{ "fix": "SUSE-SU-2025:4140-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4140-1", "summary": "SUSE-SU-2025:4140-1, released November 19, 2025, fixes 190 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 13 packages", "released": "2025-11-19T13:15:27Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2025-40000, rated Critical", "supported": true, "cveCount": 190, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.10258, "maxCvss": 9.8, "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:4140-1", "appliesTo": [ { "product": "dtb-aarch64", "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1.150600.12.34.2", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1.150600.12.34.2", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-kvmsmall", "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-livepatch-SLE15-SP6_Update_17", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-17", "release": "sles 15.6", "fixedVersion": "1-150600.13.5.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-obs-qa", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.78.1", "supported": true } ], "cves": [ { "cveId": "CVE-2025-40000", "url": "https://patchblox.com/security/cve/CVE-2025-40000", "title": "wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00268, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39996", "url": "https://patchblox.com/security/cve/CVE-2025-39996", "title": "media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39985", "url": "https://patchblox.com/security/cve/CVE-2025-39985", "title": "can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39986", "url": "https://patchblox.com/security/cve/CVE-2025-39986", "title": "can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39967", "url": "https://patchblox.com/security/cve/CVE-2025-39967", "title": "fbcon: fix integer overflow in fbcon_do_set_font", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39994", "url": "https://patchblox.com/security/cve/CVE-2025-39994", "title": "media: tuner: xc5000: Fix use-after-free in xc5000_release", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39970", "url": "https://patchblox.com/security/cve/CVE-2025-39970", "title": "i40e: fix input validation logic for action_meta", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39971", "url": "https://patchblox.com/security/cve/CVE-2025-39971", "title": "i40e: fix idx validation in config queues msg", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39972", "url": "https://patchblox.com/security/cve/CVE-2025-39972", "title": "i40e: fix idx validation in i40e_validate_queue_map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39973", "url": "https://patchblox.com/security/cve/CVE-2025-39973", "title": "i40e: add validation for ring_len param", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39978", "url": "https://patchblox.com/security/cve/CVE-2025-39978", "title": "octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39968", "url": "https://patchblox.com/security/cve/CVE-2025-39968", "title": "i40e: add max boundary check for VF filters", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39946", "url": "https://patchblox.com/security/cve/CVE-2025-39946", "title": "tls: make sure to abort the stream if headers are bogus", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.10258, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40087", "url": "https://patchblox.com/security/cve/CVE-2025-40087", "title": "NFSD: Define a proc_layoutcommit for the FlexFiles layout type", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39841", "url": "https://patchblox.com/security/cve/CVE-2025-39841", "title": "scsi: lpfc: Fix buffer free/clear order in deferred receive path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00481, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39702", "url": "https://patchblox.com/security/cve/CVE-2025-39702", "title": "ipv6: sr: Fix MAC comparison to be constant-time", "priority": "High", "severity": "MODERATE", "cvss": 7.1, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39851", "url": "https://patchblox.com/security/cve/CVE-2025-39851", "title": "vxlan: Fix NPD when refreshing an FDB entry with a nexthop object", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00397, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53711", "url": "https://patchblox.com/security/cve/CVE-2023-53711", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00384, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38552", "url": "https://patchblox.com/security/cve/CVE-2025-38552", "title": "mptcp: plug races between subflow fail and subflow creation", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39673", "url": "https://patchblox.com/security/cve/CVE-2025-39673", "title": "ppp: fix race conditions in ppp_fill_forward_path", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40043", "url": "https://patchblox.com/security/cve/CVE-2025-40043", "title": "net: nfc: nci: Add parameter validation for packet data", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00314, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39866", "url": "https://patchblox.com/security/cve/CVE-2025-39866", "title": "fs: writeback: fix use-after-free in __mark_inode_dirty()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00312, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53600", "url": "https://patchblox.com/security/cve/CVE-2023-53600", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39952", "url": "https://patchblox.com/security/cve/CVE-2025-39952", "title": "wifi: wilc1000: avoid buffer overflow in WID string configuration", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00293, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40019", "url": "https://patchblox.com/security/cve/CVE-2025-40019", "title": "crypto: essiv - Check ssize for decryption and in-place encryption", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39982", "url": "https://patchblox.com/security/cve/CVE-2025-39982", "title": "Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53673", "url": "https://patchblox.com/security/cve/CVE-2023-53673", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39995", "url": "https://patchblox.com/security/cve/CVE-2025-39995", "title": "media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40035", "url": "https://patchblox.com/security/cve/CVE-2025-40035", "title": "Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53619", "url": "https://patchblox.com/security/cve/CVE-2023-53619", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53652", "url": "https://patchblox.com/security/cve/CVE-2023-53652", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40036", "url": "https://patchblox.com/security/cve/CVE-2025-40036", "title": "misc: fastrpc: fix possible map leak in fastrpc_put_args", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40052", "url": "https://patchblox.com/security/cve/CVE-2025-40052", "title": "smb: client: fix crypto buffers in non-linear memory", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53648", "url": "https://patchblox.com/security/cve/CVE-2023-53648", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53722", "url": "https://patchblox.com/security/cve/CVE-2023-53722", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40020", "url": "https://patchblox.com/security/cve/CVE-2025-40020", "title": "can: peak_usb: fix shift-out-of-bounds issue", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53728", "url": "https://patchblox.com/security/cve/CVE-2023-53728", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "important", "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53621", "url": "https://patchblox.com/security/cve/CVE-2023-53621", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53646", "url": "https://patchblox.com/security/cve/CVE-2023-53646", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39965", "url": "https://patchblox.com/security/cve/CVE-2025-39965", "title": "xfrm: xfrm_alloc_spi shouldn\u0027t use 0 as SPI", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53727", "url": "https://patchblox.com/security/cve/CVE-2023-53727", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "important", "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38699", "url": "https://patchblox.com/security/cve/CVE-2025-38699", "title": "scsi: bfa: Double-free fix", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39683", "url": "https://patchblox.com/security/cve/CVE-2025-39683", "title": "tracing: Limit access to parser-\u003Ebuffer when trace_get_user failed", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40082", "url": "https://patchblox.com/security/cve/CVE-2025-40082", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53554", "url": "https://patchblox.com/security/cve/CVE-2023-53554", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38700", "url": "https://patchblox.com/security/cve/CVE-2025-38700", "title": "scsi: libiscsi: Initialize iscsi_conn-\u003Edd_data only if memory is allocated", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39987", "url": "https://patchblox.com/security/cve/CVE-2025-39987", "title": "can: hi311x: populate ndo_change_mtu() to prevent buffer overflow", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39988", "url": "https://patchblox.com/security/cve/CVE-2025-39988", "title": "can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38653", "url": "https://patchblox.com/security/cve/CVE-2025-38653", "title": "proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40044", "url": "https://patchblox.com/security/cve/CVE-2025-40044", "title": "fs: udf: fix OOB read in lengthAllocDescs handling", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53570", "url": "https://patchblox.com/security/cve/CVE-2023-53570", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39828", "url": "https://patchblox.com/security/cve/CVE-2025-39828", "title": "atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38718", "url": "https://patchblox.com/security/cve/CVE-2025-38718", "title": "sctp: linearize cloned gso packets in sctp_rcv", "priority": "High", "severity": "MODERATE", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53552", "url": "https://patchblox.com/security/cve/CVE-2023-53552", "title": "kernel-rt-debug-modules: kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53539", "url": "https://patchblox.com/security/cve/CVE-2023-53539", "title": "bpftool: kernel: RDMA/rxe: Fix incomplete state save in rxe_requester", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53543", "url": "https://patchblox.com/security/cve/CVE-2023-53543", "title": "vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53659", "url": "https://patchblox.com/security/cve/CVE-2023-53659", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39931", "url": "https://patchblox.com/security/cve/CVE-2025-39931", "title": "crypto: af_alg - Set merge to zero early in af_alg_sendmsg", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53541", "url": "https://patchblox.com/security/cve/CVE-2023-53541", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39902", "url": "https://patchblox.com/security/cve/CVE-2025-39902", "title": "mm/slub: avoid accessing metadata when pointer is invalid in object_err()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39955", "url": "https://patchblox.com/security/cve/CVE-2025-39955", "title": "tcp: Clear tcp_sk(sk)-\u003Efastopen_rsk in tcp_disconnect().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40051", "url": "https://patchblox.com/security/cve/CVE-2025-40051", "title": "vhost: vringh: Modify the return value check", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53615", "url": "https://patchblox.com/security/cve/CVE-2023-53615", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53698", "url": "https://patchblox.com/security/cve/CVE-2023-53698", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53707", "url": "https://patchblox.com/security/cve/CVE-2023-53707", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39794", "url": "https://patchblox.com/security/cve/CVE-2025-39794", "title": "ARM: tegra: Use I/O memcpy to write to IRAM", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40058", "url": "https://patchblox.com/security/cve/CVE-2025-40058", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoheren...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39911", "url": "https://patchblox.com/security/cve/CVE-2025-39911", "title": "i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39945", "url": "https://patchblox.com/security/cve/CVE-2025-39945", "title": "cnic: Fix use-after-free bugs in cnic_delete_task", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53546", "url": "https://patchblox.com/security/cve/CVE-2023-53546", "title": "kernel-source-azure: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39797", "url": "https://patchblox.com/security/cve/CVE-2025-39797", "title": "xfrm: Duplicate SPI Handling", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39993", "url": "https://patchblox.com/security/cve/CVE-2025-39993", "title": "media: rc: fix races with imon_disconnect()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39697", "url": "https://patchblox.com/security/cve/CVE-2025-39697", "title": "NFS: Fix a race when updating an existing write", "priority": "High", "severity": "MODERATE", "cvss": 7.6, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39969", "url": "https://patchblox.com/security/cve/CVE-2025-39969", "title": "i40e: fix validation of VF state in get resources", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53596", "url": "https://patchblox.com/security/cve/CVE-2023-53596", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53657", "url": "https://patchblox.com/security/cve/CVE-2023-53657", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53616", "url": "https://patchblox.com/security/cve/CVE-2023-53616", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53645", "url": "https://patchblox.com/security/cve/CVE-2023-53645", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39949", "url": "https://patchblox.com/security/cve/CVE-2025-39949", "title": "qed: Don\u0027t collect too many protection override GRC elements", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53577", "url": "https://patchblox.com/security/cve/CVE-2023-53577", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39957", "url": "https://patchblox.com/security/cve/CVE-2025-39957", "title": "wifi: mac80211: increase scan_ies_len for S1G", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53556", "url": "https://patchblox.com/security/cve/CVE-2023-53556", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39881", "url": "https://patchblox.com/security/cve/CVE-2025-39881", "title": "kernfs: Fix UAF in polling when open file is released", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40096", "url": "https://patchblox.com/security/cve/CVE-2025-40096", "title": "drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53713", "url": "https://patchblox.com/security/cve/CVE-2023-53713", "title": "kernel-obs-build: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53718", "url": "https://patchblox.com/security/cve/CVE-2023-53718", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not swap cpu_buffer during resiz...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53729", "url": "https://patchblox.com/security/cve/CVE-2023-53729", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec: Restrict string length in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53733", "url": "https://patchblox.com/security/cve/CVE-2023-53733", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39981", "url": "https://patchblox.com/security/cve/CVE-2025-39981", "title": "Bluetooth: MGMT: Fix possible UAFs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53559", "url": "https://patchblox.com/security/cve/CVE-2023-53559", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53560", "url": "https://patchblox.com/security/cve/CVE-2023-53560", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53613", "url": "https://patchblox.com/security/cve/CVE-2023-53613", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53668", "url": "https://patchblox.com/security/cve/CVE-2023-53668", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 7.1, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40018", "url": "https://patchblox.com/security/cve/CVE-2025-40018", "title": "ipvs: Defer ip_vs_ftp unregister during netns cleanup", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40061", "url": "https://patchblox.com/security/cve/CVE-2025-40061", "title": "RDMA/rxe: Fix race in do_task() when draining", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53726", "url": "https://patchblox.com/security/cve/CVE-2023-53726", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53611", "url": "https://patchblox.com/security/cve/CVE-2023-53611", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40088", "url": "https://patchblox.com/security/cve/CVE-2025-40088", "title": "hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53666", "url": "https://patchblox.com/security/cve/CVE-2023-53666", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53622", "url": "https://patchblox.com/security/cve/CVE-2023-53622", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53572", "url": "https://patchblox.com/security/cve/CVE-2023-53572", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53638", "url": "https://patchblox.com/security/cve/CVE-2023-53638", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53575", "url": "https://patchblox.com/security/cve/CVE-2023-53575", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53550", "url": "https://patchblox.com/security/cve/CVE-2023-53550", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38008", "url": "https://patchblox.com/security/cve/CVE-2025-38008", "title": "kernel-64kb: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53665", "url": "https://patchblox.com/security/cve/CVE-2023-53665", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53581", "url": "https://patchblox.com/security/cve/CVE-2023-53581", "title": "kernel-abi-stablelists: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate)", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39948", "url": "https://patchblox.com/security/cve/CVE-2025-39948", "title": "kernel-64kb: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53597", "url": "https://patchblox.com/security/cve/CVE-2023-53597", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00286, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40011", "url": "https://patchblox.com/security/cve/CVE-2025-40011", "title": "drm/gma500: Fix null dereference in hdmi teardown", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40016", "url": "https://patchblox.com/security/cve/CVE-2025-40016", "title": "media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40013", "url": "https://patchblox.com/security/cve/CVE-2025-40013", "title": "ASoC: qcom: audioreach: fix potential null pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40078", "url": "https://patchblox.com/security/cve/CVE-2025-40078", "title": "bpf: Explicitly check accesses to bpf_sock_addr", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40010", "url": "https://patchblox.com/security/cve/CVE-2025-40010", "title": "afs: Fix potential null pointer dereference in afs_put_server", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53731", "url": "https://patchblox.com/security/cve/CVE-2023-53731", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40049", "url": "https://patchblox.com/security/cve/CVE-2025-40049", "title": "Squashfs: fix uninit-value in squashfs_get_parent", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53704", "url": "https://patchblox.com/security/cve/CVE-2023-53704", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40029", "url": "https://patchblox.com/security/cve/CVE-2025-40029", "title": "bus: fsl-mc: Check return value of platform_get_resource()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40060", "url": "https://patchblox.com/security/cve/CVE-2025-40060", "title": "coresight: trbe: Return NULL pointer for allocation failures", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40032", "url": "https://patchblox.com/security/cve/CVE-2025-40032", "title": "PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40056", "url": "https://patchblox.com/security/cve/CVE-2025-40056", "title": "vhost: vringh: Fix copy_to_iter return value check", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53697", "url": "https://patchblox.com/security/cve/CVE-2023-53697", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53708", "url": "https://patchblox.com/security/cve/CVE-2023-53708", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 4, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53693", "url": "https://patchblox.com/security/cve/CVE-2023-53693", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53699", "url": "https://patchblox.com/security/cve/CVE-2023-53699", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53703", "url": "https://patchblox.com/security/cve/CVE-2023-53703", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39997", "url": "https://patchblox.com/security/cve/CVE-2025-39997", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53725", "url": "https://patchblox.com/security/cve/CVE-2023-53725", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53631", "url": "https://patchblox.com/security/cve/CVE-2023-53631", "title": "kernel-default-base: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53647", "url": "https://patchblox.com/security/cve/CVE-2023-53647", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "important", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53653", "url": "https://patchblox.com/security/cve/CVE-2023-53653", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53650", "url": "https://patchblox.com/security/cve/CVE-2023-53650", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40080", "url": "https://patchblox.com/security/cve/CVE-2025-40080", "title": "nbd: restrict sockets to TCP and UDP", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40085", "url": "https://patchblox.com/security/cve/CVE-2025-40085", "title": "ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card", "priority": "Routine", "severity": "Moderate", "cvss": 5.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53730", "url": "https://patchblox.com/security/cve/CVE-2023-53730", "title": "kernel-livepatch-SLE15-SP6-RT_Update_17: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40005", "url": "https://patchblox.com/security/cve/CVE-2025-40005", "title": "spi: cadence-quadspi: Implement refcount to handle unbind during busy", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53617", "url": "https://patchblox.com/security/cve/CVE-2023-53617", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53618", "url": "https://patchblox.com/security/cve/CVE-2023-53618", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "important", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53649", "url": "https://patchblox.com/security/cve/CVE-2023-53649", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40071", "url": "https://patchblox.com/security/cve/CVE-2025-40071", "title": "tty: n_gsm: Don\u0027t block input queue by waiting MSC", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39991", "url": "https://patchblox.com/security/cve/CVE-2025-39991", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40100", "url": "https://patchblox.com/security/cve/CVE-2025-40100", "title": "btrfs: do not assert we found block group item when creating free space tree", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40062", "url": "https://patchblox.com/security/cve/CVE-2025-40062", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53540", "url": "https://patchblox.com/security/cve/CVE-2023-53540", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38539", "url": "https://patchblox.com/security/cve/CVE-2025-38539", "title": "tracing: Add down_write(trace_event_sem) when adding trace event", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.1, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53632", "url": "https://patchblox.com/security/cve/CVE-2023-53632", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53633", "url": "https://patchblox.com/security/cve/CVE-2023-53633", "title": "kernel-azure: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53721", "url": "https://patchblox.com/security/cve/CVE-2023-53721", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39676", "url": "https://patchblox.com/security/cve/CVE-2025-39676", "title": "scsi: qla4xxx: Prevent a potential error pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39756", "url": "https://patchblox.com/security/cve/CVE-2025-39756", "title": "fs: Prevent file descriptor table allocations exceeding INT_MAX", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39812", "url": "https://patchblox.com/security/cve/CVE-2025-39812", "title": "sctp: initialize more fields in sctp_v6_from_sk()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53545", "url": "https://patchblox.com/security/cve/CVE-2023-53545", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53660", "url": "https://patchblox.com/security/cve/CVE-2023-53660", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53548", "url": "https://patchblox.com/security/cve/CVE-2023-53548", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53585", "url": "https://patchblox.com/security/cve/CVE-2023-53585", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "important", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53662", "url": "https://patchblox.com/security/cve/CVE-2023-53662", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53670", "url": "https://patchblox.com/security/cve/CVE-2023-53670", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53654", "url": "https://patchblox.com/security/cve/CVE-2023-53654", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation before accessing cg...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53656", "url": "https://patchblox.com/security/cve/CVE-2023-53656", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53538", "url": "https://patchblox.com/security/cve/CVE-2023-53538", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53583", "url": "https://patchblox.com/security/cve/CVE-2023-53583", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53588", "url": "https://patchblox.com/security/cve/CVE-2023-53588", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53674", "url": "https://patchblox.com/security/cve/CVE-2023-53674", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53658", "url": "https://patchblox.com/security/cve/CVE-2023-53658", "title": "kernel-zfcpdump: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53557", "url": "https://patchblox.com/security/cve/CVE-2023-53557", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39876", "url": "https://patchblox.com/security/cve/CVE-2025-39876", "title": "net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53579", "url": "https://patchblox.com/security/cve/CVE-2023-53579", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39937", "url": "https://patchblox.com/security/cve/CVE-2025-39937", "title": "net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53568", "url": "https://patchblox.com/security/cve/CVE-2023-53568", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don\u0027t leak memory if dev_set_name()...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53672", "url": "https://patchblox.com/security/cve/CVE-2023-53672", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53681", "url": "https://patchblox.com/security/cve/CVE-2023-53681", "title": "kernel-syms-azure: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53687", "url": "https://patchblox.com/security/cve/CVE-2023-53687", "title": "kernel-source: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39934", "url": "https://patchblox.com/security/cve/CVE-2025-39934", "title": "drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39938", "url": "https://patchblox.com/security/cve/CVE-2025-39938", "title": "ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53563", "url": "https://patchblox.com/security/cve/CVE-2023-53563", "title": "kernel-syms-azure: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53601", "url": "https://patchblox.com/security/cve/CVE-2023-53601", "title": "kernel-zfcpdump: Security update for the Linux Kernel", "priority": "Routine", "severity": "important", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53603", "url": "https://patchblox.com/security/cve/CVE-2023-53603", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39895", "url": "https://patchblox.com/security/cve/CVE-2025-39895", "title": "sched: Fix sched_numa_find_nth_cpu() if mask offline", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39947", "url": "https://patchblox.com/security/cve/CVE-2025-39947", "title": "net/mlx5e: Harden uplink netdev access against device unbind", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53558", "url": "https://patchblox.com/security/cve/CVE-2023-53558", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53574", "url": "https://patchblox.com/security/cve/CVE-2023-53574", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue whe...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53593", "url": "https://patchblox.com/security/cve/CVE-2023-53593", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "important", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53602", "url": "https://patchblox.com/security/cve/CVE-2023-53602", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53663", "url": "https://patchblox.com/security/cve/CVE-2023-53663", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53553", "url": "https://patchblox.com/security/cve/CVE-2023-53553", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Important", "cvss": 5.5, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53599", "url": "https://patchblox.com/security/cve/CVE-2023-53599", "title": "kernel-obs-build: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53686", "url": "https://patchblox.com/security/cve/CVE-2023-53686", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53555", "url": "https://patchblox.com/security/cve/CVE-2023-53555", "title": "kernel-syms: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53580", "url": "https://patchblox.com/security/cve/CVE-2023-53580", "title": "kernel-livepatch-SLE15-SP6-RT_Update_17: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39813", "url": "https://patchblox.com/security/cve/CVE-2025-39813", "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-11T01:43:54Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }