data/cve/CVE-2023-53356.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38604](https://patchblox.com/security/data/cve/CVE-2025-38604.md) | Routine | wifi: rtl818x: Kill URBs before clearing tx status queue | 5.5 | 0.0019 |  |
| [CVE-2025-38360](https://patchblox.com/security/data/cve/CVE-2025-38360.md) | Routine | kernel-64kb: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078). | 5.5 | 0.0019 |  |
| [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 |  |
| [CVE-2025-39684](https://patchblox.com/security/data/cve/CVE-2025-39684.md) | Routine | comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() | 5.5 | 0.0019 |  |
| [CVE-2023-53362](https://patchblox.com/security/data/cve/CVE-2023-53362.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-58238](https://patchblox.com/security/data/cve/CVE-2024-58238.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38643](https://patchblox.com/security/data/cve/CVE-2025-38643.md) | Routine | wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() | 5.5 | 0.0019 |  |
| [CVE-2023-53350](https://patchblox.com/security/data/cve/CVE-2023-53350.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 |  |
| [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 |  |
| [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39681](https://patchblox.com/security/data/cve/CVE-2025-39681.md) | Routine | x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | 5.5 | 0.0018 |  |
| [CVE-2025-38205](https://patchblox.com/security/data/cve/CVE-2025-38205.md) | Routine | drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 | 5.5 | 0.0018 |  |
| [CVE-2025-38576](https://patchblox.com/security/data/cve/CVE-2025-38576.md) | Routine | powerpc/eeh: Make EEH driver device hotplug safe | 5.5 | 0.0018 |  |
| [CVE-2025-38513](https://patchblox.com/security/data/cve/CVE-2025-38513.md) | Routine | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 5.5 | 0.0018 |  |
| [CVE-2025-38516](https://patchblox.com/security/data/cve/CVE-2025-38516.md) | Routine | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 5.5 | 0.0018 |  |
| [CVE-2025-38528](https://patchblox.com/security/data/cve/CVE-2025-38528.md) | Routine | bpf: Reject %p% format string in bprintf-like helpers | 5.5 | 0.0018 |  |
| [CVE-2025-38540](https://patchblox.com/security/data/cve/CVE-2025-38540.md) | Routine | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 5.5 | 0.0018 |  |
| [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 |  |
| [CVE-2025-38635](https://patchblox.com/security/data/cve/CVE-2025-38635.md) | Routine | clk: davinci: Add NULL check in davinci_lpsc_clk_register() | 5.5 | 0.0018 |  |
| [CVE-2025-38663](https://patchblox.com/security/data/cve/CVE-2025-38663.md) | Routine | nilfs2: reject invalid file types when reading inodes | 5.5 | 0.0018 |  |
| [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 |  |
| [CVE-2025-38444](https://patchblox.com/security/data/cve/CVE-2025-38444.md) | Routine | raid10: cleanup memleak at raid10_make_request | 5.5 | 0.0018 |  |
| [CVE-2025-38602](https://patchblox.com/security/data/cve/CVE-2025-38602.md) | Routine | iwlwifi: Add missing check for alloc_ordered_workqueue | 5.5 | 0.0018 |  |
| [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 |  |
| [CVE-2025-38251](https://patchblox.com/security/data/cve/CVE-2025-38251.md) | Routine | atm: clip: prevent NULL deref in clip_push() | 5.5 | 0.0018 |  |
| [CVE-2025-38263](https://patchblox.com/security/data/cve/CVE-2025-38263.md) | Routine | bcache: fix NULL pointer in cache_set_flush() | 5.5 | 0.0018 |  |
| [CVE-2025-38588](https://patchblox.com/security/data/cve/CVE-2025-38588.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38610](https://patchblox.com/security/data/cve/CVE-2025-38610.md) | Routine | powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() | 5.5 | 0.0018 |  |
| [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38402](https://patchblox.com/security/data/cve/CVE-2025-38402.md) | Routine | kernel-64kb: idpf: return 0 size for RSS key if not supported (bsc#1247262). | 5.5 | 0.0018 |  |
| [CVE-2025-38531](https://patchblox.com/security/data/cve/CVE-2025-38531.md) | Routine | iio: common: st_sensors: Fix use of uninitialize device structs | 5.5 | 0.0018 |  |
| [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 |  |
| [CVE-2023-53369](https://patchblox.com/security/data/cve/CVE-2023-53369.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38583](https://patchblox.com/security/data/cve/CVE-2025-38583.md) | Routine | clk: xilinx: vcu: unregister pll_post only if registered correctly | 5.5 | 0.0018 |  |
| [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 |  |
| [CVE-2025-38630](https://patchblox.com/security/data/cve/CVE-2025-38630.md) | Routine | fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | 5.5 | 0.0017 |  |
| [CVE-2025-38640](https://patchblox.com/security/data/cve/CVE-2025-38640.md) | Routine | bpf: Disable migration in nf_hook_run_bpf(). | 5.5 | 0.0017 |  |
| [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0017 |  |
| [CVE-2025-38234](https://patchblox.com/security/data/cve/CVE-2025-38234.md) | Routine | sched/rt: Fix race in push_rt_task | 5.5 | 0.0017 |  |
| [CVE-2025-38659](https://patchblox.com/security/data/cve/CVE-2025-38659.md) | Routine | gfs2: No more self recovery | 5.5 | 0.0017 |  |
| [CVE-2025-39787](https://patchblox.com/security/data/cve/CVE-2025-39787.md) | Routine | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | 5.5 | 0.0017 |  |
| [CVE-2023-53367](https://patchblox.com/security/data/cve/CVE-2023-53367.md) | Routine | accel/habanalabs: fix mem leak in capture user mappings | 5.5 | 0.0017 |  |
| [CVE-2024-46733](https://patchblox.com/security/data/cve/CVE-2024-46733.md) | Routine | kernel-64kb: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). | 5.5 | 0.0017 |  |
| [CVE-2025-39842](https://patchblox.com/security/data/cve/CVE-2025-39842.md) | Routine | ocfs2: prevent release journal inode after journal shutdown | 5.5 | 0.0017 |  |
| [CVE-2025-38515](https://patchblox.com/security/data/cve/CVE-2025-38515.md) | Routine | drm/sched: Increment job count before swapping tail spsc queue | 5.5 | 0.0017 |  |
| [CVE-2025-38623](https://patchblox.com/security/data/cve/CVE-2025-38623.md) | Routine | PCI: pnv_php: Fix surprise plug detection and recovery | 5.5 | 0.0017 |  |
| [CVE-2025-38624](https://patchblox.com/security/data/cve/CVE-2025-38624.md) | Routine | PCI: pnv_php: Clean up allocated IRQs on unplug | 5.5 | 0.0017 |  |
| [CVE-2025-38712](https://patchblox.com/security/data/cve/CVE-2025-38712.md) | Routine | hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() | 5.5 | 0.0017 |  |
| [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 |  |
| [CVE-2025-38671](https://patchblox.com/security/data/cve/CVE-2025-38671.md) | Routine | i2c: qup: jump out of the loop in case of timeout | 5.5 | 0.0017 |  |
| [CVE-2023-53189](https://patchblox.com/security/data/cve/CVE-2023-53189.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53314](https://patchblox.com/security/data/cve/CVE-2023-53314.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39675](https://patchblox.com/security/data/cve/CVE-2025-39675.md) | Routine | drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() | 5.5 | 0.0017 |  |
| [CVE-2025-39693](https://patchblox.com/security/data/cve/CVE-2025-39693.md) | Routine | drm/amd/display: Avoid a NULL pointer dereference | 5.5 | 0.0017 |  |
| [CVE-2023-53201](https://patchblox.com/security/data/cve/CVE-2023-53201.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53364](https://patchblox.com/security/data/cve/CVE-2023-53364.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38644](https://patchblox.com/security/data/cve/CVE-2025-38644.md) | Routine | wifi: mac80211: reject TDLS operations when station is not associated | 5.5 | 0.0017 |  |
| [CVE-2025-39920](https://patchblox.com/security/data/cve/CVE-2025-39920.md) | Routine | pcmcia: Add error handling for add_interval() in do_validate_mem() | 5.5 | 0.0017 |  |
| [CVE-2025-38255](https://patchblox.com/security/data/cve/CVE-2025-38255.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38510](https://patchblox.com/security/data/cve/CVE-2025-38510.md) | Routine | kasan: remove kasan_find_vm_area() to prevent possible deadlock | 5.5 | 0.0017 |  |
| [CVE-2025-38634](https://patchblox.com/security/data/cve/CVE-2025-38634.md) | Routine | power: supply: cpcap-charger: Fix null check for power_supply_get_by_name | 5.5 | 0.0017 |  |
| [CVE-2025-38645](https://patchblox.com/security/data/cve/CVE-2025-38645.md) | Routine | net/mlx5: Check device memory pointer before usage | 5.5 | 0.0017 |  |
| [CVE-2025-38646](https://patchblox.com/security/data/cve/CVE-2025-38646.md) | Routine | wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band | 6.5 | 0.0017 |  |
| [CVE-2023-53421](https://patchblox.com/security/data/cve/CVE-2023-53421.md) | Routine | blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() | 5.5 | 0.0017 |  |
| [CVE-2025-38621](https://patchblox.com/security/data/cve/CVE-2025-38621.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39679](https://patchblox.com/security/data/cve/CVE-2025-39679.md) | Routine | drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). | 5.5 | 0.0017 |  |
| [CVE-2025-38503](https://patchblox.com/security/data/cve/CVE-2025-38503.md) | Routine | btrfs: fix assertion when building free space tree | 5.5 | 0.0016 |  |
| [CVE-2025-38537](https://patchblox.com/security/data/cve/CVE-2025-38537.md) | Routine | net: phy: Don't register LEDs for genphy | 5.5 | 0.0016 |  |
| [CVE-2025-38544](https://patchblox.com/security/data/cve/CVE-2025-38544.md) | Routine | rxrpc: Fix bug due to prealloc collision | 5.5 | 0.0016 |  |
| [CVE-2025-38725](https://patchblox.com/security/data/cve/CVE-2025-38725.md) | Routine | net: usb: asix_devices: add phy_mask for ax88772 mdio bus | 5.5 | 0.0016 |  |
| [CVE-2025-39678](https://patchblox.com/security/data/cve/CVE-2025-39678.md) | Routine | kernel-64kb: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (bsc#1249290). | 5.5 | 0.0016 |  |
| [CVE-2025-39846](https://patchblox.com/security/data/cve/CVE-2025-39846.md) | Routine | pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() | 5.5 | 0.0016 |  |
| [CVE-2025-39847](https://patchblox.com/security/data/cve/CVE-2025-39847.md) | Routine | ppp: fix memory leak in pad_compress_skb | 5.5 | 0.0016 |  |
| [CVE-2023-53313](https://patchblox.com/security/data/cve/CVE-2023-53313.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53456](https://patchblox.com/security/data/cve/CVE-2023-53456.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-38541](https://patchblox.com/security/data/cve/CVE-2025-38541.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53428](https://patchblox.com/security/data/cve/CVE-2023-53428.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53147](https://patchblox.com/security/data/cve/CVE-2023-53147.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53165](https://patchblox.com/security/data/cve/CVE-2023-53165.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53167](https://patchblox.com/security/data/cve/CVE-2023-53167.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53174](https://patchblox.com/security/data/cve/CVE-2023-53174.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53196](https://patchblox.com/security/data/cve/CVE-2023-53196.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53220](https://patchblox.com/security/data/cve/CVE-2023-53220.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53304](https://patchblox.com/security/data/cve/CVE-2023-53304.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53309](https://patchblox.com/security/data/cve/CVE-2023-53309.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53457](https://patchblox.com/security/data/cve/CVE-2023-53457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  FS: JFS: Fix null-ptr-deref Read in txBegin   Sy... | 5.5 | 0.0016 |  |
| [CVE-2023-53472](https://patchblox.com/security/data/cve/CVE-2023-53472.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53480](https://patchblox.com/security/data/cve/CVE-2023-53480.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53488](https://patchblox.com/security/data/cve/CVE-2023-53488.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53505](https://patchblox.com/security/data/cve/CVE-2023-53505.md) | Routine | kernel-livepatch-SLE15-SP6_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53518](https://patchblox.com/security/data/cve/CVE-2023-53518.md) | Routine | kernel-livepatch-SLE15-SP6_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39763](https://patchblox.com/security/data/cve/CVE-2025-39763.md) | Routine | ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered | 5.5 | 0.0016 |  |
| [CVE-2023-53175](https://patchblox.com/security/data/cve/CVE-2023-53175.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53221](https://patchblox.com/security/data/cve/CVE-2023-53221.md) | Routine | bpf: Fix memleak due to fentry attach failure | 5.5 | 0.0016 |  |
| [CVE-2023-53230](https://patchblox.com/security/data/cve/CVE-2023-53230.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53231](https://patchblox.com/security/data/cve/CVE-2023-53231.md) | Routine | erofs: Fix detection of atomic context | 5.5 | 0.0016 |  |
| [CVE-2023-53243](https://patchblox.com/security/data/cve/CVE-2023-53243.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: add handling for RAID1C23/DUP to btrfs_re... | 5.5 | 0.0016 |  |
| [CVE-2023-53264](https://patchblox.com/security/data/cve/CVE-2023-53264.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53461](https://patchblox.com/security/data/cve/CVE-2023-53461.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39800](https://patchblox.com/security/data/cve/CVE-2025-39800.md) | Routine | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 5.5 | 0.0016 |  |
| [CVE-2023-53152](https://patchblox.com/security/data/cve/CVE-2023-53152.md) | Routine | drm/amdgpu: fix calltrace warning in amddrm_buddy_fini | 5.5 | 0.0016 |  |
| [CVE-2023-53177](https://patchblox.com/security/data/cve/CVE-2023-53177.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53181](https://patchblox.com/security/data/cve/CVE-2023-53181.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53195](https://patchblox.com/security/data/cve/CVE-2023-53195.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53207](https://patchblox.com/security/data/cve/CVE-2023-53207.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53208](https://patchblox.com/security/data/cve/CVE-2023-53208.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53209](https://patchblox.com/security/data/cve/CVE-2023-53209.md) | Routine | wifi: mac80211_hwsim: Fix possible NULL dereference | 5.5 | 0.0016 |  |
| [CVE-2023-53312](https://patchblox.com/security/data/cve/CVE-2023-53312.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53370](https://patchblox.com/security/data/cve/CVE-2023-53370.md) | Routine | drm/amdgpu: fix memory leak in mes self test | 5.5 | 0.0016 |  |
| [CVE-2023-53448](https://patchblox.com/security/data/cve/CVE-2023-53448.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39845](https://patchblox.com/security/data/cve/CVE-2025-39845.md) | Routine | x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() | 5.5 | 0.0016 |  |
| [CVE-2023-53526](https://patchblox.com/security/data/cve/CVE-2023-53526.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39706](https://patchblox.com/security/data/cve/CVE-2025-39706.md) | Routine | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | 5.5 | 0.0016 |  |
| [CVE-2023-53394](https://patchblox.com/security/data/cve/CVE-2023-53394.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.7 | 0.0015 |  |
| [CVE-2023-53429](https://patchblox.com/security/data/cve/CVE-2023-53429.md) | Routine | btrfs: don't check PageError in __extent_writepage | 5.5 | 0.0015 |  |
| [CVE-2023-53531](https://patchblox.com/security/data/cve/CVE-2023-53531.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39801](https://patchblox.com/security/data/cve/CVE-2025-39801.md) | Routine | usb: dwc3: Remove WARN_ON for device endpoint command timeouts | 6.2 | 0.0015 |  |
| [CVE-2025-39923](https://patchblox.com/security/data/cve/CVE-2025-39923.md) | Routine | dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees | 5.5 | 0.0015 |  |
| [CVE-2023-53384](https://patchblox.com/security/data/cve/CVE-2023-53384.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53292](https://patchblox.com/security/data/cve/CVE-2023-53292.md) | Routine | blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none | 5.5 | 0.0015 |  |
| [CVE-2025-39772](https://patchblox.com/security/data/cve/CVE-2025-39772.md) | Routine | drm/hisilicon/hibmc: fix the hibmc loaded failed bug | 5.5 | 0.0015 |  |
| [CVE-2025-39844](https://patchblox.com/security/data/cve/CVE-2025-39844.md) | Routine | mm: move page table sync declarations to linux/pgtable.h | 5.5 | 0.0015 |  |
| [CVE-2023-53245](https://patchblox.com/security/data/cve/CVE-2023-53245.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53249](https://patchblox.com/security/data/cve/CVE-2023-53249.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53255](https://patchblox.com/security/data/cve/CVE-2023-53255.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: stratix10-svc: Fix a potential resourc... | 5.5 | 0.0015 |  |
| [CVE-2023-53288](https://patchblox.com/security/data/cve/CVE-2023-53288.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53291](https://patchblox.com/security/data/cve/CVE-2023-53291.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53324](https://patchblox.com/security/data/cve/CVE-2023-53324.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm/mdp5: Don't leak some plane state  Appar... | 5.5 | 0.0015 |  |
| [CVE-2023-53379](https://patchblox.com/security/data/cve/CVE-2023-53379.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53397](https://patchblox.com/security/data/cve/CVE-2023-53397.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53425](https://patchblox.com/security/data/cve/CVE-2023-53425.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53436](https://patchblox.com/security/data/cve/CVE-2023-53436.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53251](https://patchblox.com/security/data/cve/CVE-2023-53251.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53287](https://patchblox.com/security/data/cve/CVE-2023-53287.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53328](https://patchblox.com/security/data/cve/CVE-2023-53328.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53391](https://patchblox.com/security/data/cve/CVE-2023-53391.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53424](https://patchblox.com/security/data/cve/CVE-2023-53424.md) | Routine | clk: mediatek: fix of_iomap memory leak | 5.5 | 0.0015 |  |
| [CVE-2023-53438](https://patchblox.com/security/data/cve/CVE-2023-53438.md) | Routine | x86/MCE: Always save CS register on AMD Zen IF Poison errors | 5.5 | 0.0015 |  |
| [CVE-2023-53170](https://patchblox.com/security/data/cve/CVE-2023-53170.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53248](https://patchblox.com/security/data/cve/CVE-2023-53248.md) | Routine | drm/amdgpu: install stub fence into potential unused fence pointers | 6.0 | 0.0015 |  |
| [CVE-2023-53206](https://patchblox.com/security/data/cve/CVE-2023-53206.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53247](https://patchblox.com/security/data/cve/CVE-2023-53247.md) | Routine | btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand | 5.5 | 0.0015 |  |
| [CVE-2023-53258](https://patchblox.com/security/data/cve/CVE-2023-53258.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix possible underflow for disp... | 5.5 | 0.0015 |  |
| [CVE-2023-53260](https://patchblox.com/security/data/cve/CVE-2023-53260.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53261](https://patchblox.com/security/data/cve/CVE-2023-53261.md) | Routine | coresight: Fix memory leak in acpi_buffer->pointer | 5.5 | 0.0015 |  |
| [CVE-2023-53323](https://patchblox.com/security/data/cve/CVE-2023-53323.md) | Routine | ext2/dax: Fix ext2_setsize when len is page aligned | 5.5 | 0.0015 |  |
| [CVE-2023-53325](https://patchblox.com/security/data/cve/CVE-2023-53325.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53385](https://patchblox.com/security/data/cve/CVE-2023-53385.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53444](https://patchblox.com/security/data/cve/CVE-2023-53444.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/ttm: fix bulk_move corruption when adding a... | 5.5 | 0.0015 |  |
| [CVE-2023-53523](https://patchblox.com/security/data/cve/CVE-2023-53523.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53528](https://patchblox.com/security/data/cve/CVE-2023-53528.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-38632](https://patchblox.com/security/data/cve/CVE-2025-38632.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0014 |  |
| [CVE-2023-53180](https://patchblox.com/security/data/cve/CVE-2023-53180.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53319](https://patchblox.com/security/data/cve/CVE-2023-53319.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-39754](https://patchblox.com/security/data/cve/CVE-2025-39754.md) | Routine | mm/smaps: fix race between smaps_hugetlb_range and migration | 5.5 | 0.0014 |  |
| [CVE-2025-38650](https://patchblox.com/security/data/cve/CVE-2025-38650.md) | Routine | hfsplus: remove mutex_lock check in hfsplus_free_extents | 5.5 | 0.0014 |  |
| [CVE-2025-38681](https://patchblox.com/security/data/cve/CVE-2025-38681.md) | Routine | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | 5.5 | 0.0014 |  |
| [CVE-2023-53368](https://patchblox.com/security/data/cve/CVE-2023-53368.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0014 |  |
| [CVE-2025-38687](https://patchblox.com/security/data/cve/CVE-2025-38687.md) | Routine | comedi: fix race between polling and detaching | 5.5 | 0.0013 |  |
| [CVE-2025-39782](https://patchblox.com/security/data/cve/CVE-2025-39782.md) | Routine | kernel-64kb: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526). | 5.5 | 0.0013 |  |
| [CVE-2023-53303](https://patchblox.com/security/data/cve/CVE-2023-53303.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53527](https://patchblox.com/security/data/cve/CVE-2023-53527.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-38520](https://patchblox.com/security/data/cve/CVE-2025-38520.md) | Routine | drm/amdkfd: Don't call mmput from MMU notifier callback | 5.5 | 0.0013 |  |
| [CVE-2025-38506](https://patchblox.com/security/data/cve/CVE-2025-38506.md) | Routine | kernel-azure: KVM: Allow CPU to reschedule while setting per-page memory attributes (bsc#1248186). | 5.5 | 0.0013 |  |
| [CVE-2025-39773](https://patchblox.com/security/data/cve/CVE-2025-39773.md) | Routine | net: bridge: fix soft lockup in br_multicast_query_expired() | 5.5 | 0.0012 |  |
| [CVE-2023-53490](https://patchblox.com/security/data/cve/CVE-2023-53490.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0012 |  |
| [CVE-2025-39885](https://patchblox.com/security/data/cve/CVE-2025-39885.md) | Routine | ocfs2: fix recursive semaphore deadlock in fiemap call | 5.5 | 0.0012 |  |
| [CVE-2023-53204](https://patchblox.com/security/data/cve/CVE-2023-53204.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.3 | 0.0012 |  |
| [CVE-2023-53520](https://patchblox.com/security/data/cve/CVE-2023-53520.md) | Routine | kernel-docs: Security update for the Linux Kernel | 4.7 | 0.0012 |  |
| [CVE-2023-53519](https://patchblox.com/security/data/cve/CVE-2023-53519.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2023-53447](https://patchblox.com/security/data/cve/CVE-2023-53447.md) | Routine | f2fs: don't reset unchangable mount option in f2fs_remount() | 4.7 | 0.0011 |  |
| [CVE-2025-39889](https://patchblox.com/security/data/cve/CVE-2025-39889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2023-53183](https://patchblox.com/security/data/cve/CVE-2023-53183.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | n/a |  |
| [CVE-2025-38553](https://patchblox.com/security/data/cve/CVE-2025-38553.md) | Routine | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 5.5 | n/a |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.