{
  "fix": "SUSE-SU-2025:3725-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2025-3725-1",
  "summary": "SUSE-SU-2025:3725-1, released October 22, 2025, fixes 94 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_5 (version 1-150700.1.3.1). One of them is being exploited (CVE-2025-39682); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel-livepatch-SLE15-SP7-RT_Update_5 security update",
  "released": "2025-10-22T11:48:19Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-39682, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 94,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03312,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:3725-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_5",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-5",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-39682",
      "url": "https://patchblox.com/security/cve/CVE-2025-39682",
      "title": "tls: fix handling of zero-length records on the rx_list",
      "priority": "Patch now",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.03312,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38488",
      "url": "https://patchblox.com/security/cve/CVE-2025-38488",
      "title": "kernel-64kb: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00772,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38527",
      "url": "https://patchblox.com/security/cve/CVE-2025-38527",
      "title": "smb: client: fix use-after-free in cifs_oplock_break",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00455,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38590",
      "url": "https://patchblox.com/security/cve/CVE-2025-38590",
      "title": "net/mlx5e: Remove skb secpath if xfrm state is not found",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00436,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38676",
      "url": "https://patchblox.com/security/cve/CVE-2025-38676",
      "title": "iommu/amd: Avoid stack buffer overflow from kernel cmdline",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38574",
      "url": "https://patchblox.com/security/cve/CVE-2025-38574",
      "title": "pptp: ensure minimal skb length in pptp_xmit()",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38660",
      "url": "https://patchblox.com/security/cve/CVE-2025-38660",
      "title": "[ceph] parse_longname(): strrchr() expects NUL-terminated string",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39703",
      "url": "https://patchblox.com/security/cve/CVE-2025-39703",
      "title": "net, hsr: reject HSR frame if skb can\u0027t hold tag",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40300",
      "url": "https://patchblox.com/security/cve/CVE-2025-40300",
      "title": "x86/vmscape: Add conditional IBPB mitigation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00378,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38533",
      "url": "https://patchblox.com/security/cve/CVE-2025-38533",
      "title": "net: libwx: fix the using of Rx buffer DMA",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38678",
      "url": "https://patchblox.com/security/cve/CVE-2025-38678",
      "title": "netfilter: nf_tables: reject duplicate device on updates",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5633",
      "url": "https://patchblox.com/security/cve/CVE-2023-5633",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38466",
      "url": "https://patchblox.com/security/cve/CVE-2025-38466",
      "title": "perf: Revert to requiring CAP_SYS_ADMIN for uprobes",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38595",
      "url": "https://patchblox.com/security/cve/CVE-2025-38595",
      "title": "xen: fix UAF in dmabuf_exp_from_pages()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39677",
      "url": "https://patchblox.com/security/cve/CVE-2025-39677",
      "title": "net/sched: Fix backlog accounting in qdisc_dequeue_internal",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38616",
      "url": "https://patchblox.com/security/cve/CVE-2025-38616",
      "title": "tls: handle data disappearing from under the TLS ULP",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38722",
      "url": "https://patchblox.com/security/cve/CVE-2025-38722",
      "title": "habanalabs: fix UAF in export_dmabuf()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22022",
      "url": "https://patchblox.com/security/cve/CVE-2025-22022",
      "title": "kernel-64kb: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38614",
      "url": "https://patchblox.com/security/cve/CVE-2025-38614",
      "title": "eventpoll: Fix semi-unbounded recursion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38119",
      "url": "https://patchblox.com/security/cve/CVE-2025-38119",
      "title": "scsi: core: ufs: Fix a hang in the error handler",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38584",
      "url": "https://patchblox.com/security/cve/CVE-2025-38584",
      "title": "padata: Fix pd UAF once and for all",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39691",
      "url": "https://patchblox.com/security/cve/CVE-2025-39691",
      "title": "fs/buffer: fix use-after-free when call bh_read() helper",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38351",
      "url": "https://patchblox.com/security/cve/CVE-2025-38351",
      "title": "KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.5,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38456",
      "url": "https://patchblox.com/security/cve/CVE-2025-38456",
      "title": "ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38701",
      "url": "https://patchblox.com/security/cve/CVE-2025-38701",
      "title": "ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38593",
      "url": "https://patchblox.com/security/cve/CVE-2025-38593",
      "title": "Bluetooth: hci_sync: fix double free in \u0027hci_discovery_filter_clear()\u0027",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39766",
      "url": "https://patchblox.com/security/cve/CVE-2025-39766",
      "title": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38684",
      "url": "https://patchblox.com/security/cve/CVE-2025-38684",
      "title": "net/sched: ets: use old \u0027nbands\u0027 while purging unused classes",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38732",
      "url": "https://patchblox.com/security/cve/CVE-2025-38732",
      "title": "netfilter: nf_reject: don\u0027t leak dst refcount for loopback packets",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38556",
      "url": "https://patchblox.com/security/cve/CVE-2025-38556",
      "title": "HID: core: Harden s32ton() against conversion to 0 bits",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39823",
      "url": "https://patchblox.com/security/cve/CVE-2025-39823",
      "title": "KVM: x86: use array_index_nospec with indices that come from guest",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38216",
      "url": "https://patchblox.com/security/cve/CVE-2025-38216",
      "title": "kernel-64kb: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38703",
      "url": "https://patchblox.com/security/cve/CVE-2025-38703",
      "title": "drm/xe: Make dma-fences compliant with the safe access rules",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39738",
      "url": "https://patchblox.com/security/cve/CVE-2025-39738",
      "title": "btrfs: do not allow relocation of partially dropped subvolumes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39749",
      "url": "https://patchblox.com/security/cve/CVE-2025-39749",
      "title": "rcu: Protect -\u003Edefer_qs_iw_pending from data race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38730",
      "url": "https://patchblox.com/security/cve/CVE-2025-38730",
      "title": "io_uring/net: commit partial buffers on retry",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39835",
      "url": "https://patchblox.com/security/cve/CVE-2025-39835",
      "title": "xfs: do not propagate ENODATA disk errors into xattr code",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38679",
      "url": "https://patchblox.com/security/cve/CVE-2025-38679",
      "title": "media: venus: Fix OOB read due to missing payload bound check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39718",
      "url": "https://patchblox.com/security/cve/CVE-2025-39718",
      "title": "vsock/virtio: Validate length in packet header before skb_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39744",
      "url": "https://patchblox.com/security/cve/CVE-2025-39744",
      "title": "rcu: Fix rcu_read_unlock() deadloop due to IRQ work",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38710",
      "url": "https://patchblox.com/security/cve/CVE-2025-38710",
      "title": "gfs2: Validate i_depth for exhash directories",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39865",
      "url": "https://patchblox.com/security/cve/CVE-2025-39865",
      "title": "tee: fix NULL pointer dereference in tee_shm_put",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39797",
      "url": "https://patchblox.com/security/cve/CVE-2025-39797",
      "title": "xfrm: Duplicate SPI Handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39838",
      "url": "https://patchblox.com/security/cve/CVE-2025-39838",
      "title": "cifs: prevent NULL pointer dereference in UTF16 conversion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39746",
      "url": "https://patchblox.com/security/cve/CVE-2025-39746",
      "title": "wifi: ath10k: shutdown driver when hardware is unreliable",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39711",
      "url": "https://patchblox.com/security/cve/CVE-2025-39711",
      "title": "media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38709",
      "url": "https://patchblox.com/security/cve/CVE-2025-38709",
      "title": "loop: Avoid updating block size under exclusive owner",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39922",
      "url": "https://patchblox.com/security/cve/CVE-2025-39922",
      "title": "kernel-64kb: ixgbe: fix incorrect map used in eee linkmode (bsc#1250722).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39825",
      "url": "https://patchblox.com/security/cve/CVE-2025-39825",
      "title": "smb: client: fix race with concurrent opens in rename(2)",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.6,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38526",
      "url": "https://patchblox.com/security/cve/CVE-2025-38526",
      "title": "ice: add NULL check in eswitch lag check",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38514",
      "url": "https://patchblox.com/security/cve/CVE-2025-38514",
      "title": "rxrpc: Fix oops due to non-existence of prealloc backlog struct",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39770",
      "url": "https://patchblox.com/security/cve/CVE-2025-39770",
      "title": "net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.7,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39857",
      "url": "https://patchblox.com/security/cve/CVE-2025-39857",
      "title": "net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-58090",
      "url": "https://patchblox.com/security/cve/CVE-2024-58090",
      "title": "kernel-64kb: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38597",
      "url": "https://patchblox.com/security/cve/CVE-2025-38597",
      "title": "drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38705",
      "url": "https://patchblox.com/security/cve/CVE-2025-38705",
      "title": "drm/amd/pm: fix null pointer access",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39705",
      "url": "https://patchblox.com/security/cve/CVE-2025-39705",
      "title": "drm/amd/display: fix a Null pointer dereference vulnerability",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38408",
      "url": "https://patchblox.com/security/cve/CVE-2025-38408",
      "title": "genirq/irq_sim: Initialize work context pointers properly",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38418",
      "url": "https://patchblox.com/security/cve/CVE-2025-38418",
      "title": "remoteproc: core: Release rproc-\u003Eclean_table after rproc_attach() fails",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38419",
      "url": "https://patchblox.com/security/cve/CVE-2025-38419",
      "title": "remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38639",
      "url": "https://patchblox.com/security/cve/CVE-2025-38639",
      "title": "netfilter: xt_nfacct: don\u0027t assume acct name is null-terminated",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39830",
      "url": "https://patchblox.com/security/cve/CVE-2025-39830",
      "title": "kernel-64kb: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (bsc#1249974).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39834",
      "url": "https://patchblox.com/security/cve/CVE-2025-39834",
      "title": "kernel-64kb: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (bsc#1250021).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38643",
      "url": "https://patchblox.com/security/cve/CVE-2025-38643",
      "title": "wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38622",
      "url": "https://patchblox.com/security/cve/CVE-2025-38622",
      "title": "net: drop UFO packets in udp_rcv_segment()",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38664",
      "url": "https://patchblox.com/security/cve/CVE-2025-38664",
      "title": "ice: Fix a null pointer dereference in ice_copy_and_init_pkg()",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39681",
      "url": "https://patchblox.com/security/cve/CVE-2025-39681",
      "title": "x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38263",
      "url": "https://patchblox.com/security/cve/CVE-2025-38263",
      "title": "bcache: fix NULL pointer in cache_set_flush()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38402",
      "url": "https://patchblox.com/security/cve/CVE-2025-38402",
      "title": "kernel-64kb: idpf: return 0 size for RSS key if not supported (bsc#1247262).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38721",
      "url": "https://patchblox.com/security/cve/CVE-2025-38721",
      "title": "netfilter: ctnetlink: fix refcount leak on table dump",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38640",
      "url": "https://patchblox.com/security/cve/CVE-2025-38640",
      "title": "bpf: Disable migration in nf_hook_run_bpf().",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39764",
      "url": "https://patchblox.com/security/cve/CVE-2025-39764",
      "title": "netfilter: ctnetlink: remove refcounting in expectation dumpers",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38234",
      "url": "https://patchblox.com/security/cve/CVE-2025-38234",
      "title": "sched/rt: Fix race in push_rt_task",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38659",
      "url": "https://patchblox.com/security/cve/CVE-2025-38659",
      "title": "gfs2: No more self recovery",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39787",
      "url": "https://patchblox.com/security/cve/CVE-2025-39787",
      "title": "soc: qcom: mdt_loader: Ensure we don\u0027t read past the ELF header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39842",
      "url": "https://patchblox.com/security/cve/CVE-2025-39842",
      "title": "ocfs2: prevent release journal inode after journal shutdown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38623",
      "url": "https://patchblox.com/security/cve/CVE-2025-38623",
      "title": "PCI: pnv_php: Fix surprise plug detection and recovery",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38628",
      "url": "https://patchblox.com/security/cve/CVE-2025-38628",
      "title": "kernel-64kb: vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1248616).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38255",
      "url": "https://patchblox.com/security/cve/CVE-2025-38255",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38645",
      "url": "https://patchblox.com/security/cve/CVE-2025-38645",
      "title": "net/mlx5: Check device memory pointer before usage",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38544",
      "url": "https://patchblox.com/security/cve/CVE-2025-38544",
      "title": "rxrpc: Fix bug due to prealloc collision",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39678",
      "url": "https://patchblox.com/security/cve/CVE-2025-39678",
      "title": "kernel-64kb: platform/x86/amd/hsmp: Ensure sock-\u003Emetric_tbl_addr is non-NULL (bsc#1249290).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39695",
      "url": "https://patchblox.com/security/cve/CVE-2025-39695",
      "title": "kernel-zfcpdump: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39747",
      "url": "https://patchblox.com/security/cve/CVE-2025-39747",
      "title": "drm/msm: Add error handling for krealloc in metadata setup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39807",
      "url": "https://patchblox.com/security/cve/CVE-2025-39807",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39811",
      "url": "https://patchblox.com/security/cve/CVE-2025-39811",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39707",
      "url": "https://patchblox.com/security/cve/CVE-2025-39707",
      "title": "drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39890",
      "url": "https://patchblox.com/security/cve/CVE-2025-39890",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39816",
      "url": "https://patchblox.com/security/cve/CVE-2025-39816",
      "title": "kernel-default-base: io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths (bsc#1249906).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53261",
      "url": "https://patchblox.com/security/cve/CVE-2023-53261",
      "title": "coresight: Fix memory leak in acpi_buffer-\u003Epointer",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39754",
      "url": "https://patchblox.com/security/cve/CVE-2025-39754",
      "title": "mm/smaps: fix race between smaps_hugetlb_range and migration",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39782",
      "url": "https://patchblox.com/security/cve/CVE-2025-39782",
      "title": "kernel-64kb: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39773",
      "url": "https://patchblox.com/security/cve/CVE-2025-39773",
      "title": "net: bridge: fix soft lockup in br_multicast_query_expired()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39885",
      "url": "https://patchblox.com/security/cve/CVE-2025-39885",
      "title": "ocfs2: fix recursive semaphore deadlock in fiemap call",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}