# SUSE-SU-2025:4140-1: Security update for 13 packages

SUSE-SU-2025:4140-1, released November 19, 2025, fixes 190 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-4140-1
- Platform: Linux
- Released: Nov 19, 2025
- Priority: Urgent (Closes CVE-2025-40000, rated Critical)
- CVEs: 190, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:4140-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1.150600.12.34.2 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.78.1.150600.12.34.2 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-livepatch-SLE15-SP6_Update_17](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-17.md) | sles 15.6 | 1-150600.13.5.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.78.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.78.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40000](https://patchblox.com/security/data/cve/CVE-2025-40000.md) | Urgent | wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() | 9.8 | 0.0027 |  |
| [CVE-2025-39996](https://patchblox.com/security/data/cve/CVE-2025-39996.md) | Urgent | media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove | 9.8 | 0.0023 |  |
| [CVE-2025-39985](https://patchblox.com/security/data/cve/CVE-2025-39985.md) | Urgent | can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow | 9.8 | 0.0018 |  |
| [CVE-2025-39986](https://patchblox.com/security/data/cve/CVE-2025-39986.md) | Urgent | can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow | 9.8 | 0.0018 |  |
| [CVE-2025-39967](https://patchblox.com/security/data/cve/CVE-2025-39967.md) | Urgent | fbcon: fix integer overflow in fbcon_do_set_font | 9.8 | 0.0017 |  |
| [CVE-2025-39994](https://patchblox.com/security/data/cve/CVE-2025-39994.md) | Urgent | media: tuner: xc5000: Fix use-after-free in xc5000_release | 9.8 | 0.0016 |  |
| [CVE-2025-39970](https://patchblox.com/security/data/cve/CVE-2025-39970.md) | Urgent | i40e: fix input validation logic for action_meta | 9.8 | 0.0016 |  |
| [CVE-2025-39971](https://patchblox.com/security/data/cve/CVE-2025-39971.md) | Urgent | i40e: fix idx validation in config queues msg | 9.8 | 0.0016 |  |
| [CVE-2025-39972](https://patchblox.com/security/data/cve/CVE-2025-39972.md) | Urgent | i40e: fix idx validation in i40e_validate_queue_map | 9.8 | 0.0016 |  |
| [CVE-2025-39973](https://patchblox.com/security/data/cve/CVE-2025-39973.md) | Urgent | i40e: add validation for ring_len param | 9.8 | 0.0016 |  |
| [CVE-2025-39978](https://patchblox.com/security/data/cve/CVE-2025-39978.md) | Urgent | octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() | 9.8 | 0.0015 |  |
| [CVE-2025-39968](https://patchblox.com/security/data/cve/CVE-2025-39968.md) | Urgent | i40e: add max boundary check for VF filters | 9.8 | 0.0015 |  |
| [CVE-2025-39946](https://patchblox.com/security/data/cve/CVE-2025-39946.md) | High | tls: make sure to abort the stream if headers are bogus | 7.0 | 0.1026 |  |
| [CVE-2025-40087](https://patchblox.com/security/data/cve/CVE-2025-40087.md) | High | NFSD: Define a proc_layoutcommit for the FlexFiles layout type | 7.5 | 0.0050 |  |
| [CVE-2025-39841](https://patchblox.com/security/data/cve/CVE-2025-39841.md) | High | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 7.8 | 0.0048 |  |
| [CVE-2025-39702](https://patchblox.com/security/data/cve/CVE-2025-39702.md) | High | ipv6: sr: Fix MAC comparison to be constant-time | 7.1 | 0.0045 |  |
| [CVE-2025-39851](https://patchblox.com/security/data/cve/CVE-2025-39851.md) | High | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 7.0 | 0.0040 |  |
| [CVE-2023-53711](https://patchblox.com/security/data/cve/CVE-2023-53711.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.2 | 0.0038 |  |
| [CVE-2025-38552](https://patchblox.com/security/data/cve/CVE-2025-38552.md) | High | mptcp: plug races between subflow fail and subflow creation | 7.8 | 0.0035 |  |
| [CVE-2025-39673](https://patchblox.com/security/data/cve/CVE-2025-39673.md) | High | ppp: fix race conditions in ppp_fill_forward_path | 7.0 | 0.0032 |  |
| [CVE-2025-40043](https://patchblox.com/security/data/cve/CVE-2025-40043.md) | High | net: nfc: nci: Add parameter validation for packet data | 8.8 | 0.0031 |  |
| [CVE-2025-39866](https://patchblox.com/security/data/cve/CVE-2025-39866.md) | High | fs: writeback: fix use-after-free in __mark_inode_dirty() | 7.8 | 0.0031 |  |
| [CVE-2023-53600](https://patchblox.com/security/data/cve/CVE-2023-53600.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0030 |  |
| [CVE-2025-39952](https://patchblox.com/security/data/cve/CVE-2025-39952.md) | High | wifi: wilc1000: avoid buffer overflow in WID string configuration | 7.8 | 0.0029 |  |
| [CVE-2025-40019](https://patchblox.com/security/data/cve/CVE-2025-40019.md) | High | crypto: essiv - Check ssize for decryption and in-place encryption | 7.0 | 0.0029 |  |
| [CVE-2025-39982](https://patchblox.com/security/data/cve/CVE-2025-39982.md) | High | Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync | 8.8 | 0.0028 |  |
| [CVE-2023-53673](https://patchblox.com/security/data/cve/CVE-2023-53673.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2025-39995](https://patchblox.com/security/data/cve/CVE-2025-39995.md) | High | media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe | 7.1 | 0.0023 |  |
| [CVE-2025-40035](https://patchblox.com/security/data/cve/CVE-2025-40035.md) | High | Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak | 7.1 | 0.0023 |  |
| [CVE-2023-53619](https://patchblox.com/security/data/cve/CVE-2023-53619.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2023-53652](https://patchblox.com/security/data/cve/CVE-2023-53652.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-40036](https://patchblox.com/security/data/cve/CVE-2025-40036.md) | High | misc: fastrpc: fix possible map leak in fastrpc_put_args | 7.1 | 0.0021 |  |
| [CVE-2025-40052](https://patchblox.com/security/data/cve/CVE-2025-40052.md) | High | smb: client: fix crypto buffers in non-linear memory | 7.1 | 0.0021 |  |
| [CVE-2023-53648](https://patchblox.com/security/data/cve/CVE-2023-53648.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53722](https://patchblox.com/security/data/cve/CVE-2023-53722.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2025-40020](https://patchblox.com/security/data/cve/CVE-2025-40020.md) | High | can: peak_usb: fix shift-out-of-bounds issue | 7.1 | 0.0021 |  |
| [CVE-2023-53728](https://patchblox.com/security/data/cve/CVE-2023-53728.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53621](https://patchblox.com/security/data/cve/CVE-2023-53621.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2023-53646](https://patchblox.com/security/data/cve/CVE-2023-53646.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2025-39965](https://patchblox.com/security/data/cve/CVE-2025-39965.md) | High | xfrm: xfrm_alloc_spi shouldn't use 0 as SPI | 7.8 | 0.0020 |  |
| [CVE-2023-53727](https://patchblox.com/security/data/cve/CVE-2023-53727.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-38699](https://patchblox.com/security/data/cve/CVE-2025-38699.md) | High | scsi: bfa: Double-free fix | 7.8 | 0.0019 |  |
| [CVE-2025-39683](https://patchblox.com/security/data/cve/CVE-2025-39683.md) | High | tracing: Limit access to parser->buffer when trace_get_user failed | 7.1 | 0.0019 |  |
| [CVE-2025-40082](https://patchblox.com/security/data/cve/CVE-2025-40082.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2023-53554](https://patchblox.com/security/data/cve/CVE-2023-53554.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 |  |
| [CVE-2025-39987](https://patchblox.com/security/data/cve/CVE-2025-39987.md) | High | can: hi311x: populate ndo_change_mtu() to prevent buffer overflow | 7.8 | 0.0018 |  |
| [CVE-2025-39988](https://patchblox.com/security/data/cve/CVE-2025-39988.md) | High | can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow | 7.8 | 0.0018 |  |
| [CVE-2025-38653](https://patchblox.com/security/data/cve/CVE-2025-38653.md) | High | proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al | 7.8 | 0.0018 |  |
| [CVE-2025-40044](https://patchblox.com/security/data/cve/CVE-2025-40044.md) | High | fs: udf: fix OOB read in lengthAllocDescs handling | 7.8 | 0.0017 |  |
| [CVE-2023-53570](https://patchblox.com/security/data/cve/CVE-2023-53570.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 |  |
| [CVE-2025-38718](https://patchblox.com/security/data/cve/CVE-2025-38718.md) | High | sctp: linearize cloned gso packets in sctp_rcv | 7.8 | 0.0017 |  |
| [CVE-2023-53552](https://patchblox.com/security/data/cve/CVE-2023-53552.md) | High | kernel-rt-debug-modules: kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free | 7.8 | 0.0017 |  |
| [CVE-2023-53539](https://patchblox.com/security/data/cve/CVE-2023-53539.md) | High | bpftool: kernel: RDMA/rxe: Fix incomplete state save in rxe_requester | 7.8 | 0.0017 |  |
| [CVE-2023-53543](https://patchblox.com/security/data/cve/CVE-2023-53543.md) | High | vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check | 7.8 | 0.0017 |  |
| [CVE-2023-53659](https://patchblox.com/security/data/cve/CVE-2023-53659.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 |  |
| [CVE-2023-53541](https://patchblox.com/security/data/cve/CVE-2023-53541.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39902](https://patchblox.com/security/data/cve/CVE-2025-39902.md) | High | mm/slub: avoid accessing metadata when pointer is invalid in object_err() | 7.8 | 0.0017 |  |
| [CVE-2025-39955](https://patchblox.com/security/data/cve/CVE-2025-39955.md) | High | tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). | 7.8 | 0.0017 |  |
| [CVE-2025-40051](https://patchblox.com/security/data/cve/CVE-2025-40051.md) | High | vhost: vringh: Modify the return value check | 7.8 | 0.0017 |  |
| [CVE-2023-53615](https://patchblox.com/security/data/cve/CVE-2023-53615.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53698](https://patchblox.com/security/data/cve/CVE-2023-53698.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53707](https://patchblox.com/security/data/cve/CVE-2023-53707.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39794](https://patchblox.com/security/data/cve/CVE-2025-39794.md) | High | ARM: tegra: Use I/O memcpy to write to IRAM | 7.0 | 0.0016 |  |
| [CVE-2025-40058](https://patchblox.com/security/data/cve/CVE-2025-40058.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Disallow dirty tracking if incoheren... | 8.8 | 0.0016 |  |
| [CVE-2025-39911](https://patchblox.com/security/data/cve/CVE-2025-39911.md) | High | i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path | 7.8 | 0.0016 |  |
| [CVE-2025-39945](https://patchblox.com/security/data/cve/CVE-2025-39945.md) | High | cnic: Fix use-after-free bugs in cnic_delete_task | 7.8 | 0.0016 |  |
| [CVE-2023-53546](https://patchblox.com/security/data/cve/CVE-2023-53546.md) | High | kernel-source-azure: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2025-39797](https://patchblox.com/security/data/cve/CVE-2025-39797.md) | High | xfrm: Duplicate SPI Handling | 7.8 | 0.0016 |  |
| [CVE-2025-39993](https://patchblox.com/security/data/cve/CVE-2025-39993.md) | High | media: rc: fix races with imon_disconnect() | 7.8 | 0.0016 |  |
| [CVE-2025-39697](https://patchblox.com/security/data/cve/CVE-2025-39697.md) | High | NFS: Fix a race when updating an existing write | 7.6 | 0.0016 |  |
| [CVE-2025-39969](https://patchblox.com/security/data/cve/CVE-2025-39969.md) | High | i40e: fix validation of VF state in get resources | 8.8 | 0.0016 |  |
| [CVE-2023-53596](https://patchblox.com/security/data/cve/CVE-2023-53596.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53657](https://patchblox.com/security/data/cve/CVE-2023-53657.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53616](https://patchblox.com/security/data/cve/CVE-2023-53616.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53645](https://patchblox.com/security/data/cve/CVE-2023-53645.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39949](https://patchblox.com/security/data/cve/CVE-2025-39949.md) | High | qed: Don't collect too many protection override GRC elements | 7.0 | 0.0016 |  |
| [CVE-2023-53577](https://patchblox.com/security/data/cve/CVE-2023-53577.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2025-39957](https://patchblox.com/security/data/cve/CVE-2025-39957.md) | High | wifi: mac80211: increase scan_ies_len for S1G | 7.8 | 0.0016 |  |
| [CVE-2023-53556](https://patchblox.com/security/data/cve/CVE-2023-53556.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39881](https://patchblox.com/security/data/cve/CVE-2025-39881.md) | High | kernfs: Fix UAF in polling when open file is released | 7.8 | 0.0015 |  |
| [CVE-2025-40096](https://patchblox.com/security/data/cve/CVE-2025-40096.md) | High | drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies | 7.8 | 0.0015 |  |
| [CVE-2023-53713](https://patchblox.com/security/data/cve/CVE-2023-53713.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53718](https://patchblox.com/security/data/cve/CVE-2023-53718.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Do not swap cpu_buffer during resiz... | 7.8 | 0.0015 |  |
| [CVE-2023-53729](https://patchblox.com/security/data/cve/CVE-2023-53729.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  soc: qcom: qmi_encdec: Restrict string length in... | 7.8 | 0.0015 |  |
| [CVE-2023-53733](https://patchblox.com/security/data/cve/CVE-2023-53733.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39981](https://patchblox.com/security/data/cve/CVE-2025-39981.md) | High | Bluetooth: MGMT: Fix possible UAFs | 7.8 | 0.0015 |  |
| [CVE-2023-53559](https://patchblox.com/security/data/cve/CVE-2023-53559.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53560](https://patchblox.com/security/data/cve/CVE-2023-53560.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53613](https://patchblox.com/security/data/cve/CVE-2023-53613.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53668](https://patchblox.com/security/data/cve/CVE-2023-53668.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0015 |  |
| [CVE-2025-40018](https://patchblox.com/security/data/cve/CVE-2025-40018.md) | High | ipvs: Defer ip_vs_ftp unregister during netns cleanup | 7.8 | 0.0015 |  |
| [CVE-2025-40061](https://patchblox.com/security/data/cve/CVE-2025-40061.md) | High | RDMA/rxe: Fix race in do_task() when draining | 7.8 | 0.0015 |  |
| [CVE-2023-53726](https://patchblox.com/security/data/cve/CVE-2023-53726.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: csum: Fix OoB access in IP checksum code... | 7.1 | 0.0015 |  |
| [CVE-2023-53611](https://patchblox.com/security/data/cve/CVE-2023-53611.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2025-40088](https://patchblox.com/security/data/cve/CVE-2025-40088.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() | 7.1 | 0.0015 |  |
| [CVE-2023-53666](https://patchblox.com/security/data/cve/CVE-2023-53666.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0015 |  |
| [CVE-2023-53622](https://patchblox.com/security/data/cve/CVE-2023-53622.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0015 |  |
| [CVE-2023-53572](https://patchblox.com/security/data/cve/CVE-2023-53572.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53638](https://patchblox.com/security/data/cve/CVE-2023-53638.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2023-53575](https://patchblox.com/security/data/cve/CVE-2023-53575.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0014 |  |
| [CVE-2023-53550](https://patchblox.com/security/data/cve/CVE-2023-53550.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0014 |  |
| [CVE-2025-38008](https://patchblox.com/security/data/cve/CVE-2025-38008.md) | High | kernel-64kb: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). | 7.0 | 0.0014 |  |
| [CVE-2023-53665](https://patchblox.com/security/data/cve/CVE-2023-53665.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0013 |  |
| [CVE-2023-53581](https://patchblox.com/security/data/cve/CVE-2023-53581.md) | High | kernel-abi-stablelists: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate) | 8.0 | 0.0011 |  |
| [CVE-2025-39948](https://patchblox.com/security/data/cve/CVE-2025-39948.md) | Routine | kernel-64kb: ice: fix Rx page leak on multi-buffer frames (bsc#1251233). | 6.4 | 0.0040 |  |
| [CVE-2023-53597](https://patchblox.com/security/data/cve/CVE-2023-53597.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2025-40011](https://patchblox.com/security/data/cve/CVE-2025-40011.md) | Routine | drm/gma500: Fix null dereference in hdmi teardown | 5.5 | 0.0026 |  |
| [CVE-2025-40016](https://patchblox.com/security/data/cve/CVE-2025-40016.md) | Routine | media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID | 6.2 | 0.0025 |  |
| [CVE-2025-40013](https://patchblox.com/security/data/cve/CVE-2025-40013.md) | Routine | ASoC: qcom: audioreach: fix potential null pointer dereference | 5.5 | 0.0025 |  |
| [CVE-2025-40078](https://patchblox.com/security/data/cve/CVE-2025-40078.md) | Routine | bpf: Explicitly check accesses to bpf_sock_addr | 5.5 | 0.0025 |  |
| [CVE-2025-40010](https://patchblox.com/security/data/cve/CVE-2025-40010.md) | Routine | afs: Fix potential null pointer dereference in afs_put_server | 5.5 | 0.0024 |  |
| [CVE-2023-53731](https://patchblox.com/security/data/cve/CVE-2023-53731.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-40049](https://patchblox.com/security/data/cve/CVE-2025-40049.md) | Routine | Squashfs: fix uninit-value in squashfs_get_parent | 5.5 | 0.0023 |  |
| [CVE-2023-53704](https://patchblox.com/security/data/cve/CVE-2023-53704.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-40029](https://patchblox.com/security/data/cve/CVE-2025-40029.md) | Routine | bus: fsl-mc: Check return value of platform_get_resource() | 5.5 | 0.0022 |  |
| [CVE-2025-40060](https://patchblox.com/security/data/cve/CVE-2025-40060.md) | Routine | coresight: trbe: Return NULL pointer for allocation failures | 5.5 | 0.0022 |  |
| [CVE-2025-40032](https://patchblox.com/security/data/cve/CVE-2025-40032.md) | Routine | PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release | 5.5 | 0.0021 |  |
| [CVE-2025-40056](https://patchblox.com/security/data/cve/CVE-2025-40056.md) | Routine | vhost: vringh: Fix copy_to_iter return value check | 5.5 | 0.0021 |  |
| [CVE-2023-53697](https://patchblox.com/security/data/cve/CVE-2023-53697.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0021 |  |
| [CVE-2023-53708](https://patchblox.com/security/data/cve/CVE-2023-53708.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.0 | 0.0021 |  |
| [CVE-2023-53693](https://patchblox.com/security/data/cve/CVE-2023-53693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53699](https://patchblox.com/security/data/cve/CVE-2023-53699.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53703](https://patchblox.com/security/data/cve/CVE-2023-53703.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-39997](https://patchblox.com/security/data/cve/CVE-2025-39997.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53725](https://patchblox.com/security/data/cve/CVE-2023-53725.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53631](https://patchblox.com/security/data/cve/CVE-2023-53631.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53647](https://patchblox.com/security/data/cve/CVE-2023-53647.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53653](https://patchblox.com/security/data/cve/CVE-2023-53653.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53650](https://patchblox.com/security/data/cve/CVE-2023-53650.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-40080](https://patchblox.com/security/data/cve/CVE-2025-40080.md) | Routine | nbd: restrict sockets to TCP and UDP | 6.1 | 0.0021 |  |
| [CVE-2025-40085](https://patchblox.com/security/data/cve/CVE-2025-40085.md) | Routine | ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card | 5.8 | 0.0021 |  |
| [CVE-2023-53730](https://patchblox.com/security/data/cve/CVE-2023-53730.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_17: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-40005](https://patchblox.com/security/data/cve/CVE-2025-40005.md) | Routine | spi: cadence-quadspi: Implement refcount to handle unbind during busy | 6.6 | 0.0020 |  |
| [CVE-2023-53617](https://patchblox.com/security/data/cve/CVE-2023-53617.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-53618](https://patchblox.com/security/data/cve/CVE-2023-53618.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-53649](https://patchblox.com/security/data/cve/CVE-2023-53649.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-40071](https://patchblox.com/security/data/cve/CVE-2025-40071.md) | Routine | tty: n_gsm: Don't block input queue by waiting MSC | 6.1 | 0.0020 |  |
| [CVE-2025-39991](https://patchblox.com/security/data/cve/CVE-2025-39991.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-40100](https://patchblox.com/security/data/cve/CVE-2025-40100.md) | Routine | btrfs: do not assert we found block group item when creating free space tree | 5.5 | 0.0020 |  |
| [CVE-2025-40062](https://patchblox.com/security/data/cve/CVE-2025-40062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2023-53540](https://patchblox.com/security/data/cve/CVE-2023-53540.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 |  |
| [CVE-2023-53632](https://patchblox.com/security/data/cve/CVE-2023-53632.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2023-53633](https://patchblox.com/security/data/cve/CVE-2023-53633.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2023-53721](https://patchblox.com/security/data/cve/CVE-2023-53721.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0018 |  |
| [CVE-2025-39676](https://patchblox.com/security/data/cve/CVE-2025-39676.md) | Routine | scsi: qla4xxx: Prevent a potential error pointer dereference | 5.5 | 0.0018 |  |
| [CVE-2025-39756](https://patchblox.com/security/data/cve/CVE-2025-39756.md) | Routine | fs: Prevent file descriptor table allocations exceeding INT_MAX | 5.5 | 0.0018 |  |
| [CVE-2025-39812](https://patchblox.com/security/data/cve/CVE-2025-39812.md) | Routine | sctp: initialize more fields in sctp_v6_from_sk() | 5.5 | 0.0018 |  |
| [CVE-2023-53545](https://patchblox.com/security/data/cve/CVE-2023-53545.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53660](https://patchblox.com/security/data/cve/CVE-2023-53660.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53548](https://patchblox.com/security/data/cve/CVE-2023-53548.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53585](https://patchblox.com/security/data/cve/CVE-2023-53585.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53662](https://patchblox.com/security/data/cve/CVE-2023-53662.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53670](https://patchblox.com/security/data/cve/CVE-2023-53670.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53654](https://patchblox.com/security/data/cve/CVE-2023-53654.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  octeontx2-af: Add validation before accessing cg... | 5.5 | 0.0016 |  |
| [CVE-2023-53656](https://patchblox.com/security/data/cve/CVE-2023-53656.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53538](https://patchblox.com/security/data/cve/CVE-2023-53538.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53583](https://patchblox.com/security/data/cve/CVE-2023-53583.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53588](https://patchblox.com/security/data/cve/CVE-2023-53588.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53674](https://patchblox.com/security/data/cve/CVE-2023-53674.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53658](https://patchblox.com/security/data/cve/CVE-2023-53658.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53557](https://patchblox.com/security/data/cve/CVE-2023-53557.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39876](https://patchblox.com/security/data/cve/CVE-2025-39876.md) | Routine | net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() | 5.5 | 0.0015 |  |
| [CVE-2023-53579](https://patchblox.com/security/data/cve/CVE-2023-53579.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39937](https://patchblox.com/security/data/cve/CVE-2025-39937.md) | Routine | net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer | 5.5 | 0.0015 |  |
| [CVE-2023-53568](https://patchblox.com/security/data/cve/CVE-2023-53568.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  s390/zcrypt: don't leak memory if dev_set_name()... | 5.5 | 0.0015 |  |
| [CVE-2023-53672](https://patchblox.com/security/data/cve/CVE-2023-53672.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53681](https://patchblox.com/security/data/cve/CVE-2023-53681.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53687](https://patchblox.com/security/data/cve/CVE-2023-53687.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39934](https://patchblox.com/security/data/cve/CVE-2025-39934.md) | Routine | drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ | 5.5 | 0.0015 |  |
| [CVE-2025-39938](https://patchblox.com/security/data/cve/CVE-2025-39938.md) | Routine | ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed | 5.5 | 0.0015 |  |
| [CVE-2023-53563](https://patchblox.com/security/data/cve/CVE-2023-53563.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53601](https://patchblox.com/security/data/cve/CVE-2023-53601.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53603](https://patchblox.com/security/data/cve/CVE-2023-53603.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39895](https://patchblox.com/security/data/cve/CVE-2025-39895.md) | Routine | sched: Fix sched_numa_find_nth_cpu() if mask offline | 5.5 | 0.0015 |  |
| [CVE-2025-39947](https://patchblox.com/security/data/cve/CVE-2025-39947.md) | Routine | net/mlx5e: Harden uplink netdev access against device unbind | 5.5 | 0.0015 |  |
| [CVE-2023-53558](https://patchblox.com/security/data/cve/CVE-2023-53558.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53574](https://patchblox.com/security/data/cve/CVE-2023-53574.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: delete timer and free skb queue whe... | 5.5 | 0.0015 |  |
| [CVE-2023-53593](https://patchblox.com/security/data/cve/CVE-2023-53593.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53602](https://patchblox.com/security/data/cve/CVE-2023-53602.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53663](https://patchblox.com/security/data/cve/CVE-2023-53663.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53553](https://patchblox.com/security/data/cve/CVE-2023-53553.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53599](https://patchblox.com/security/data/cve/CVE-2023-53599.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53686](https://patchblox.com/security/data/cve/CVE-2023-53686.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53555](https://patchblox.com/security/data/cve/CVE-2023-53555.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53580](https://patchblox.com/security/data/cve/CVE-2023-53580.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_17: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.