# SUSE-SU-2025:21139-1: Security update for 9 packages

SUSE-SU-2025:21139-1, released November 25, 2025, fixes 570 CVEs across 9 products. 2 of them are being exploited (CVE-2025-39682); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-21139-1
- Platform: Linux
- Released: Nov 25, 2025
- Priority: Patch now (Closes CVE-2025-39682, exploited (CISA KEV))
- CVEs: 570, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:21139-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.6.1.160000.2.4 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.6.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.6.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-39682](https://patchblox.com/security/data/cve/CVE-2025-39682.md) | Patch now | tls: fix handling of zero-length records on the rx_list | 9.8 | 0.0331 | CISA KEV |
| [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV |
| [CVE-2025-39907](https://patchblox.com/security/data/cve/CVE-2025-39907.md) | Urgent | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer | 9.8 | 0.0015 |  |
| [CVE-2025-39925](https://patchblox.com/security/data/cve/CVE-2025-39925.md) | Urgent | can: j1939: implement NETDEV_UNREGISTER notification handler | 9.8 | 0.0015 |  |
| [CVE-2025-39898](https://patchblox.com/security/data/cve/CVE-2025-39898.md) | Urgent | e1000e: fix heap overflow in e1000_set_eeprom | 9.8 | n/a |  |
| [CVE-2025-39946](https://patchblox.com/security/data/cve/CVE-2025-39946.md) | High | tls: make sure to abort the stream if headers are bogus | 7.0 | 0.1026 |  |
| [CVE-2025-38488](https://patchblox.com/security/data/cve/CVE-2025-38488.md) | High | kernel-64kb: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239). | 7.8 | 0.0077 |  |
| [CVE-2025-38566](https://patchblox.com/security/data/cve/CVE-2025-38566.md) | High | sunrpc: fix handling of server side tls alerts | 8.1 | 0.0067 |  |
| [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 |  |
| [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 |  |
| [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 |  |
| [CVE-2025-38089](https://patchblox.com/security/data/cve/CVE-2025-38089.md) | High | sunrpc: handle SVC_GARBAGE during svc auth processing as auth error | 7.5 | 0.0056 |  |
| [CVE-2025-38052](https://patchblox.com/security/data/cve/CVE-2025-38052.md) | High | net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done | 7.8 | 0.0055 |  |
| [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 |  |
| [CVE-2025-38146](https://patchblox.com/security/data/cve/CVE-2025-38146.md) | High | net: openvswitch: Fix the dead loop of MPLS parse | 7.8 | 0.0049 |  |
| [CVE-2025-38734](https://patchblox.com/security/data/cve/CVE-2025-38734.md) | High | net/smc: fix UAF on smcsk after smc_listen_out() | 7.8 | 0.0048 |  |
| [CVE-2025-39841](https://patchblox.com/security/data/cve/CVE-2025-39841.md) | High | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 7.8 | 0.0048 |  |
| [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0047 |  |
| [CVE-2025-38429](https://patchblox.com/security/data/cve/CVE-2025-38429.md) | High | bus: mhi: ep: Update read pointer only after buffer is written | 7.1 | 0.0047 |  |
| [CVE-2025-38472](https://patchblox.com/security/data/cve/CVE-2025-38472.md) | High | netfilter: nf_conntrack: fix crash due to removal of uninitialised entry | 7.5 | 0.0046 |  |
| [CVE-2025-38075](https://patchblox.com/security/data/cve/CVE-2025-38075.md) | High | scsi: target: iscsi: Fix timeout on deleted connection | 7.0 | 0.0046 |  |
| [CVE-2025-38527](https://patchblox.com/security/data/cve/CVE-2025-38527.md) | High | smb: client: fix use-after-free in cifs_oplock_break | 7.8 | 0.0046 |  |
| [CVE-2025-38264](https://patchblox.com/security/data/cve/CVE-2025-38264.md) | High | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 |  |
| [CVE-2025-38563](https://patchblox.com/security/data/cve/CVE-2025-38563.md) | High | perf/core: Prevent VMA split of buffer mappings | 7.8 | 0.0044 |  |
| [CVE-2025-38608](https://patchblox.com/security/data/cve/CVE-2025-38608.md) | High | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 7.1 | 0.0044 |  |
| [CVE-2025-38617](https://patchblox.com/security/data/cve/CVE-2025-38617.md) | High | net/packet: fix a race in packet_set_ring() and packet_notifier() | 7.0 | 0.0043 |  |
| [CVE-2025-38676](https://patchblox.com/security/data/cve/CVE-2025-38676.md) | High | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 7.8 | 0.0042 |  |
| [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 |  |
| [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0041 |  |
| [CVE-2025-38724](https://patchblox.com/security/data/cve/CVE-2025-38724.md) | High | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | 7.8 | 0.0041 |  |
| [CVE-2025-38660](https://patchblox.com/security/data/cve/CVE-2025-38660.md) | High | [ceph] parse_longname(): strrchr() expects NUL-terminated string | 7.1 | 0.0041 |  |
| [CVE-2025-39851](https://patchblox.com/security/data/cve/CVE-2025-39851.md) | High | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 7.0 | 0.0040 |  |
| [CVE-2025-38476](https://patchblox.com/security/data/cve/CVE-2025-38476.md) | High | rpl: Fix use-after-free in rpl_do_srh_inline(). | 7.8 | 0.0040 |  |
| [CVE-2025-39703](https://patchblox.com/security/data/cve/CVE-2025-39703.md) | High | net, hsr: reject HSR frame if skb can't hold tag | 7.0 | 0.0039 |  |
| [CVE-2025-22077](https://patchblox.com/security/data/cve/CVE-2025-22077.md) | High | kernel-64kb: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403). | 7.1 | 0.0039 |  |
| [CVE-2025-40300](https://patchblox.com/security/data/cve/CVE-2025-40300.md) | High | x86/vmscape: Add conditional IBPB mitigation | 7.3 | 0.0038 |  |
| [CVE-2025-38495](https://patchblox.com/security/data/cve/CVE-2025-38495.md) | High | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 |  |
| [CVE-2025-38571](https://patchblox.com/security/data/cve/CVE-2025-38571.md) | High | sunrpc: fix client side handling of tls alerts | 8.1 | 0.0037 |  |
| [CVE-2025-38490](https://patchblox.com/security/data/cve/CVE-2025-38490.md) | High | net: libwx: remove duplicate page_pool_put_full_page() | 9.8 | 0.0036 |  |
| [CVE-2025-38552](https://patchblox.com/security/data/cve/CVE-2025-38552.md) | High | mptcp: plug races between subflow fail and subflow creation | 7.8 | 0.0035 |  |
| [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 |  |
| [CVE-2025-38533](https://patchblox.com/security/data/cve/CVE-2025-38533.md) | High | net: libwx: fix the using of Rx buffer DMA | 7.8 | 0.0033 |  |
| [CVE-2025-37861](https://patchblox.com/security/data/cve/CVE-2025-37861.md) | High | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | 7.8 | 0.0033 |  |
| [CVE-2025-39673](https://patchblox.com/security/data/cve/CVE-2025-39673.md) | High | ppp: fix race conditions in ppp_fill_forward_path | 7.0 | 0.0032 |  |
| [CVE-2025-38292](https://patchblox.com/security/data/cve/CVE-2025-38292.md) | High | wifi: ath12k: fix invalid access to memory | 7.3 | 0.0031 |  |
| [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 |  |
| [CVE-2025-39952](https://patchblox.com/security/data/cve/CVE-2025-39952.md) | High | wifi: wilc1000: avoid buffer overflow in WID string configuration | 7.8 | 0.0029 |  |
| [CVE-2025-38678](https://patchblox.com/security/data/cve/CVE-2025-38678.md) | High | netfilter: nf_tables: reject duplicate device on updates | 7.1 | 0.0029 |  |
| [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 |  |
| [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 |  |
| [CVE-2025-37849](https://patchblox.com/security/data/cve/CVE-2025-37849.md) | High | KVM: arm64: Tear down vGIC on failed vCPU creation | 7.8 | 0.0027 |  |
| [CVE-2025-38601](https://patchblox.com/security/data/cve/CVE-2025-38601.md) | High | wifi: ath11k: clear initialized flag for deinit-ed srng lists | 7.0 | 0.0027 |  |
| [CVE-2024-57951](https://patchblox.com/security/data/cve/CVE-2024-57951.md) | High | kernel-64kb: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108). | 7.8 | 0.0027 |  |
| [CVE-2025-38494](https://patchblox.com/security/data/cve/CVE-2025-38494.md) | High | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 |  |
| [CVE-2025-39839](https://patchblox.com/security/data/cve/CVE-2025-39839.md) | High | batman-adv: fix OOB read/write in network-coding decode | 7.1 | 0.0026 |  |
| [CVE-2025-38244](https://patchblox.com/security/data/cve/CVE-2025-38244.md) | High | smb: client: fix potential deadlock when reconnecting channels | 7.0 | 0.0025 |  |
| [CVE-2025-38585](https://patchblox.com/security/data/cve/CVE-2025-38585.md) | High | staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() | 7.8 | 0.0025 |  |
| [CVE-2025-38416](https://patchblox.com/security/data/cve/CVE-2025-38416.md) | High | NFC: nci: uart: Set tty->disc_data only in success path | 7.8 | 0.0025 |  |
| [CVE-2025-39723](https://patchblox.com/security/data/cve/CVE-2025-39723.md) | High | kernel-64kb: kABI: netfs: handle new netfs_io_stream flag (bsc#1249314). | 7.8 | 0.0024 |  |
| [CVE-2025-38491](https://patchblox.com/security/data/cve/CVE-2025-38491.md) | High | mptcp: make fallback action and fallback decision atomic | 7.0 | 0.0024 |  |
| [CVE-2025-38201](https://patchblox.com/security/data/cve/CVE-2025-38201.md) | High | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX | 7.8 | 0.0024 |  |
| [CVE-2025-38290](https://patchblox.com/security/data/cve/CVE-2025-38290.md) | High | wifi: ath12k: fix node corruption in ar->arvifs list | 7.8 | 0.0024 |  |
| [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-38361](https://patchblox.com/security/data/cve/CVE-2025-38361.md) | High | drm/amd/display: Check dce_hwseq before dereferencing it | 7.8 | 0.0024 |  |
| [CVE-2025-39750](https://patchblox.com/security/data/cve/CVE-2025-39750.md) | High | wifi: ath12k: Correct tid cleanup when tid setup fails | 7.1 | 0.0024 |  |
| [CVE-2025-39761](https://patchblox.com/security/data/cve/CVE-2025-39761.md) | High | wifi: ath12k: Decrement TID on RX peer frag setup error handling | 7.1 | 0.0024 |  |
| [CVE-2025-38421](https://patchblox.com/security/data/cve/CVE-2025-38421.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-39864](https://patchblox.com/security/data/cve/CVE-2025-39864.md) | High | wifi: cfg80211: fix use-after-free in cmp_bss() | 7.8 | 0.0024 |  |
| [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 |  |
| [CVE-2025-38137](https://patchblox.com/security/data/cve/CVE-2025-38137.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-38466](https://patchblox.com/security/data/cve/CVE-2025-38466.md) | High | perf: Revert to requiring CAP_SYS_ADMIN for uprobes | 7.8 | 0.0023 |  |
| [CVE-2025-39860](https://patchblox.com/security/data/cve/CVE-2025-39860.md) | High | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 7.8 | 0.0023 |  |
| [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 |  |
| [CVE-2025-38096](https://patchblox.com/security/data/cve/CVE-2025-38096.md) | High | wifi: iwlwifi: don't warn when if there is a FW error | 7.0 | 0.0023 |  |
| [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 |  |
| [CVE-2025-38582](https://patchblox.com/security/data/cve/CVE-2025-38582.md) | High | RDMA/hns: Fix double destruction of rsv_qp | 7.8 | 0.0023 |  |
| [CVE-2025-38595](https://patchblox.com/security/data/cve/CVE-2025-38595.md) | High | xen: fix UAF in dmabuf_exp_from_pages() | 7.8 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-38140](https://patchblox.com/security/data/cve/CVE-2025-38140.md) | High | dm: limit swapping tables for devices with zone write plugs | 7.0 | 0.0023 |  |
| [CVE-2025-38414](https://patchblox.com/security/data/cve/CVE-2025-38414.md) | High | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 7.0 | 0.0023 |  |
| [CVE-2025-38184](https://patchblox.com/security/data/cve/CVE-2025-38184.md) | High | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 7.0 | 0.0022 |  |
| [CVE-2025-39849](https://patchblox.com/security/data/cve/CVE-2025-39849.md) | High | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 |  |
| [CVE-2025-38372](https://patchblox.com/security/data/cve/CVE-2025-38372.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0022 |  |
| [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 |  |
| [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 |  |
| [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 |  |
| [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 |  |
| [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 |  |
| [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 |  |
| [CVE-2025-38428](https://patchblox.com/security/data/cve/CVE-2025-38428.md) | High | Input: ims-pcu - check record size in ims_pcu_flash_firmware() | 7.8 | 0.0022 |  |
| [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 |  |
| [CVE-2025-39826](https://patchblox.com/security/data/cve/CVE-2025-39826.md) | High | net: rose: convert 'use' field to refcount_t | 7.0 | 0.0022 |  |
| [CVE-2025-39677](https://patchblox.com/security/data/cve/CVE-2025-39677.md) | High | net/sched: Fix backlog accounting in qdisc_dequeue_internal | 7.0 | 0.0021 |  |
| [CVE-2025-38019](https://patchblox.com/security/data/cve/CVE-2025-38019.md) | High | kernel-64kb: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000). | 7.8 | 0.0021 |  |
| [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 |  |
| [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 |  |
| [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 |  |
| [CVE-2025-38267](https://patchblox.com/security/data/cve/CVE-2025-38267.md) | High | kernel-64kb: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (bsc#1246245). | 7.8 | 0.0021 |  |
| [CVE-2025-38286](https://patchblox.com/security/data/cve/CVE-2025-38286.md) | High | pinctrl: at91: Fix possible out-of-boundary access | 7.1 | 0.0021 |  |
| [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 |  |
| [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 |  |
| [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 |  |
| [CVE-2025-38616](https://patchblox.com/security/data/cve/CVE-2025-38616.md) | High | tls: handle data disappearing from under the TLS ULP | 7.1 | 0.0021 |  |
| [CVE-2025-38605](https://patchblox.com/security/data/cve/CVE-2025-38605.md) | High | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | 7.0 | 0.0021 |  |
| [CVE-2025-38656](https://patchblox.com/security/data/cve/CVE-2025-38656.md) | High | wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() | 7.8 | 0.0021 |  |
| [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 |  |
| [CVE-2025-39732](https://patchblox.com/security/data/cve/CVE-2025-39732.md) | High | wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() | 7.0 | 0.0021 |  |
| [CVE-2025-39918](https://patchblox.com/security/data/cve/CVE-2025-39918.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.6 | 0.0021 |  |
| [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 |  |
| [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 |  |
| [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 |  |
| [CVE-2025-38722](https://patchblox.com/security/data/cve/CVE-2025-38722.md) | High | habanalabs: fix UAF in export_dmabuf() | 7.8 | 0.0021 |  |
| [CVE-2025-38317](https://patchblox.com/security/data/cve/CVE-2025-38317.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-38101](https://patchblox.com/security/data/cve/CVE-2025-38101.md) | High | kernel-64kb: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659). | 7.8 | 0.0020 |  |
| [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 |  |
| [CVE-2025-38565](https://patchblox.com/security/data/cve/CVE-2025-38565.md) | High | perf/core: Exit early on perf_mmap() fail | 7.8 | 0.0020 |  |
| [CVE-2025-38572](https://patchblox.com/security/data/cve/CVE-2025-38572.md) | High | ipv6: reject malicious packets in ipv6_gso_segment() | 7.8 | 0.0020 |  |
| [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 |  |
| [CVE-2025-38153](https://patchblox.com/security/data/cve/CVE-2025-38153.md) | High | net: usb: aqc111: fix error handling of usbnet read calls | 7.1 | 0.0020 |  |
| [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 |  |
| [CVE-2025-38425](https://patchblox.com/security/data/cve/CVE-2025-38425.md) | High | i2c: tegra: check msg length in SMBUS block read | 7.8 | 0.0020 |  |
| [CVE-2025-39698](https://patchblox.com/security/data/cve/CVE-2025-39698.md) | High | kernel-64kb: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (bsc#1249322). | 7.5 | 0.0020 |  |
| [CVE-2025-38385](https://patchblox.com/security/data/cve/CVE-2025-38385.md) | High | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 7.8 | 0.0020 |  |
| [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 |  |
| [CVE-2025-38449](https://patchblox.com/security/data/cve/CVE-2025-38449.md) | High | drm/gem: Acquire references on GEM handles for framebuffers | 7.8 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 |  |
| [CVE-2025-38278](https://patchblox.com/security/data/cve/CVE-2025-38278.md) | High | octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback | 7.1 | 0.0020 |  |
| [CVE-2025-38118](https://patchblox.com/security/data/cve/CVE-2025-38118.md) | High | Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete | 7.8 | 0.0020 |  |
| [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 |  |
| [CVE-2025-39810](https://patchblox.com/security/data/cve/CVE-2025-39810.md) | High | bnxt_en: Fix memory corruption when FW resources change during ifdown | 7.8 | 0.0020 |  |
| [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 |  |
| [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0020 |  |
| [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 |  |
| [CVE-2025-38270](https://patchblox.com/security/data/cve/CVE-2025-38270.md) | High | kernel-64kb: net: drv: netdevsim: do not napi_complete() from netpoll (bsc#1246252). | 7.8 | 0.0020 |  |
| [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 |  |
| [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 |  |
| [CVE-2025-38125](https://patchblox.com/security/data/cve/CVE-2025-38125.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring EST | 7.0 | 0.0020 |  |
| [CVE-2025-38141](https://patchblox.com/security/data/cve/CVE-2025-38141.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-38288](https://patchblox.com/security/data/cve/CVE-2025-38288.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-38555](https://patchblox.com/security/data/cve/CVE-2025-38555.md) | High | usb: gadget : fix use-after-free in composite_dev_cleanup() | 7.8 | 0.0020 |  |
| [CVE-2025-39686](https://patchblox.com/security/data/cve/CVE-2025-39686.md) | High | comedi: Make insn_rw_emulate_bits() do insn->n samples | 7.8 | 0.0020 |  |
| [CVE-2025-39701](https://patchblox.com/security/data/cve/CVE-2025-39701.md) | High | ACPI: pfr_update: Fix the driver update version check | 7.8 | 0.0020 |  |
| [CVE-2025-38322](https://patchblox.com/security/data/cve/CVE-2025-38322.md) | High | kernel-default: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-38413](https://patchblox.com/security/data/cve/CVE-2025-38413.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2025-39850](https://patchblox.com/security/data/cve/CVE-2025-39850.md) | High | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 7.0 | 0.0020 |  |
| [CVE-2025-38090](https://patchblox.com/security/data/cve/CVE-2025-38090.md) | High | drivers/rapidio/rio_cm.c: prevent possible heap overwrite | 7.8 | 0.0020 |  |
| [CVE-2025-38106](https://patchblox.com/security/data/cve/CVE-2025-38106.md) | High | kernel-obs-build: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664). | 7.8 | 0.0020 |  |
| [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0020 |  |
| [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 |  |
| [CVE-2025-38088](https://patchblox.com/security/data/cve/CVE-2025-38088.md) | High | powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap | 7.1 | 0.0020 |  |
| [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 |  |
| [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 |  |
| [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 |  |
| [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 |  |
| [CVE-2025-38062](https://patchblox.com/security/data/cve/CVE-2025-38062.md) | High | genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie | 7.8 | 0.0020 |  |
| [CVE-2025-38614](https://patchblox.com/security/data/cve/CVE-2025-38614.md) | High | eventpoll: Fix semi-unbounded recursion | 7.5 | 0.0020 |  |
| [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 |  |
| [CVE-2025-38119](https://patchblox.com/security/data/cve/CVE-2025-38119.md) | High | scsi: core: ufs: Fix a hang in the error handler | 7.0 | 0.0020 |  |
| [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 |  |
| [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 |  |
| [CVE-2025-38584](https://patchblox.com/security/data/cve/CVE-2025-38584.md) | High | padata: Fix pd UAF once and for all | 7.8 | 0.0019 |  |
| [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 |  |
| [CVE-2025-38581](https://patchblox.com/security/data/cve/CVE-2025-38581.md) | High | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 7.0 | 0.0019 |  |
| [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 |  |
| [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 |  |
| [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 |  |
| [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 |  |
| [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 |  |
| [CVE-2025-38182](https://patchblox.com/security/data/cve/CVE-2025-38182.md) | High | ublk: santizize the arguments from userspace when adding a device | 7.8 | 0.0019 |  |
| [CVE-2025-38351](https://patchblox.com/security/data/cve/CVE-2025-38351.md) | High | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 7.5 | 0.0019 |  |
| [CVE-2025-39683](https://patchblox.com/security/data/cve/CVE-2025-39683.md) | High | tracing: Limit access to parser->buffer when trace_get_user failed | 7.1 | 0.0019 |  |
| [CVE-2025-38099](https://patchblox.com/security/data/cve/CVE-2025-38099.md) | High | Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken | 7.0 | 0.0019 |  |
| [CVE-2025-38160](https://patchblox.com/security/data/cve/CVE-2025-38160.md) | High | clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() | 7.0 | 0.0019 |  |
| [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38277](https://patchblox.com/security/data/cve/CVE-2025-38277.md) | High | mtd: nand: ecc-mxic: Fix use of uninitialized variable ret | 7.1 | 0.0019 |  |
| [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38038](https://patchblox.com/security/data/cve/CVE-2025-38038.md) | High | cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost | 7.0 | 0.0019 |  |
| [CVE-2025-38134](https://patchblox.com/security/data/cve/CVE-2025-38134.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 |  |
| [CVE-2025-38289](https://patchblox.com/security/data/cve/CVE-2025-38289.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38456](https://patchblox.com/security/data/cve/CVE-2025-38456.md) | High | ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() | 7.8 | 0.0019 |  |
| [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 |  |
| [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 |  |
| [CVE-2025-38313](https://patchblox.com/security/data/cve/CVE-2025-38313.md) | High | bus: fsl-mc: fix double-free on mc_dev | 7.8 | 0.0019 |  |
| [CVE-2025-38560](https://patchblox.com/security/data/cve/CVE-2025-38560.md) | High | x86/sev: Evict cache lines during SNP memory validation | 7.5 | 0.0019 |  |
| [CVE-2025-38392](https://patchblox.com/security/data/cve/CVE-2025-38392.md) | High | kernel-64kb: idpf: convert control queue mutex to a spinlock (bsc#1247169). | 7.3 | 0.0019 |  |
| [CVE-2025-38409](https://patchblox.com/security/data/cve/CVE-2025-38409.md) | High | drm/msm: Fix another leak in the submit error path | 7.1 | 0.0019 |  |
| [CVE-2025-38417](https://patchblox.com/security/data/cve/CVE-2025-38417.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 |  |
| [CVE-2025-38427](https://patchblox.com/security/data/cve/CVE-2025-38427.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-38463](https://patchblox.com/security/data/cve/CVE-2025-38463.md) | High | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 |  |
| [CVE-2025-38117](https://patchblox.com/security/data/cve/CVE-2025-38117.md) | High | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 7.8 | 0.0019 |  |
| [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 |  |
| [CVE-2025-38453](https://patchblox.com/security/data/cve/CVE-2025-38453.md) | High | kernel-source: kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred (bsc#1247234). | 7.8 | 0.0019 |  |
| [CVE-2025-38568](https://patchblox.com/security/data/cve/CVE-2025-38568.md) | High | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 7.8 | 0.0019 |  |
| [CVE-2025-38593](https://patchblox.com/security/data/cve/CVE-2025-38593.md) | High | Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' | 7.8 | 0.0019 |  |
| [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 |  |
| [CVE-2025-38438](https://patchblox.com/security/data/cve/CVE-2025-38438.md) | High | ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. | 7.1 | 0.0019 |  |
| [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 |  |
| [CVE-2025-39687](https://patchblox.com/security/data/cve/CVE-2025-39687.md) | High | iio: light: as73211: Ensure buffer holes are zeroed | 7.1 | 0.0019 |  |
| [CVE-2025-38058](https://patchblox.com/security/data/cve/CVE-2025-38058.md) | High | __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock | 7.0 | 0.0019 |  |
| [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 |  |
| [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 |  |
| [CVE-2025-38499](https://patchblox.com/security/data/cve/CVE-2025-38499.md) | High | clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns | 8.2 | 0.0019 |  |
| [CVE-2025-38227](https://patchblox.com/security/data/cve/CVE-2025-38227.md) | High | media: vidtv: Terminating the subsequent process of initialization failure | 7.8 | 0.0019 |  |
| [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 |  |
| [CVE-2025-38341](https://patchblox.com/security/data/cve/CVE-2025-38341.md) | High | kernel-64kb: eth: fbnic: avoid double free when failing to DMA-map FW msg (bsc#1246260). | 7.8 | 0.0019 |  |
| [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 |  |
| [CVE-2025-38349](https://patchblox.com/security/data/cve/CVE-2025-38349.md) | High | eventpoll: don't decrement ep refcount while still holding the ep mutex | 8.4 | 0.0018 |  |
| [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 |  |
| [CVE-2025-38618](https://patchblox.com/security/data/cve/CVE-2025-38618.md) | High | vsock: Do not allow binding to VMADDR_PORT_ANY | 7.8 | 0.0018 |  |
| [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 |  |
| [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 |  |
| [CVE-2025-39727](https://patchblox.com/security/data/cve/CVE-2025-39727.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2025-38493](https://patchblox.com/security/data/cve/CVE-2025-38493.md) | High | tracing/osnoise: Fix crash in timerlat_dump_stack() | 7.0 | 0.0018 |  |
| [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 |  |
| [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 |  |
| [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 |  |
| [CVE-2025-38732](https://patchblox.com/security/data/cve/CVE-2025-38732.md) | High | netfilter: nf_reject: don't leak dst refcount for loopback packets | 7.0 | 0.0018 |  |
| [CVE-2025-38446](https://patchblox.com/security/data/cve/CVE-2025-38446.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0018 |  |
| [CVE-2025-38208](https://patchblox.com/security/data/cve/CVE-2025-38208.md) | High | smb: client: add NULL check in automount_fullpath | 7.0 | 0.0018 |  |
| [CVE-2025-38556](https://patchblox.com/security/data/cve/CVE-2025-38556.md) | High | HID: core: Harden s32ton() against conversion to 0 bits | 8.0 | 0.0018 |  |
| [CVE-2025-39823](https://patchblox.com/security/data/cve/CVE-2025-39823.md) | High | KVM: x86: use array_index_nospec with indices that come from guest | 7.8 | 0.0018 |  |
| [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 |  |
| [CVE-2025-38500](https://patchblox.com/security/data/cve/CVE-2025-38500.md) | High | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 7.8 | 0.0018 |  |
| [CVE-2025-38736](https://patchblox.com/security/data/cve/CVE-2025-38736.md) | High | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization | 7.1 | 0.0018 |  |
| [CVE-2025-38186](https://patchblox.com/security/data/cve/CVE-2025-38186.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_3: Security update for the Linux Kernel | 7.0 | 0.0018 |  |
| [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 |  |
| [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 |  |
| [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 |  |
| [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 |  |
| [CVE-2025-38087](https://patchblox.com/security/data/cve/CVE-2025-38087.md) | High | net/sched: fix use-after-free in taprio_dev_notifier | 7.8 | 0.0018 |  |
| [CVE-2025-38257](https://patchblox.com/security/data/cve/CVE-2025-38257.md) | High | s390/pkey: Prevent overflow in size calculation for memdup_user() | 7.8 | 0.0018 |  |
| [CVE-2025-38224](https://patchblox.com/security/data/cve/CVE-2025-38224.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0018 |  |
| [CVE-2025-38587](https://patchblox.com/security/data/cve/CVE-2025-38587.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0018 |  |
| [CVE-2025-38091](https://patchblox.com/security/data/cve/CVE-2025-38091.md) | High | drm/amd/display: check stream id dml21 wrapper to get plane_id | 7.8 | 0.0018 |  |
| [CVE-2025-38172](https://patchblox.com/security/data/cve/CVE-2025-38172.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2025-38216](https://patchblox.com/security/data/cve/CVE-2025-38216.md) | High | kernel-64kb: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963). | 7.8 | 0.0018 |  |
| [CVE-2025-38735](https://patchblox.com/security/data/cve/CVE-2025-38735.md) | High | gve: prevent ethtool ops after shutdown | 7.0 | 0.0018 |  |
| [CVE-2025-38609](https://patchblox.com/security/data/cve/CVE-2025-38609.md) | High | PM / devfreq: Check governor before using governor->name | 7.8 | 0.0018 |  |
| [CVE-2025-38703](https://patchblox.com/security/data/cve/CVE-2025-38703.md) | High | drm/xe: Make dma-fences compliant with the safe access rules | 7.8 | 0.0018 |  |
| [CVE-2025-38169](https://patchblox.com/security/data/cve/CVE-2025-38169.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0018 |  |
| [CVE-2025-38304](https://patchblox.com/security/data/cve/CVE-2025-38304.md) | High | Bluetooth: Fix NULL pointer deference on eir_get_service_data | 7.0 | 0.0018 |  |
| [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 |  |
| [CVE-2025-38259](https://patchblox.com/security/data/cve/CVE-2025-38259.md) | High | ASoC: codecs: wcd9335: Fix missing free of regulator supplies | 7.8 | 0.0018 |  |
| [CVE-2025-39738](https://patchblox.com/security/data/cve/CVE-2025-39738.md) | High | btrfs: do not allow relocation of partially dropped subvolumes | 7.8 | 0.0018 |  |
| [CVE-2025-38484](https://patchblox.com/security/data/cve/CVE-2025-38484.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 |  |
| [CVE-2025-38730](https://patchblox.com/security/data/cve/CVE-2025-38730.md) | High | io_uring/net: commit partial buffers on retry | 7.8 | 0.0017 |  |
| [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 |  |
| [CVE-2025-38485](https://patchblox.com/security/data/cve/CVE-2025-38485.md) | High | iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush | 7.8 | 0.0017 |  |
| [CVE-2025-38662](https://patchblox.com/security/data/cve/CVE-2025-38662.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39788](https://patchblox.com/security/data/cve/CVE-2025-39788.md) | High | scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE | 7.8 | 0.0017 |  |
| [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 |  |
| [CVE-2025-39835](https://patchblox.com/security/data/cve/CVE-2025-39835.md) | High | xfs: do not propagate ENODATA disk errors into xattr code | 7.8 | 0.0017 |  |
| [CVE-2025-38679](https://patchblox.com/security/data/cve/CVE-2025-38679.md) | High | media: venus: Fix OOB read due to missing payload bound check | 7.1 | 0.0017 |  |
| [CVE-2025-39685](https://patchblox.com/security/data/cve/CVE-2025-39685.md) | High | comedi: pcl726: Prevent invalid irq number | 7.1 | 0.0017 |  |
| [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 |  |
| [CVE-2025-39694](https://patchblox.com/security/data/cve/CVE-2025-39694.md) | High | s390/sclp: Fix SCCB present check | 7.3 | 0.0017 |  |
| [CVE-2025-38170](https://patchblox.com/security/data/cve/CVE-2025-38170.md) | High | arm64/fpsimd: Discard stale CPU state when handling SME traps | 7.0 | 0.0017 |  |
| [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 |  |
| [CVE-2025-38496](https://patchblox.com/security/data/cve/CVE-2025-38496.md) | High | dm-bufio: fix sched in atomic context | 7.0 | 0.0017 |  |
| [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 |  |
| [CVE-2025-39718](https://patchblox.com/security/data/cve/CVE-2025-39718.md) | High | vsock/virtio: Validate length in packet header before skb_put() | 7.8 | 0.0017 |  |
| [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 |  |
| [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 |  |
| [CVE-2025-39902](https://patchblox.com/security/data/cve/CVE-2025-39902.md) | High | mm/slub: avoid accessing metadata when pointer is invalid in object_err() | 7.8 | 0.0017 |  |
| [CVE-2025-38670](https://patchblox.com/security/data/cve/CVE-2025-38670.md) | High | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | 7.1 | 0.0017 |  |
| [CVE-2025-39853](https://patchblox.com/security/data/cve/CVE-2025-39853.md) | High | i40e: Fix potential invalid access when MAC list is empty | 7.1 | 0.0017 |  |
| [CVE-2025-39891](https://patchblox.com/security/data/cve/CVE-2025-39891.md) | High | wifi: mwifiex: Initialize the chan_stats array to zero | 7.1 | 0.0017 |  |
| [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 |  |
| [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 |  |
| [CVE-2025-38692](https://patchblox.com/security/data/cve/CVE-2025-38692.md) | High | exfat: add cluster chain loop check for dir | 7.0 | 0.0017 |  |
| [CVE-2025-39744](https://patchblox.com/security/data/cve/CVE-2025-39744.md) | High | rcu: Fix rcu_read_unlock() deadloop due to IRQ work | 7.1 | 0.0016 |  |
| [CVE-2025-39869](https://patchblox.com/security/data/cve/CVE-2025-39869.md) | High | dmaengine: ti: edma: Fix memory allocation size for queue_priority_map | 7.1 | 0.0016 |  |
| [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 |  |
| [CVE-2025-38710](https://patchblox.com/security/data/cve/CVE-2025-38710.md) | High | gfs2: Validate i_depth for exhash directories | 7.0 | 0.0016 |  |
| [CVE-2025-39865](https://patchblox.com/security/data/cve/CVE-2025-39865.md) | High | tee: fix NULL pointer dereference in tee_shm_put | 7.0 | 0.0016 |  |
| [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 |  |
| [CVE-2025-39873](https://patchblox.com/security/data/cve/CVE-2025-39873.md) | High | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB | 7.8 | 0.0016 |  |
| [CVE-2025-39790](https://patchblox.com/security/data/cve/CVE-2025-39790.md) | High | bus: mhi: host: Detect events pointing to unexpected TREs | 7.8 | 0.0016 |  |
| [CVE-2025-39945](https://patchblox.com/security/data/cve/CVE-2025-39945.md) | High | cnic: Fix use-after-free bugs in cnic_delete_task | 7.8 | 0.0016 |  |
| [CVE-2025-39719](https://patchblox.com/security/data/cve/CVE-2025-39719.md) | High | iio: imu: bno055: fix OOB access of hw_xlate array | 7.1 | 0.0016 |  |
| [CVE-2025-39739](https://patchblox.com/security/data/cve/CVE-2025-39739.md) | High | iommu/arm-smmu-qcom: Add SM6115 MDSS compatible | 7.0 | 0.0016 |  |
| [CVE-2025-39838](https://patchblox.com/security/data/cve/CVE-2025-39838.md) | High | cifs: prevent NULL pointer dereference in UTF16 conversion | 7.0 | 0.0016 |  |
| [CVE-2025-39697](https://patchblox.com/security/data/cve/CVE-2025-39697.md) | High | NFS: Fix a race when updating an existing write | 7.6 | 0.0016 |  |
| [CVE-2025-39746](https://patchblox.com/security/data/cve/CVE-2025-39746.md) | High | wifi: ath10k: shutdown driver when hardware is unreliable | 7.0 | 0.0016 |  |
| [CVE-2025-39711](https://patchblox.com/security/data/cve/CVE-2025-39711.md) | High | media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls | 7.8 | 0.0016 |  |
| [CVE-2025-39870](https://patchblox.com/security/data/cve/CVE-2025-39870.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39861](https://patchblox.com/security/data/cve/CVE-2025-39861.md) | High | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 7.8 | 0.0016 |  |
| [CVE-2025-39882](https://patchblox.com/security/data/cve/CVE-2025-39882.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39957](https://patchblox.com/security/data/cve/CVE-2025-39957.md) | High | wifi: mac80211: increase scan_ies_len for S1G | 7.8 | 0.0016 |  |
| [CVE-2025-38665](https://patchblox.com/security/data/cve/CVE-2025-38665.md) | High | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | 7.0 | 0.0016 |  |
| [CVE-2025-38709](https://patchblox.com/security/data/cve/CVE-2025-38709.md) | High | loop: Avoid updating block size under exclusive owner | 7.0 | 0.0016 |  |
| [CVE-2025-39836](https://patchblox.com/security/data/cve/CVE-2025-39836.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39871](https://patchblox.com/security/data/cve/CVE-2025-39871.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39877](https://patchblox.com/security/data/cve/CVE-2025-39877.md) | High | mm/damon/sysfs: fix use-after-free in state_show() | 7.8 | 0.0015 |  |
| [CVE-2025-39854](https://patchblox.com/security/data/cve/CVE-2025-39854.md) | High | kernel-64kb: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297). | 7.8 | 0.0015 |  |
| [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0015 |  |
| [CVE-2025-39721](https://patchblox.com/security/data/cve/CVE-2025-39721.md) | High | crypto: qat - flush misc workqueue during device shutdown | 7.0 | 0.0015 |  |
| [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 |  |
| [CVE-2025-39922](https://patchblox.com/security/data/cve/CVE-2025-39922.md) | High | kernel-64kb: ixgbe: fix incorrect map used in eee linkmode (bsc#1250722). | 7.1 | 0.0015 |  |
| [CVE-2025-39896](https://patchblox.com/security/data/cve/CVE-2025-39896.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39833](https://patchblox.com/security/data/cve/CVE-2025-39833.md) | High | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 7.0 | 0.0015 |  |
| [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 |  |
| [CVE-2025-38302](https://patchblox.com/security/data/cve/CVE-2025-38302.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0015 |  |
| [CVE-2025-39900](https://patchblox.com/security/data/cve/CVE-2025-39900.md) | High | kernel-default-base: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758). | 7.0 | 0.0015 |  |
| [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 |  |
| [CVE-2025-38440](https://patchblox.com/security/data/cve/CVE-2025-38440.md) | High | kernel-64kb: net/mlx5e: Fix race between DIM disable and net_dim() (bsc#1247290). | 7.0 | 0.0014 |  |
| [CVE-2025-38008](https://patchblox.com/security/data/cve/CVE-2025-38008.md) | High | kernel-64kb: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). | 7.0 | 0.0014 |  |
| [CVE-2025-38306](https://patchblox.com/security/data/cve/CVE-2025-38306.md) | High | kernel-64kb: fs/fhandle.c: fix a race in call of has_locked_children() (bsc#1246366). | 7.0 | 0.0014 |  |
| [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 |  |
| [CVE-2025-38383](https://patchblox.com/security/data/cve/CVE-2025-38383.md) | High | kernel-64kb: mm/vmalloc: fix data race in show_numa_info() (bsc#1247250). | 7.0 | 0.0013 |  |
| [CVE-2025-38373](https://patchblox.com/security/data/cve/CVE-2025-38373.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0013 |  |
| [CVE-2025-39825](https://patchblox.com/security/data/cve/CVE-2025-39825.md) | High | smb: client: fix race with concurrent opens in rename(2) | 7.6 | 0.0012 |  |
| [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 |  |
| [CVE-2025-39832](https://patchblox.com/security/data/cve/CVE-2025-39832.md) | High | net/mlx5: Fix lockdep assertion on sync reset unload event | 7.0 | 0.0012 |  |
| [CVE-2025-38311](https://patchblox.com/security/data/cve/CVE-2025-38311.md) | High | iavf: get rid of the crit lock | 7.0 | 0.0011 |  |
| [CVE-2025-39751](https://patchblox.com/security/data/cve/CVE-2025-39751.md) | High | ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control | 7.8 | n/a |  |
| [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a |  |
| [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0052 |  |
| [CVE-2025-38123](https://patchblox.com/security/data/cve/CVE-2025-38123.md) | Routine | net: wwan: t7xx: Fix napi rx poll issue | 5.5 | 0.0047 |  |
| [CVE-2025-38405](https://patchblox.com/security/data/cve/CVE-2025-38405.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0043 |  |
| [CVE-2025-39758](https://patchblox.com/security/data/cve/CVE-2025-39758.md) | Routine | RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages | 5.5 | 0.0042 |  |
| [CVE-2025-38526](https://patchblox.com/security/data/cve/CVE-2025-38526.md) | Routine | ice: add NULL check in eswitch lag check | 5.5 | 0.0041 |  |
| [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 |  |
| [CVE-2025-38514](https://patchblox.com/security/data/cve/CVE-2025-38514.md) | Routine | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 6.5 | 0.0039 |  |
| [CVE-2025-39770](https://patchblox.com/security/data/cve/CVE-2025-39770.md) | Routine | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | 5.7 | 0.0038 |  |
| [CVE-2025-38209](https://patchblox.com/security/data/cve/CVE-2025-38209.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0037 |  |
| [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 |  |
| [CVE-2025-38365](https://patchblox.com/security/data/cve/CVE-2025-38365.md) | Routine | btrfs: fix a race between renames and directory logging | 5.5 | 0.0036 |  |
| [CVE-2025-38246](https://patchblox.com/security/data/cve/CVE-2025-38246.md) | Routine | bnxt: properly flush XDP redirect lists | 5.5 | 0.0034 |  |
| [CVE-2025-38287](https://patchblox.com/security/data/cve/CVE-2025-38287.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0034 |  |
| [CVE-2025-38524](https://patchblox.com/security/data/cve/CVE-2025-38524.md) | Routine | rxrpc: Fix recv-recv race of completed call | 4.7 | 0.0032 |  |
| [CVE-2025-39857](https://patchblox.com/security/data/cve/CVE-2025-39857.md) | Routine | net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() | 5.8 | 0.0031 |  |
| [CVE-2025-37856](https://patchblox.com/security/data/cve/CVE-2025-37856.md) | Routine | btrfs: harden block_group::bg_list against list_del() races | 5.5 | 0.0031 |  |
| [CVE-2025-38545](https://patchblox.com/security/data/cve/CVE-2025-38545.md) | Routine | kernel-64kb: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info (bsc#1248224). | 5.5 | 0.0031 |  |
| [CVE-2025-37864](https://patchblox.com/security/data/cve/CVE-2025-37864.md) | Routine | net: dsa: clean up FDB, MDB, VLAN entries on unbind | 5.5 | 0.0030 |  |
| [CVE-2025-22034](https://patchblox.com/security/data/cve/CVE-2025-22034.md) | Routine | kernel-64kb: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435). | 5.5 | 0.0028 |  |
| [CVE-2024-53164](https://patchblox.com/security/data/cve/CVE-2024-53164.md) | Routine | kernel-64kb: net: sched: fix ordering of qlen adjustment (bsc#1234863). | 5.5 | 0.0027 |  |
| [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0025 |  |
| [CVE-2025-39726](https://patchblox.com/security/data/cve/CVE-2025-39726.md) | Routine | s390/ism: fix concurrency management in ism_cmd() | 5.5 | 0.0025 |  |
| [CVE-2025-38343](https://patchblox.com/security/data/cve/CVE-2025-38343.md) | Routine | wifi: mt76: mt7996: drop fragments with multicast or broadcast RA | 5.5 | 0.0025 |  |
| [CVE-2025-39848](https://patchblox.com/security/data/cve/CVE-2025-39848.md) | Routine | ax25: properly unshare skbs in ax25_kiss_rcv() | 5.5 | 0.0024 |  |
| [CVE-2025-38303](https://patchblox.com/security/data/cve/CVE-2025-38303.md) | Routine | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | 5.5 | 0.0024 |  |
| [CVE-2024-58090](https://patchblox.com/security/data/cve/CVE-2024-58090.md) | Routine | kernel-64kb: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324). | 5.5 | 0.0023 |  |
| [CVE-2025-38253](https://patchblox.com/security/data/cve/CVE-2025-38253.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-38272](https://patchblox.com/security/data/cve/CVE-2025-38272.md) | Routine | net: dsa: b53: do not enable EEE on bcm63xx | 5.5 | 0.0023 |  |
| [CVE-2025-39827](https://patchblox.com/security/data/cve/CVE-2025-39827.md) | Routine | net: rose: include node references in rose_neigh refcount | 5.5 | 0.0023 |  |
| [CVE-2025-38291](https://patchblox.com/security/data/cve/CVE-2025-38291.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0022 |  |
| [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-38591](https://patchblox.com/security/data/cve/CVE-2025-38591.md) | Routine | bpf: Reject narrower access to pointer ctx fields | 5.5 | 0.0022 |  |
| [CVE-2024-57952](https://patchblox.com/security/data/cve/CVE-2024-57952.md) | Routine | kernel-64kb: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131). | 5.5 | 0.0022 |  |
| [CVE-2025-38034](https://patchblox.com/security/data/cve/CVE-2025-38034.md) | Routine | btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref | 5.5 | 0.0022 |  |
| [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 |  |
| [CVE-2025-38597](https://patchblox.com/security/data/cve/CVE-2025-38597.md) | Routine | drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port | 5.5 | 0.0022 |  |
| [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 |  |
| [CVE-2025-38135](https://patchblox.com/security/data/cve/CVE-2025-38135.md) | Routine | serial: Fix potential null-ptr-deref in mlb_usio_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-38136](https://patchblox.com/security/data/cve/CVE-2025-38136.md) | Routine | usb: renesas_usbhs: Reorder clock handling and power management in probe | 5.5 | 0.0021 |  |
| [CVE-2025-38145](https://patchblox.com/security/data/cve/CVE-2025-38145.md) | Routine | soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() | 5.5 | 0.0021 |  |
| [CVE-2025-38138](https://patchblox.com/security/data/cve/CVE-2025-38138.md) | Routine | dmaengine: ti: Add NULL check in udma_probe() | 5.5 | 0.0021 |  |
| [CVE-2025-38143](https://patchblox.com/security/data/cve/CVE-2025-38143.md) | Routine | backlight: pm8941: Add NULL check in wled_configure() | 5.5 | 0.0021 |  |
| [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 |  |
| [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 |  |
| [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 |  |
| [CVE-2025-38275](https://patchblox.com/security/data/cve/CVE-2025-38275.md) | Routine | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 5.5 | 0.0021 |  |
| [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0021 |  |
| [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 |  |
| [CVE-2025-38190](https://patchblox.com/security/data/cve/CVE-2025-38190.md) | Routine | atm: Revert atm_account_tx() if copy_from_iter_full() fails. | 5.5 | 0.0021 |  |
| [CVE-2025-38705](https://patchblox.com/security/data/cve/CVE-2025-38705.md) | Routine | drm/amd/pm: fix null pointer access | 5.5 | 0.0020 |  |
| [CVE-2025-38706](https://patchblox.com/security/data/cve/CVE-2025-38706.md) | Routine | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 5.5 | 0.0020 |  |
| [CVE-2025-39705](https://patchblox.com/security/data/cve/CVE-2025-39705.md) | Routine | drm/amd/display: fix a Null pointer dereference vulnerability | 5.5 | 0.0020 |  |
| [CVE-2025-38127](https://patchblox.com/security/data/cve/CVE-2025-38127.md) | Routine | ice: fix Tx scheduler error handling in XDP callback | 5.5 | 0.0020 |  |
| [CVE-2025-38408](https://patchblox.com/security/data/cve/CVE-2025-38408.md) | Routine | genirq/irq_sim: Initialize work context pointers properly | 5.5 | 0.0020 |  |
| [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 |  |
| [CVE-2025-38185](https://patchblox.com/security/data/cve/CVE-2025-38185.md) | Routine | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 5.5 | 0.0020 |  |
| [CVE-2025-38382](https://patchblox.com/security/data/cve/CVE-2025-38382.md) | Routine | btrfs: fix iteration of extrefs during log replay | 5.5 | 0.0020 |  |
| [CVE-2025-38098](https://patchblox.com/security/data/cve/CVE-2025-38098.md) | Routine | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 5.5 | 0.0020 |  |
| [CVE-2025-38173](https://patchblox.com/security/data/cve/CVE-2025-38173.md) | Routine | crypto: marvell/cesa - Handle zero-length skcipher requests | 5.5 | 0.0020 |  |
| [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 |  |
| [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 |  |
| [CVE-2025-38006](https://patchblox.com/security/data/cve/CVE-2025-38006.md) | Routine | net: mctp: Don't access ifa_index when missing | 5.5 | 0.0020 |  |
| [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 |  |
| [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 |  |
| [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 |  |
| [CVE-2025-38658](https://patchblox.com/security/data/cve/CVE-2025-38658.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-38142](https://patchblox.com/security/data/cve/CVE-2025-38142.md) | Routine | hwmon: (asus-ec-sensors) check sensor index in read_string() | 5.5 | 0.0020 |  |
| [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 |  |
| [CVE-2025-38612](https://patchblox.com/security/data/cve/CVE-2025-38612.md) | Routine | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | 5.5 | 0.0019 |  |
| [CVE-2025-38441](https://patchblox.com/security/data/cve/CVE-2025-38441.md) | Routine | kernel-64kb: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167). | 5.5 | 0.0019 |  |
| [CVE-2025-38189](https://patchblox.com/security/data/cve/CVE-2025-38189.md) | Routine | drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` | 5.5 | 0.0019 |  |
| [CVE-2025-38384](https://patchblox.com/security/data/cve/CVE-2025-38384.md) | Routine | mtd: spinand: fix memory leak of ECC engine conf | 5.5 | 0.0019 |  |
| [CVE-2025-38418](https://patchblox.com/security/data/cve/CVE-2025-38418.md) | Routine | remoteproc: core: Release rproc->clean_table after rproc_attach() fails | 5.5 | 0.0019 |  |
| [CVE-2025-38419](https://patchblox.com/security/data/cve/CVE-2025-38419.md) | Routine | remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() | 5.5 | 0.0019 |  |
| [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 |  |
| [CVE-2025-38265](https://patchblox.com/security/data/cve/CVE-2025-38265.md) | Routine | serial: jsm: fix NPE during jsm_uart_port_init | 5.5 | 0.0019 |  |
| [CVE-2025-38426](https://patchblox.com/security/data/cve/CVE-2025-38426.md) | Routine | drm/amdgpu: Add basic validation for RAS header | 5.5 | 0.0019 |  |
| [CVE-2025-38455](https://patchblox.com/security/data/cve/CVE-2025-38455.md) | Routine | kernel-64kb: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (bsc#1247101). | 5.5 | 0.0019 |  |
| [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 |  |
| [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 |  |
| [CVE-2025-38604](https://patchblox.com/security/data/cve/CVE-2025-38604.md) | Routine | wifi: rtl818x: Kill URBs before clearing tx status queue | 5.5 | 0.0019 |  |
| [CVE-2025-38274](https://patchblox.com/security/data/cve/CVE-2025-38274.md) | Routine | fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() | 5.5 | 0.0019 |  |
| [CVE-2025-38354](https://patchblox.com/security/data/cve/CVE-2025-38354.md) | Routine | drm/msm/gpu: Fix crash when throttling GPU immediately during boot | 5.5 | 0.0019 |  |
| [CVE-2025-38364](https://patchblox.com/security/data/cve/CVE-2025-38364.md) | Routine | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 5.5 | 0.0019 |  |
| [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 |  |
| [CVE-2025-38355](https://patchblox.com/security/data/cve/CVE-2025-38355.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38356](https://patchblox.com/security/data/cve/CVE-2025-38356.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38360](https://patchblox.com/security/data/cve/CVE-2025-38360.md) | Routine | kernel-64kb: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078). | 5.5 | 0.0019 |  |
| [CVE-2025-38390](https://patchblox.com/security/data/cve/CVE-2025-38390.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38586](https://patchblox.com/security/data/cve/CVE-2025-38586.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 |  |
| [CVE-2025-39684](https://patchblox.com/security/data/cve/CVE-2025-39684.md) | Routine | comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() | 5.5 | 0.0019 |  |
| [CVE-2025-39775](https://patchblox.com/security/data/cve/CVE-2025-39775.md) | Routine | kernel-64kb: mm/mremap: fix WARN with uffd that has remap events disabled (bsc#1249500). | 5.5 | 0.0019 |  |
| [CVE-2025-39830](https://patchblox.com/security/data/cve/CVE-2025-39830.md) | Routine | kernel-64kb: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (bsc#1249974). | 5.5 | 0.0019 |  |
| [CVE-2025-39834](https://patchblox.com/security/data/cve/CVE-2025-39834.md) | Routine | kernel-64kb: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (bsc#1250021). | 5.5 | 0.0019 |  |
| [CVE-2025-37821](https://patchblox.com/security/data/cve/CVE-2025-37821.md) | Routine | kernel-64kb: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864). | 5.5 | 0.0019 |  |
| [CVE-2025-38643](https://patchblox.com/security/data/cve/CVE-2025-38643.md) | Routine | wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() | 5.5 | 0.0019 |  |
| [CVE-2025-38554](https://patchblox.com/security/data/cve/CVE-2025-38554.md) | Routine | kernel-64kb: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1248299). | n/a | 0.0019 |  |
| [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 |  |
| [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 |  |
| [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39681](https://patchblox.com/security/data/cve/CVE-2025-39681.md) | Routine | x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | 5.5 | 0.0018 |  |
| [CVE-2025-38148](https://patchblox.com/security/data/cve/CVE-2025-38148.md) | Routine | net: phy: mscc: Fix memory leak when using one step timestamping | 5.5 | 0.0018 |  |
| [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38205](https://patchblox.com/security/data/cve/CVE-2025-38205.md) | Routine | drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 | 5.5 | 0.0018 |  |
| [CVE-2025-38487](https://patchblox.com/security/data/cve/CVE-2025-38487.md) | Routine | soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled | 5.5 | 0.0018 |  |
| [CVE-2025-38573](https://patchblox.com/security/data/cve/CVE-2025-38573.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38576](https://patchblox.com/security/data/cve/CVE-2025-38576.md) | Routine | powerpc/eeh: Make EEH driver device hotplug safe | 5.5 | 0.0018 |  |
| [CVE-2025-38528](https://patchblox.com/security/data/cve/CVE-2025-38528.md) | Routine | bpf: Reject %p% format string in bprintf-like helpers | 5.5 | 0.0018 |  |
| [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 |  |
| [CVE-2025-38635](https://patchblox.com/security/data/cve/CVE-2025-38635.md) | Routine | clk: davinci: Add NULL check in davinci_lpsc_clk_register() | 5.5 | 0.0018 |  |
| [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 |  |
| [CVE-2024-57891](https://patchblox.com/security/data/cve/CVE-2024-57891.md) | Routine | kernel-64kb: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953). | 5.5 | 0.0018 |  |
| [CVE-2025-38188](https://patchblox.com/security/data/cve/CVE-2025-38188.md) | Routine | kernel-64kb: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098). | 5.5 | 0.0018 |  |
| [CVE-2025-38444](https://patchblox.com/security/data/cve/CVE-2025-38444.md) | Routine | raid10: cleanup memleak at raid10_make_request | 5.5 | 0.0018 |  |
| [CVE-2025-38602](https://patchblox.com/security/data/cve/CVE-2025-38602.md) | Routine | iwlwifi: Add missing check for alloc_ordered_workqueue | 5.5 | 0.0018 |  |
| [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 |  |
| [CVE-2025-38251](https://patchblox.com/security/data/cve/CVE-2025-38251.md) | Routine | atm: clip: prevent NULL deref in clip_push() | 5.5 | 0.0018 |  |
| [CVE-2025-38263](https://patchblox.com/security/data/cve/CVE-2025-38263.md) | Routine | bcache: fix NULL pointer in cache_set_flush() | 5.5 | 0.0018 |  |
| [CVE-2025-38300](https://patchblox.com/security/data/cve/CVE-2025-38300.md) | Routine | crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() | 5.5 | 0.0018 |  |
| [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 |  |
| [CVE-2025-38368](https://patchblox.com/security/data/cve/CVE-2025-38368.md) | Routine | misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() | 5.5 | 0.0018 |  |
| [CVE-2025-38376](https://patchblox.com/security/data/cve/CVE-2025-38376.md) | Routine | usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume | 5.5 | 0.0018 |  |
| [CVE-2025-38451](https://patchblox.com/security/data/cve/CVE-2025-38451.md) | Routine | kernel-64kb: md/md-bitmap: fix GPF in bitmap_get_stats() (bsc#1247102). | 5.5 | 0.0018 |  |
| [CVE-2025-38588](https://patchblox.com/security/data/cve/CVE-2025-38588.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38610](https://patchblox.com/security/data/cve/CVE-2025-38610.md) | Routine | powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() | 5.5 | 0.0018 |  |
| [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38299](https://patchblox.com/security/data/cve/CVE-2025-38299.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38402](https://patchblox.com/security/data/cve/CVE-2025-38402.md) | Routine | kernel-64kb: idpf: return 0 size for RSS key if not supported (bsc#1247262). | 5.5 | 0.0018 |  |
| [CVE-2025-38531](https://patchblox.com/security/data/cve/CVE-2025-38531.md) | Routine | iio: common: st_sensors: Fix use of uninitialize device structs | 5.5 | 0.0018 |  |
| [CVE-2025-38557](https://patchblox.com/security/data/cve/CVE-2025-38557.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 |  |
| [CVE-2025-38168](https://patchblox.com/security/data/cve/CVE-2025-38168.md) | Routine | kernel-64kb: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763). | 5.5 | 0.0018 |  |
| [CVE-2025-38307](https://patchblox.com/security/data/cve/CVE-2025-38307.md) | Routine | ASoC: Intel: avs: Verify content returned by parse_int_array() | 5.5 | 0.0018 |  |
| [CVE-2025-38374](https://patchblox.com/security/data/cve/CVE-2025-38374.md) | Routine | kernel-64kb: optee: ffa: fix sleep in atomic context (bsc#1247024). | 5.5 | 0.0018 |  |
| [CVE-2025-38381](https://patchblox.com/security/data/cve/CVE-2025-38381.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38450](https://patchblox.com/security/data/cve/CVE-2025-38450.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38454](https://patchblox.com/security/data/cve/CVE-2025-38454.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38559](https://patchblox.com/security/data/cve/CVE-2025-38559.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38583](https://patchblox.com/security/data/cve/CVE-2025-38583.md) | Routine | clk: xilinx: vcu: unregister pll_post only if registered correctly | 5.5 | 0.0018 |  |
| [CVE-2025-38619](https://patchblox.com/security/data/cve/CVE-2025-38619.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 |  |
| [CVE-2025-38301](https://patchblox.com/security/data/cve/CVE-2025-38301.md) | Routine | kernel-64kb: nvmem: zynqmp_nvmem: unbreak driver after cleanup (bsc#1246351). | 5.5 | 0.0018 |  |
| [CVE-2025-38318](https://patchblox.com/security/data/cve/CVE-2025-38318.md) | Routine | kernel-64kb: perf: arm-ni: Fix missing platform_set_drvdata() (bsc#1246444). | 5.5 | 0.0017 |  |
| [CVE-2025-38475](https://patchblox.com/security/data/cve/CVE-2025-38475.md) | Routine | kernel-64kb: smc: Fix various oops due to inet_sock type confusion (bsc#1247308). | 5.5 | 0.0017 |  |
| [CVE-2025-38630](https://patchblox.com/security/data/cve/CVE-2025-38630.md) | Routine | fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | 5.5 | 0.0017 |  |
| [CVE-2025-38640](https://patchblox.com/security/data/cve/CVE-2025-38640.md) | Routine | bpf: Disable migration in nf_hook_run_bpf(). | 5.5 | 0.0017 |  |
| [CVE-2025-38564](https://patchblox.com/security/data/cve/CVE-2025-38564.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0017 |  |
| [CVE-2025-39748](https://patchblox.com/security/data/cve/CVE-2025-39748.md) | Routine | bpf: Forget ranges when refining tnum after JSET | 5.5 | 0.0017 |  |
| [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0017 |  |
| [CVE-2025-38155](https://patchblox.com/security/data/cve/CVE-2025-38155.md) | Routine | wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() | 5.5 | 0.0017 |  |
| [CVE-2025-38234](https://patchblox.com/security/data/cve/CVE-2025-38234.md) | Routine | sched/rt: Fix race in push_rt_task | 5.5 | 0.0017 |  |
| [CVE-2025-38659](https://patchblox.com/security/data/cve/CVE-2025-38659.md) | Routine | gfs2: No more self recovery | 5.5 | 0.0017 |  |
| [CVE-2025-38733](https://patchblox.com/security/data/cve/CVE-2025-38733.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39787](https://patchblox.com/security/data/cve/CVE-2025-39787.md) | Routine | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | 5.5 | 0.0017 |  |
| [CVE-2025-38232](https://patchblox.com/security/data/cve/CVE-2025-38232.md) | Routine | NFSD: fix race between nfsd registration and exports_proc | 4.7 | 0.0017 |  |
| [CVE-2025-38359](https://patchblox.com/security/data/cve/CVE-2025-38359.md) | Routine | s390/mm: Fix in_atomic() handling in do_secure_storage_access() | 5.5 | 0.0017 |  |
| [CVE-2025-39842](https://patchblox.com/security/data/cve/CVE-2025-39842.md) | Routine | ocfs2: prevent release journal inode after journal shutdown | 5.5 | 0.0017 |  |
| [CVE-2025-38225](https://patchblox.com/security/data/cve/CVE-2025-38225.md) | Routine | media: imx-jpeg: Cleanup after an allocation error | 5.5 | 0.0017 |  |
| [CVE-2025-38623](https://patchblox.com/security/data/cve/CVE-2025-38623.md) | Routine | PCI: pnv_php: Fix surprise plug detection and recovery | 5.5 | 0.0017 |  |
| [CVE-2025-38624](https://patchblox.com/security/data/cve/CVE-2025-38624.md) | Routine | PCI: pnv_php: Clean up allocated IRQs on unplug | 5.5 | 0.0017 |  |
| [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 |  |
| [CVE-2025-38156](https://patchblox.com/security/data/cve/CVE-2025-38156.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38671](https://patchblox.com/security/data/cve/CVE-2025-38671.md) | Routine | i2c: qup: jump out of the loop in case of timeout | 5.5 | 0.0017 |  |
| [CVE-2025-38228](https://patchblox.com/security/data/cve/CVE-2025-38228.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39675](https://patchblox.com/security/data/cve/CVE-2025-39675.md) | Routine | drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() | 5.5 | 0.0017 |  |
| [CVE-2025-39693](https://patchblox.com/security/data/cve/CVE-2025-39693.md) | Routine | drm/amd/display: Avoid a NULL pointer dereference | 5.5 | 0.0017 |  |
| [CVE-2025-38489](https://patchblox.com/security/data/cve/CVE-2025-38489.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38628](https://patchblox.com/security/data/cve/CVE-2025-38628.md) | Routine | kernel-64kb: vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1248616). | 5.5 | 0.0017 |  |
| [CVE-2025-38631](https://patchblox.com/security/data/cve/CVE-2025-38631.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38644](https://patchblox.com/security/data/cve/CVE-2025-38644.md) | Routine | wifi: mac80211: reject TDLS operations when station is not associated | 5.5 | 0.0017 |  |
| [CVE-2025-38255](https://patchblox.com/security/data/cve/CVE-2025-38255.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38258](https://patchblox.com/security/data/cve/CVE-2025-38258.md) | Routine | mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write | 5.5 | 0.0017 |  |
| [CVE-2025-38634](https://patchblox.com/security/data/cve/CVE-2025-38634.md) | Routine | power: supply: cpcap-charger: Fix null check for power_supply_get_by_name | 5.5 | 0.0017 |  |
| [CVE-2025-38646](https://patchblox.com/security/data/cve/CVE-2025-38646.md) | Routine | wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band | 6.5 | 0.0017 |  |

Showing 500 of 570 CVEs; the web page lists them all.

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.