# SUSE-SU-2025:1180-1: Security update for 13 packages SUSE-SU-2025:1180-1, released April 9, 2025, fixes 189 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2025-1180-1 - Platform: Linux - Released: Apr 9, 2025 - Priority: Urgent (Closes CVE-2025-21858, rated Critical) - CVEs: 189, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:1180-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.47.2 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.47.2 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2.150600.12.20.2 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.47.2.150600.12.20.2 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.1 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.47.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2 | | [kernel-livepatch-SLE15-SP6_Update_10](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-10.md) | sles 15.6 | 1-150600.13.5.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.47.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.47.2 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.47.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.47.2 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.47.2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-21858](https://patchblox.com/security/data/cve/CVE-2025-21858.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0025 | | | [CVE-2025-21760](https://patchblox.com/security/data/cve/CVE-2025-21760.md) | High | kernel-64kb: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763). | 8.1 | 0.3800 | | | [CVE-2025-21759](https://patchblox.com/security/data/cve/CVE-2025-21759.md) | High | kernel-64kb: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). | 7.8 | 0.0780 | | | [CVE-2025-21756](https://patchblox.com/security/data/cve/CVE-2025-21756.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0089 | | | [CVE-2025-21796](https://patchblox.com/security/data/cve/CVE-2025-21796.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0067 | | | [CVE-2025-21762](https://patchblox.com/security/data/cve/CVE-2025-21762.md) | High | kernel-64kb: arp: use RCU protection in arp_xmit() (bsc#1238780). | 8.1 | 0.0066 | | | [CVE-2025-21844](https://patchblox.com/security/data/cve/CVE-2025-21844.md) | High | kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512). | 7.8 | 0.0062 | | | [CVE-2024-56640](https://patchblox.com/security/data/cve/CVE-2024-56640.md) | High | kernel-64kb: net/smc: fix LGR and link use-after-free issue (bsc#1235436). | 7.8 | 0.0062 | | | [CVE-2025-21765](https://patchblox.com/security/data/cve/CVE-2025-21765.md) | High | kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906). | 7.8 | 0.0061 | | | [CVE-2024-46736](https://patchblox.com/security/data/cve/CVE-2024-46736.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0061 | | | [CVE-2024-46796](https://patchblox.com/security/data/cve/CVE-2024-46796.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0044 | | | [CVE-2024-57947](https://patchblox.com/security/data/cve/CVE-2024-57947.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0044 | | | [CVE-2025-21855](https://patchblox.com/security/data/cve/CVE-2025-21855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0044 | | | [CVE-2025-21829](https://patchblox.com/security/data/cve/CVE-2025-21829.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0041 | | | [CVE-2025-21735](https://patchblox.com/security/data/cve/CVE-2025-21735.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0038 | | | [CVE-2025-21704](https://patchblox.com/security/data/cve/CVE-2025-21704.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0037 | | | [CVE-2023-52927](https://patchblox.com/security/data/cve/CVE-2023-52927.md) | High | kernel-64kb: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). | 7.8 | 0.0032 | | | [CVE-2024-57986](https://patchblox.com/security/data/cve/CVE-2024-57986.md) | High | kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections | 7.8 | 0.0032 | | | [CVE-2024-58006](https://patchblox.com/security/data/cve/CVE-2024-58006.md) | High | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() | 7.8 | 0.0031 | | | [CVE-2025-21703](https://patchblox.com/security/data/cve/CVE-2025-21703.md) | High | kernel-64kb: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313). | 7.8 | 0.0030 | | | [CVE-2024-53057](https://patchblox.com/security/data/cve/CVE-2024-53057.md) | High | kernel-64kb: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551). | 7.8 | 0.0029 | | | [CVE-2025-21782](https://patchblox.com/security/data/cve/CVE-2025-21782.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0029 | | | [CVE-2025-21864](https://patchblox.com/security/data/cve/CVE-2025-21864.md) | High | kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482). | 7.8 | 0.0028 | | | [CVE-2024-57980](https://patchblox.com/security/data/cve/CVE-2024-57980.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2025-21785](https://patchblox.com/security/data/cve/CVE-2025-21785.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-57996](https://patchblox.com/security/data/cve/CVE-2024-57996.md) | High | kernel-64kb: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076). | 7.0 | 0.0027 | | | [CVE-2025-21764](https://patchblox.com/security/data/cve/CVE-2025-21764.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-57979](https://patchblox.com/security/data/cve/CVE-2024-57979.md) | High | kernel-64kb: kABI workaround for pps changes (bsc#1238521). | 7.8 | 0.0027 | | | [CVE-2024-57981](https://patchblox.com/security/data/cve/CVE-2024-57981.md) | High | kernel-64k-modules-extra: kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts | 7.8 | 0.0027 | | | [CVE-2025-21791](https://patchblox.com/security/data/cve/CVE-2025-21791.md) | High | kernel-rt: kernel: vrf: use RCU protection in l3mdev_l3_out() | 7.8 | 0.0027 | | | [CVE-2025-21745](https://patchblox.com/security/data/cve/CVE-2025-21745.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-58020](https://patchblox.com/security/data/cve/CVE-2024-58020.md) | High | kernel-rt-debug-core: kernel: HID: multitouch: Add NULL check in mt_input_configured | 7.8 | 0.0026 | | | [CVE-2024-58055](https://patchblox.com/security/data/cve/CVE-2024-58055.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2025-21780](https://patchblox.com/security/data/cve/CVE-2025-21780.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2025-21761](https://patchblox.com/security/data/cve/CVE-2025-21761.md) | High | kernel-64kb: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775). | 7.8 | 0.0026 | | | [CVE-2025-21763](https://patchblox.com/security/data/cve/CVE-2025-21763.md) | High | kernel-64kb: neighbour: use RCU protection in __neigh_notify() (bsc#1237897). | 7.8 | 0.0026 | | | [CVE-2025-21753](https://patchblox.com/security/data/cve/CVE-2025-21753.md) | High | kernel-64kb: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875). | 7.8 | 0.0026 | | | [CVE-2024-57900](https://patchblox.com/security/data/cve/CVE-2024-57900.md) | High | kernel-64kb: ila: serialize calls to nf_register_net_hooks() (bsc#1235973). | 7.8 | 0.0026 | | | [CVE-2024-49924](https://patchblox.com/security/data/cve/CVE-2024-49924.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-58002](https://patchblox.com/security/data/cve/CVE-2024-58002.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-58012](https://patchblox.com/security/data/cve/CVE-2024-58012.md) | High | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | 7.8 | 0.0026 | | | [CVE-2025-21848](https://patchblox.com/security/data/cve/CVE-2025-21848.md) | High | kernel-64kb: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479). | 7.8 | 0.0025 | | | [CVE-2024-58005](https://patchblox.com/security/data/cve/CVE-2024-58005.md) | High | kernel-64k-debug-modules-extra: kernel: tpm: Change to kvalloc() in eventlog/acpi.c | 7.8 | 0.0025 | | | [CVE-2025-21846](https://patchblox.com/security/data/cve/CVE-2025-21846.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-58007](https://patchblox.com/security/data/cve/CVE-2024-58007.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2023-52926](https://patchblox.com/security/data/cve/CVE-2023-52926.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2025-21714](https://patchblox.com/security/data/cve/CVE-2025-21714.md) | High | RDMA/mlx5: Fix implicit ODP use after free | 7.8 | 0.0024 | | | [CVE-2025-21772](https://patchblox.com/security/data/cve/CVE-2025-21772.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-58013](https://patchblox.com/security/data/cve/CVE-2024-58013.md) | High | kernel-debug-devel-matched: kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync | 7.8 | 0.0024 | | | [CVE-2025-21731](https://patchblox.com/security/data/cve/CVE-2025-21731.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2025-21861](https://patchblox.com/security/data/cve/CVE-2025-21861.md) | High | kernel-64kb: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize() (bsc#1239483). | 7.8 | 0.0024 | | | [CVE-2024-57990](https://patchblox.com/security/data/cve/CVE-2024-57990.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-58034](https://patchblox.com/security/data/cve/CVE-2024-58034.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2025-21726](https://patchblox.com/security/data/cve/CVE-2025-21726.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46782](https://patchblox.com/security/data/cve/CVE-2024-46782.md) | High | kernel-64kb: ila: call nf_unregister_net_hooks() sooner (bsc#1230769). | 7.8 | 0.0024 | | | [CVE-2024-58069](https://patchblox.com/security/data/cve/CVE-2024-58069.md) | High | kernel-tools: kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read | 7.8 | 0.0023 | | | [CVE-2025-21794](https://patchblox.com/security/data/cve/CVE-2025-21794.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 | | | [CVE-2024-50126](https://patchblox.com/security/data/cve/CVE-2024-50126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-53680](https://patchblox.com/security/data/cve/CVE-2024-53680.md) | High | kernel-64kb: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715). | 7.8 | 0.0023 | | | [CVE-2024-56638](https://patchblox.com/security/data/cve/CVE-2024-56638.md) | High | kernel-64kb: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524). | 7.8 | 0.0023 | | | [CVE-2024-58083](https://patchblox.com/security/data/cve/CVE-2024-58083.md) | High | kernel-64kb: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036). | 7.8 | 0.0022 | | | [CVE-2025-21738](https://patchblox.com/security/data/cve/CVE-2025-21738.md) | High | ata: libata-sff: Ensure that we cannot write outside the allocated buffer | 7.8 | 0.0022 | | | [CVE-2025-21856](https://patchblox.com/security/data/cve/CVE-2025-21856.md) | High | kernel-64kb: s390/ism: add release function for struct device (bsc#1239486). | 7.8 | 0.0022 | | | [CVE-2024-58014](https://patchblox.com/security/data/cve/CVE-2024-58014.md) | High | kernel-64k-core: kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() | 7.8 | 0.0022 | | | [CVE-2025-21739](https://patchblox.com/security/data/cve/CVE-2025-21739.md) | High | kernel-64kb: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506). | 7.8 | 0.0022 | | | [CVE-2025-21828](https://patchblox.com/security/data/cve/CVE-2025-21828.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21727](https://patchblox.com/security/data/cve/CVE-2025-21727.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21883](https://patchblox.com/security/data/cve/CVE-2025-21883.md) | High | kernel-64kb: ice: Fix deinitializing VF in error path (bsc#1240189). | 7.8 | 0.0022 | | | [CVE-2024-41149](https://patchblox.com/security/data/cve/CVE-2024-41149.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0022 | | | [CVE-2025-21741](https://patchblox.com/security/data/cve/CVE-2025-21741.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21742](https://patchblox.com/security/data/cve/CVE-2025-21742.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21847](https://patchblox.com/security/data/cve/CVE-2025-21847.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-38606](https://patchblox.com/security/data/cve/CVE-2024-38606.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 | | | [CVE-2025-21671](https://patchblox.com/security/data/cve/CVE-2025-21671.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21743](https://patchblox.com/security/data/cve/CVE-2025-21743.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-21857](https://patchblox.com/security/data/cve/CVE-2025-21857.md) | High | kernel-64kb: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478). | 7.8 | 0.0022 | | | [CVE-2024-58072](https://patchblox.com/security/data/cve/CVE-2024-58072.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-21631](https://patchblox.com/security/data/cve/CVE-2025-21631.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-57993](https://patchblox.com/security/data/cve/CVE-2024-57993.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-21750](https://patchblox.com/security/data/cve/CVE-2025-21750.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-21734](https://patchblox.com/security/data/cve/CVE-2025-21734.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-21693](https://patchblox.com/security/data/cve/CVE-2025-21693.md) | High | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 7.8 | 0.0020 | | | [CVE-2025-21869](https://patchblox.com/security/data/cve/CVE-2025-21869.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2024-58054](https://patchblox.com/security/data/cve/CVE-2024-58054.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0020 | | | [CVE-2024-58061](https://patchblox.com/security/data/cve/CVE-2024-58061.md) | High | kernel-rt-modules: kernel: wifi: mac80211: prohibit deactivating all links | 7.8 | 0.0019 | | | [CVE-2025-21815](https://patchblox.com/security/data/cve/CVE-2025-21815.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0019 | | | [CVE-2024-41005](https://patchblox.com/security/data/cve/CVE-2024-41005.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_10: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858). | 7.8 | 0.0019 | | | [CVE-2024-57974](https://patchblox.com/security/data/cve/CVE-2024-57974.md) | High | udp: Deal with race between UDP socket address change and rehash | 7.8 | 0.0018 | | | [CVE-2024-58057](https://patchblox.com/security/data/cve/CVE-2024-58057.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2025-21718](https://patchblox.com/security/data/cve/CVE-2025-21718.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0017 | | | [CVE-2025-21732](https://patchblox.com/security/data/cve/CVE-2025-21732.md) | High | RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error | 7.8 | 0.0014 | | | [CVE-2024-57973](https://patchblox.com/security/data/cve/CVE-2024-57973.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0067 | | | [CVE-2024-47408](https://patchblox.com/security/data/cve/CVE-2024-47408.md) | Routine | kernel-64kb: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711). | 5.5 | 0.0064 | | | [CVE-2024-49571](https://patchblox.com/security/data/cve/CVE-2024-49571.md) | Routine | kernel-64kb: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733). | 5.5 | 0.0059 | | | [CVE-2025-21766](https://patchblox.com/security/data/cve/CVE-2025-21766.md) | Routine | kernel-64kb: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754). | 5.5 | 0.0057 | | | [CVE-2025-21885](https://patchblox.com/security/data/cve/CVE-2025-21885.md) | Routine | RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers | 5.5 | 0.0056 | | | [CVE-2024-56719](https://patchblox.com/security/data/cve/CVE-2024-56719.md) | Routine | net: stmmac: fix TSO DMA API usage causing oops | 5.5 | 0.0054 | | | [CVE-2024-56703](https://patchblox.com/security/data/cve/CVE-2024-56703.md) | Routine | ipv6: Fix soft lockups in fib6_select_path under high next hop churn | 5.5 | 0.0050 | | | [CVE-2024-50152](https://patchblox.com/security/data/cve/CVE-2024-50152.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 | | | [CVE-2024-56718](https://patchblox.com/security/data/cve/CVE-2024-56718.md) | Routine | kernel-source: net/smc: protect link down work from execute after lgr freed (bsc#1235589). | 5.9 | 0.0047 | | | [CVE-2025-21850](https://patchblox.com/security/data/cve/CVE-2025-21850.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0042 | | | [CVE-2025-21890](https://patchblox.com/security/data/cve/CVE-2025-21890.md) | Routine | kernel-64kb: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173). | 5.5 | 0.0039 | | | [CVE-2024-57997](https://patchblox.com/security/data/cve/CVE-2024-57997.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0033 | | | [CVE-2024-49940](https://patchblox.com/security/data/cve/CVE-2024-49940.md) | Routine | l2tp: prevent possible tunnel refcount underflow | 5.5 | 0.0033 | | | [CVE-2024-53063](https://patchblox.com/security/data/cve/CVE-2024-53063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2025-21776](https://patchblox.com/security/data/cve/CVE-2025-21776.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-47794](https://patchblox.com/security/data/cve/CVE-2024-47794.md) | Routine | bpf: Prevent tailcall infinite loop caused by freplace | 5.5 | 0.0028 | | | [CVE-2024-56770](https://patchblox.com/security/data/cve/CVE-2024-56770.md) | Routine | kernel-64kb: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637). | 5.5 | 0.0027 | | | [CVE-2024-57999](https://patchblox.com/security/data/cve/CVE-2024-57999.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 | | | [CVE-2025-21870](https://patchblox.com/security/data/cve/CVE-2025-21870.md) | Routine | ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers | 5.5 | 0.0026 | | | [CVE-2024-35910](https://patchblox.com/security/data/cve/CVE-2024-35910.md) | Routine | kernel-64kb: tcp: properly terminate timers for kernel sockets (bsc#1224489). | 5.8 | 0.0026 | | | [CVE-2025-21723](https://patchblox.com/security/data/cve/CVE-2025-21723.md) | Routine | scsi: mpi3mr: Fix possible crash when setting up bsg fails | 5.5 | 0.0026 | | | [CVE-2024-50290](https://patchblox.com/security/data/cve/CVE-2024-50290.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-58017](https://patchblox.com/security/data/cve/CVE-2024-58017.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2025-21635](https://patchblox.com/security/data/cve/CVE-2025-21635.md) | Routine | rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy | 5.5 | 0.0025 | | | [CVE-2025-21736](https://patchblox.com/security/data/cve/CVE-2025-21736.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2025-21744](https://patchblox.com/security/data/cve/CVE-2025-21744.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2025-21862](https://patchblox.com/security/data/cve/CVE-2025-21862.md) | Routine | kernel-64kb: drop_monitor: fix incorrect initialization order (bsc#1239474). | 5.5 | 0.0025 | | | [CVE-2025-21865](https://patchblox.com/security/data/cve/CVE-2025-21865.md) | Routine | kernel-64kb: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481). | 5.5 | 0.0025 | | | [CVE-2025-21779](https://patchblox.com/security/data/cve/CVE-2025-21779.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-56702](https://patchblox.com/security/data/cve/CVE-2024-56702.md) | Routine | bpf: Mark raw_tp arguments with PTR_MAYBE_NULL | 5.5 | 0.0025 | | | [CVE-2025-21866](https://patchblox.com/security/data/cve/CVE-2025-21866.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-53163](https://patchblox.com/security/data/cve/CVE-2024-53163.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-56758](https://patchblox.com/security/data/cve/CVE-2024-56758.md) | Routine | kernel-64kb: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621). | 5.5 | 0.0025 | | | [CVE-2024-52559](https://patchblox.com/security/data/cve/CVE-2024-52559.md) | Routine | drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() | 5.5 | 0.0025 | | | [CVE-2024-57834](https://patchblox.com/security/data/cve/CVE-2024-57834.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-53140](https://patchblox.com/security/data/cve/CVE-2024-53140.md) | Routine | kernel-64kb: netlink: terminate outstanding dump on socket close (bsc#1234222). | 5.5 | 0.0025 | | | [CVE-2025-21886](https://patchblox.com/security/data/cve/CVE-2025-21886.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-21888](https://patchblox.com/security/data/cve/CVE-2025-21888.md) | Routine | RDMA/mlx5: Fix a WARN during dereg_mr for DM type | 5.5 | 0.0024 | | | [CVE-2024-58052](https://patchblox.com/security/data/cve/CVE-2024-58052.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-49994](https://patchblox.com/security/data/cve/CVE-2024-49994.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52831](https://patchblox.com/security/data/cve/CVE-2023-52831.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-21823](https://patchblox.com/security/data/cve/CVE-2025-21823.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-58058](https://patchblox.com/security/data/cve/CVE-2024-58058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-21754](https://patchblox.com/security/data/cve/CVE-2025-21754.md) | Routine | kernel-64kb: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496). | 5.5 | 0.0023 | | | [CVE-2025-21877](https://patchblox.com/security/data/cve/CVE-2025-21877.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-50140](https://patchblox.com/security/data/cve/CVE-2024-50140.md) | Routine | kernel-64kb: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060). | 5.5 | 0.0023 | | | [CVE-2025-21835](https://patchblox.com/security/data/cve/CVE-2025-21835.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-58051](https://patchblox.com/security/data/cve/CVE-2024-58051.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-26634](https://patchblox.com/security/data/cve/CVE-2024-26634.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2025-21711](https://patchblox.com/security/data/cve/CVE-2025-21711.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-58011](https://patchblox.com/security/data/cve/CVE-2024-58011.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-58063](https://patchblox.com/security/data/cve/CVE-2024-58063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-41077](https://patchblox.com/security/data/cve/CVE-2024-41077.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2025-21708](https://patchblox.com/security/data/cve/CVE-2025-21708.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2025-21781](https://patchblox.com/security/data/cve/CVE-2025-21781.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-57978](https://patchblox.com/security/data/cve/CVE-2024-57978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21775](https://patchblox.com/security/data/cve/CVE-2025-21775.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21773](https://patchblox.com/security/data/cve/CVE-2025-21773.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21793](https://patchblox.com/security/data/cve/CVE-2025-21793.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21706](https://patchblox.com/security/data/cve/CVE-2025-21706.md) | Routine | kernel-64kb: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528). | 5.5 | 0.0022 | | | [CVE-2024-56751](https://patchblox.com/security/data/cve/CVE-2024-56751.md) | Routine | kernel-docs: ipv6: release nexthop on device removal (bsc#1234936). | 6.4 | 0.0022 | | | [CVE-2024-50056](https://patchblox.com/security/data/cve/CVE-2024-50056.md) | Routine | kernel-64kb: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389). | 5.5 | 0.0022 | | | [CVE-2025-21825](https://patchblox.com/security/data/cve/CVE-2025-21825.md) | Routine | bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT | 4.7 | 0.0022 | | | [CVE-2025-21871](https://patchblox.com/security/data/cve/CVE-2025-21871.md) | Routine | kernel-64kb: tee: optee: Fix supplicant wait loop (bsc#1240183). | 5.5 | 0.0022 | | | [CVE-2025-21876](https://patchblox.com/security/data/cve/CVE-2025-21876.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-58085](https://patchblox.com/security/data/cve/CVE-2024-58085.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-35826](https://patchblox.com/security/data/cve/CVE-2024-35826.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-42307](https://patchblox.com/security/data/cve/CVE-2024-42307.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-58079](https://patchblox.com/security/data/cve/CVE-2024-58079.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21838](https://patchblox.com/security/data/cve/CVE-2025-21838.md) | Routine | usb: gadget: core: flush gadget workqueue after device removal | 6.0 | 0.0021 | | | [CVE-2025-21784](https://patchblox.com/security/data/cve/CVE-2025-21784.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21891](https://patchblox.com/security/data/cve/CVE-2025-21891.md) | Routine | ipvlan: ensure network headers are in skb linear part | 5.5 | 0.0021 | | | [CVE-2024-58009](https://patchblox.com/security/data/cve/CVE-2024-58009.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21749](https://patchblox.com/security/data/cve/CVE-2025-21749.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21804](https://patchblox.com/security/data/cve/CVE-2025-21804.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21810](https://patchblox.com/security/data/cve/CVE-2025-21810.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2024-58019](https://patchblox.com/security/data/cve/CVE-2024-58019.md) | Routine | kernel-64kb: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997). | 5.5 | 0.0020 | | | [CVE-2024-43820](https://patchblox.com/security/data/cve/CVE-2024-43820.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2024-58086](https://patchblox.com/security/data/cve/CVE-2024-58086.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-21733](https://patchblox.com/security/data/cve/CVE-2025-21733.md) | Routine | kernel-64kb: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494). | 5.5 | 0.0020 | | | [CVE-2025-21821](https://patchblox.com/security/data/cve/CVE-2025-21821.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-21819](https://patchblox.com/security/data/cve/CVE-2025-21819.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-21832](https://patchblox.com/security/data/cve/CVE-2025-21832.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-21859](https://patchblox.com/security/data/cve/CVE-2025-21859.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2024-58076](https://patchblox.com/security/data/cve/CVE-2024-58076.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2024-58056](https://patchblox.com/security/data/cve/CVE-2024-58056.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2025-21830](https://patchblox.com/security/data/cve/CVE-2025-21830.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2024-58078](https://patchblox.com/security/data/cve/CVE-2024-58078.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2024-58080](https://patchblox.com/security/data/cve/CVE-2024-58080.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2025-21659](https://patchblox.com/security/data/cve/CVE-2025-21659.md) | Routine | kernel-64kb: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206). | 5.5 | 0.0018 | | | [CVE-2025-21831](https://patchblox.com/security/data/cve/CVE-2025-21831.md) | Routine | PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 | 5.5 | 0.0018 | | | [CVE-2025-21878](https://patchblox.com/security/data/cve/CVE-2025-21878.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2024-57807](https://patchblox.com/security/data/cve/CVE-2024-57807.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.4 | 0.0018 | | | [CVE-2025-21701](https://patchblox.com/security/data/cve/CVE-2025-21701.md) | Routine | kernel-64kb: net: avoid race between device unregistration and ethnl ops (bsc#1237164). | 4.7 | 0.0017 | | | [CVE-2024-26873](https://patchblox.com/security/data/cve/CVE-2024-26873.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2025-21820](https://patchblox.com/security/data/cve/CVE-2025-21820.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2025-21892](https://patchblox.com/security/data/cve/CVE-2025-21892.md) | Routine | RDMA/mlx5: Fix the recovery flow of the UMR QP | 4.7 | 0.0017 | | | [CVE-2024-54683](https://patchblox.com/security/data/cve/CVE-2024-54683.md) | Routine | kernel-64kb: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729). | 5.5 | 0.0016 | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.