# SUSE-SU-2025:4141-1: kernel-livepatch-SLE15-SP7-RT_Update_6 security update

SUSE-SU-2025:4141-1, released November 19, 2025, fixes 461 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_6 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-4141-1
- Platform: Linux
- Released: Nov 19, 2025
- Priority: Urgent (Closes CVE-2025-40000, rated Critical)
- CVEs: 461, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:4141-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP7-RT_Update_6](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-6.md) | sles 15.7 | 1-150700.1.3.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40000](https://patchblox.com/security/data/cve/CVE-2025-40000.md) | Urgent | wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() | 9.8 | 0.0027 |  |
| [CVE-2025-39996](https://patchblox.com/security/data/cve/CVE-2025-39996.md) | Urgent | media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove | 9.8 | 0.0023 |  |
| [CVE-2025-39985](https://patchblox.com/security/data/cve/CVE-2025-39985.md) | Urgent | can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow | 9.8 | 0.0018 |  |
| [CVE-2025-39986](https://patchblox.com/security/data/cve/CVE-2025-39986.md) | Urgent | can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow | 9.8 | 0.0018 |  |
| [CVE-2025-39967](https://patchblox.com/security/data/cve/CVE-2025-39967.md) | Urgent | fbcon: fix integer overflow in fbcon_do_set_font | 9.8 | 0.0017 |  |
| [CVE-2025-39994](https://patchblox.com/security/data/cve/CVE-2025-39994.md) | Urgent | media: tuner: xc5000: Fix use-after-free in xc5000_release | 9.8 | 0.0016 |  |
| [CVE-2025-39970](https://patchblox.com/security/data/cve/CVE-2025-39970.md) | Urgent | i40e: fix input validation logic for action_meta | 9.8 | 0.0016 |  |
| [CVE-2025-39971](https://patchblox.com/security/data/cve/CVE-2025-39971.md) | Urgent | i40e: fix idx validation in config queues msg | 9.8 | 0.0016 |  |
| [CVE-2025-39972](https://patchblox.com/security/data/cve/CVE-2025-39972.md) | Urgent | i40e: fix idx validation in i40e_validate_queue_map | 9.8 | 0.0016 |  |
| [CVE-2025-39973](https://patchblox.com/security/data/cve/CVE-2025-39973.md) | Urgent | i40e: add validation for ring_len param | 9.8 | 0.0016 |  |
| [CVE-2025-39978](https://patchblox.com/security/data/cve/CVE-2025-39978.md) | Urgent | octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() | 9.8 | 0.0015 |  |
| [CVE-2025-39907](https://patchblox.com/security/data/cve/CVE-2025-39907.md) | Urgent | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer | 9.8 | 0.0015 |  |
| [CVE-2025-39925](https://patchblox.com/security/data/cve/CVE-2025-39925.md) | Urgent | can: j1939: implement NETDEV_UNREGISTER notification handler | 9.8 | 0.0015 |  |
| [CVE-2025-39968](https://patchblox.com/security/data/cve/CVE-2025-39968.md) | Urgent | i40e: add max boundary check for VF filters | 9.8 | 0.0015 |  |
| [CVE-2025-39946](https://patchblox.com/security/data/cve/CVE-2025-39946.md) | High | tls: make sure to abort the stream if headers are bogus | 7.0 | 0.1026 |  |
| [CVE-2023-31248](https://patchblox.com/security/data/cve/CVE-2023-31248.md) | High | linux: Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to ch... | 7.8 | 0.0189 |  |
| [CVE-2023-39197](https://patchblox.com/security/data/cve/CVE-2023-39197.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0094 |  |
| [CVE-2024-26584](https://patchblox.com/security/data/cve/CVE-2024-26584.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0075 |  |
| [CVE-2023-53338](https://patchblox.com/security/data/cve/CVE-2023-53338.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0055 |  |
| [CVE-2023-42753](https://patchblox.com/security/data/cve/CVE-2023-42753.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0051 |  |
| [CVE-2025-40087](https://patchblox.com/security/data/cve/CVE-2025-40087.md) | High | NFSD: Define a proc_layoutcommit for the FlexFiles layout type | 7.5 | 0.0050 |  |
| [CVE-2025-38734](https://patchblox.com/security/data/cve/CVE-2025-38734.md) | High | net/smc: fix UAF on smcsk after smc_listen_out() | 7.8 | 0.0048 |  |
| [CVE-2025-39841](https://patchblox.com/security/data/cve/CVE-2025-39841.md) | High | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 7.8 | 0.0048 |  |
| [CVE-2025-39702](https://patchblox.com/security/data/cve/CVE-2025-39702.md) | High | ipv6: sr: Fix MAC comparison to be constant-time | 7.1 | 0.0045 |  |
| [CVE-2025-38724](https://patchblox.com/security/data/cve/CVE-2025-38724.md) | High | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | 7.8 | 0.0041 |  |
| [CVE-2025-39851](https://patchblox.com/security/data/cve/CVE-2025-39851.md) | High | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 7.0 | 0.0040 |  |
| [CVE-2023-53192](https://patchblox.com/security/data/cve/CVE-2023-53192.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0039 |  |
| [CVE-2023-53711](https://patchblox.com/security/data/cve/CVE-2023-53711.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.2 | 0.0038 |  |
| [CVE-2025-38552](https://patchblox.com/security/data/cve/CVE-2025-38552.md) | High | mptcp: plug races between subflow fail and subflow creation | 7.8 | 0.0035 |  |
| [CVE-2024-58240](https://patchblox.com/security/data/cve/CVE-2024-58240.md) | High | tls: separate no-async decryption request handling from async | 7.8 | 0.0034 |  |
| [CVE-2025-39673](https://patchblox.com/security/data/cve/CVE-2025-39673.md) | High | ppp: fix race conditions in ppp_fill_forward_path | 7.0 | 0.0032 |  |
| [CVE-2025-40043](https://patchblox.com/security/data/cve/CVE-2025-40043.md) | High | net: nfc: nci: Add parameter validation for packet data | 8.8 | 0.0031 |  |
| [CVE-2025-39866](https://patchblox.com/security/data/cve/CVE-2025-39866.md) | High | fs: writeback: fix use-after-free in __mark_inode_dirty() | 7.8 | 0.0031 |  |
| [CVE-2023-53600](https://patchblox.com/security/data/cve/CVE-2023-53600.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0030 |  |
| [CVE-2025-39952](https://patchblox.com/security/data/cve/CVE-2025-39952.md) | High | wifi: wilc1000: avoid buffer overflow in WID string configuration | 7.8 | 0.0029 |  |
| [CVE-2025-40019](https://patchblox.com/security/data/cve/CVE-2025-40019.md) | High | crypto: essiv - Check ssize for decryption and in-place encryption | 7.0 | 0.0029 |  |
| [CVE-2025-39982](https://patchblox.com/security/data/cve/CVE-2025-39982.md) | High | Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync | 8.8 | 0.0028 |  |
| [CVE-2023-53333](https://patchblox.com/security/data/cve/CVE-2023-53333.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 |  |
| [CVE-2025-39839](https://patchblox.com/security/data/cve/CVE-2025-39839.md) | High | batman-adv: fix OOB read/write in network-coding decode | 7.1 | 0.0026 |  |
| [CVE-2023-53673](https://patchblox.com/security/data/cve/CVE-2023-53673.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-53226](https://patchblox.com/security/data/cve/CVE-2023-53226.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2025-39806](https://patchblox.com/security/data/cve/CVE-2025-39806.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-39750](https://patchblox.com/security/data/cve/CVE-2025-39750.md) | High | wifi: ath12k: Correct tid cleanup when tid setup fails | 7.1 | 0.0024 |  |
| [CVE-2025-39761](https://patchblox.com/security/data/cve/CVE-2025-39761.md) | High | wifi: ath12k: Decrement TID on RX peer frag setup error handling | 7.1 | 0.0024 |  |
| [CVE-2025-39864](https://patchblox.com/security/data/cve/CVE-2025-39864.md) | High | wifi: cfg80211: fix use-after-free in cmp_bss() | 7.8 | 0.0024 |  |
| [CVE-2023-53454](https://patchblox.com/security/data/cve/CVE-2023-53454.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-53305](https://patchblox.com/security/data/cve/CVE-2023-53305.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-39860](https://patchblox.com/security/data/cve/CVE-2025-39860.md) | High | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 7.8 | 0.0023 |  |
| [CVE-2025-39995](https://patchblox.com/security/data/cve/CVE-2025-39995.md) | High | media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe | 7.1 | 0.0023 |  |
| [CVE-2025-40035](https://patchblox.com/security/data/cve/CVE-2025-40035.md) | High | Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak | 7.1 | 0.0023 |  |
| [CVE-2025-39849](https://patchblox.com/security/data/cve/CVE-2025-39849.md) | High | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 7.8 | 0.0022 |  |
| [CVE-2023-53619](https://patchblox.com/security/data/cve/CVE-2023-53619.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2023-53652](https://patchblox.com/security/data/cve/CVE-2023-53652.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2023-53374](https://patchblox.com/security/data/cve/CVE-2023-53374.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2025-39826](https://patchblox.com/security/data/cve/CVE-2025-39826.md) | High | net: rose: convert 'use' field to refcount_t | 7.0 | 0.0022 |  |
| [CVE-2023-53322](https://patchblox.com/security/data/cve/CVE-2023-53322.md) | High | kernel-azure: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53257](https://patchblox.com/security/data/cve/CVE-2023-53257.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-40036](https://patchblox.com/security/data/cve/CVE-2025-40036.md) | High | misc: fastrpc: fix possible map leak in fastrpc_put_args | 7.1 | 0.0021 |  |
| [CVE-2025-40052](https://patchblox.com/security/data/cve/CVE-2025-40052.md) | High | smb: client: fix crypto buffers in non-linear memory | 7.1 | 0.0021 |  |
| [CVE-2023-53648](https://patchblox.com/security/data/cve/CVE-2023-53648.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53722](https://patchblox.com/security/data/cve/CVE-2023-53722.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2025-40020](https://patchblox.com/security/data/cve/CVE-2025-40020.md) | High | can: peak_usb: fix shift-out-of-bounds issue | 7.1 | 0.0021 |  |
| [CVE-2023-53728](https://patchblox.com/security/data/cve/CVE-2023-53728.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53343](https://patchblox.com/security/data/cve/CVE-2023-53343.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53432](https://patchblox.com/security/data/cve/CVE-2023-53432.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-39732](https://patchblox.com/security/data/cve/CVE-2025-39732.md) | High | wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() | 7.0 | 0.0021 |  |
| [CVE-2023-53621](https://patchblox.com/security/data/cve/CVE-2023-53621.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 |  |
| [CVE-2023-53354](https://patchblox.com/security/data/cve/CVE-2023-53354.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 |  |
| [CVE-2023-53646](https://patchblox.com/security/data/cve/CVE-2023-53646.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 |  |
| [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 |  |
| [CVE-2025-39810](https://patchblox.com/security/data/cve/CVE-2025-39810.md) | High | bnxt_en: Fix memory corruption when FW resources change during ifdown | 7.8 | 0.0020 |  |
| [CVE-2025-39965](https://patchblox.com/security/data/cve/CVE-2025-39965.md) | High | xfrm: xfrm_alloc_spi shouldn't use 0 as SPI | 7.8 | 0.0020 |  |
| [CVE-2023-53357](https://patchblox.com/security/data/cve/CVE-2023-53357.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0020 |  |
| [CVE-2023-53727](https://patchblox.com/security/data/cve/CVE-2023-53727.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-38702](https://patchblox.com/security/data/cve/CVE-2025-38702.md) | High | fbdev: fix potential buffer overflow in do_register_framebuffer() | 7.8 | 0.0020 |  |
| [CVE-2025-40012](https://patchblox.com/security/data/cve/CVE-2025-40012.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix warning in smc_rx_splice() when cal... | 7.8 | 0.0020 |  |
| [CVE-2025-39686](https://patchblox.com/security/data/cve/CVE-2025-39686.md) | High | comedi: Make insn_rw_emulate_bits() do insn->n samples | 7.8 | 0.0020 |  |
| [CVE-2025-39701](https://patchblox.com/security/data/cve/CVE-2025-39701.md) | High | ACPI: pfr_update: Fix the driver update version check | 7.8 | 0.0020 |  |
| [CVE-2025-39984](https://patchblox.com/security/data/cve/CVE-2025-39984.md) | High | kernel-64kb: net: tun: Update napi->skb after XDP process (bsc#1252081). | 7.8 | 0.0020 |  |
| [CVE-2025-39850](https://patchblox.com/security/data/cve/CVE-2025-39850.md) | High | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 7.0 | 0.0020 |  |
| [CVE-2023-53365](https://patchblox.com/security/data/cve/CVE-2023-53365.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0019 |  |
| [CVE-2025-38697](https://patchblox.com/security/data/cve/CVE-2025-38697.md) | High | jfs: upper bound check of tree index in dbAllocAG | 7.8 | 0.0019 |  |
| [CVE-2025-38699](https://patchblox.com/security/data/cve/CVE-2025-38699.md) | High | scsi: bfa: Double-free fix | 7.8 | 0.0019 |  |
| [CVE-2025-39683](https://patchblox.com/security/data/cve/CVE-2025-39683.md) | High | tracing: Limit access to parser->buffer when trace_get_user failed | 7.1 | 0.0019 |  |
| [CVE-2025-40082](https://patchblox.com/security/data/cve/CVE-2025-40082.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2023-53485](https://patchblox.com/security/data/cve/CVE-2023-53485.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 |  |
| [CVE-2023-53554](https://patchblox.com/security/data/cve/CVE-2023-53554.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38685](https://patchblox.com/security/data/cve/CVE-2025-38685.md) | High | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit | 7.8 | 0.0019 |  |
| [CVE-2023-53465](https://patchblox.com/security/data/cve/CVE-2023-53465.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0019 |  |
| [CVE-2025-39743](https://patchblox.com/security/data/cve/CVE-2025-39743.md) | High | jfs: truncate good inode pages when hard link is 0 | 9.8 | 0.0018 |  |
| [CVE-2025-38698](https://patchblox.com/security/data/cve/CVE-2025-38698.md) | High | jfs: Regular file corruption check | 7.1 | 0.0018 |  |
| [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 |  |
| [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 |  |
| [CVE-2025-39987](https://patchblox.com/security/data/cve/CVE-2025-39987.md) | High | can: hi311x: populate ndo_change_mtu() to prevent buffer overflow | 7.8 | 0.0018 |  |
| [CVE-2025-39988](https://patchblox.com/security/data/cve/CVE-2025-39988.md) | High | can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow | 7.8 | 0.0018 |  |
| [CVE-2025-38736](https://patchblox.com/security/data/cve/CVE-2025-38736.md) | High | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization | 7.1 | 0.0018 |  |
| [CVE-2025-38714](https://patchblox.com/security/data/cve/CVE-2025-38714.md) | High | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 9.0 | 0.0018 |  |
| [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 |  |
| [CVE-2025-39760](https://patchblox.com/security/data/cve/CVE-2025-39760.md) | High | usb: core: config: Prevent OOB read in SS endpoint companion parsing | 7.8 | 0.0018 |  |
| [CVE-2025-38715](https://patchblox.com/security/data/cve/CVE-2025-38715.md) | High | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 7.1 | 0.0018 |  |
| [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 |  |
| [CVE-2025-38653](https://patchblox.com/security/data/cve/CVE-2025-38653.md) | High | proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al | 7.8 | 0.0018 |  |
| [CVE-2025-38735](https://patchblox.com/security/data/cve/CVE-2025-38735.md) | High | gve: prevent ethtool ops after shutdown | 7.0 | 0.0018 |  |
| [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 |  |
| [CVE-2025-38713](https://patchblox.com/security/data/cve/CVE-2025-38713.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | 7.1 | 0.0017 |  |
| [CVE-2025-40044](https://patchblox.com/security/data/cve/CVE-2025-40044.md) | High | fs: udf: fix OOB read in lengthAllocDescs handling | 7.8 | 0.0017 |  |
| [CVE-2023-53570](https://patchblox.com/security/data/cve/CVE-2023-53570.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 |  |
| [CVE-2025-39685](https://patchblox.com/security/data/cve/CVE-2025-39685.md) | High | comedi: pcl726: Prevent invalid irq number | 7.1 | 0.0017 |  |
| [CVE-2023-53179](https://patchblox.com/security/data/cve/CVE-2023-53179.md) | High | kernel-livepatch-SLE15-SP7_Update_6: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-38718](https://patchblox.com/security/data/cve/CVE-2025-38718.md) | High | sctp: linearize cloned gso packets in sctp_rcv | 7.8 | 0.0017 |  |
| [CVE-2025-39694](https://patchblox.com/security/data/cve/CVE-2025-39694.md) | High | s390/sclp: Fix SCCB present check | 7.3 | 0.0017 |  |
| [CVE-2023-53205](https://patchblox.com/security/data/cve/CVE-2023-53205.md) | High | kernel-azure: Security update for the Linux Kernel | 8.0 | 0.0017 |  |
| [CVE-2023-53495](https://patchblox.com/security/data/cve/CVE-2023-53495.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53552](https://patchblox.com/security/data/cve/CVE-2023-53552.md) | High | kernel-rt-debug-modules: kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free | 7.8 | 0.0017 |  |
| [CVE-2023-53148](https://patchblox.com/security/data/cve/CVE-2023-53148.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0017 |  |
| [CVE-2023-53539](https://patchblox.com/security/data/cve/CVE-2023-53539.md) | High | bpftool: kernel: RDMA/rxe: Fix incomplete state save in rxe_requester | 7.8 | 0.0017 |  |
| [CVE-2023-53543](https://patchblox.com/security/data/cve/CVE-2023-53543.md) | High | vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check | 7.8 | 0.0017 |  |
| [CVE-2023-53659](https://patchblox.com/security/data/cve/CVE-2023-53659.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 |  |
| [CVE-2023-53215](https://patchblox.com/security/data/cve/CVE-2023-53215.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53217](https://patchblox.com/security/data/cve/CVE-2023-53217.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53235](https://patchblox.com/security/data/cve/CVE-2023-53235.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53487](https://patchblox.com/security/data/cve/CVE-2023-53487.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53492](https://patchblox.com/security/data/cve/CVE-2023-53492.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53541](https://patchblox.com/security/data/cve/CVE-2023-53541.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53222](https://patchblox.com/security/data/cve/CVE-2023-53222.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 |  |
| [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 |  |
| [CVE-2025-39902](https://patchblox.com/security/data/cve/CVE-2025-39902.md) | High | mm/slub: avoid accessing metadata when pointer is invalid in object_err() | 7.8 | 0.0017 |  |
| [CVE-2025-39853](https://patchblox.com/security/data/cve/CVE-2025-39853.md) | High | i40e: Fix potential invalid access when MAC list is empty | 7.1 | 0.0017 |  |
| [CVE-2025-39891](https://patchblox.com/security/data/cve/CVE-2025-39891.md) | High | wifi: mwifiex: Initialize the chan_stats array to zero | 7.1 | 0.0017 |  |
| [CVE-2023-53184](https://patchblox.com/security/data/cve/CVE-2023-53184.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2023-53508](https://patchblox.com/security/data/cve/CVE-2023-53508.md) | High | kernel-syms: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-38692](https://patchblox.com/security/data/cve/CVE-2025-38692.md) | High | exfat: add cluster chain loop check for dir | 7.0 | 0.0017 |  |
| [CVE-2025-39955](https://patchblox.com/security/data/cve/CVE-2025-39955.md) | High | tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). | 7.8 | 0.0017 |  |
| [CVE-2025-40051](https://patchblox.com/security/data/cve/CVE-2025-40051.md) | High | vhost: vringh: Modify the return value check | 7.8 | 0.0017 |  |
| [CVE-2023-53615](https://patchblox.com/security/data/cve/CVE-2023-53615.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53698](https://patchblox.com/security/data/cve/CVE-2023-53698.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53311](https://patchblox.com/security/data/cve/CVE-2023-53311.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53316](https://patchblox.com/security/data/cve/CVE-2023-53316.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53500](https://patchblox.com/security/data/cve/CVE-2023-53500.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53707](https://patchblox.com/security/data/cve/CVE-2023-53707.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53238](https://patchblox.com/security/data/cve/CVE-2023-53238.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2025-39869](https://patchblox.com/security/data/cve/CVE-2025-39869.md) | High | dmaengine: ti: edma: Fix memory allocation size for queue_priority_map | 7.1 | 0.0016 |  |
| [CVE-2025-39794](https://patchblox.com/security/data/cve/CVE-2025-39794.md) | High | ARM: tegra: Use I/O memcpy to write to IRAM | 7.0 | 0.0016 |  |
| [CVE-2025-40058](https://patchblox.com/security/data/cve/CVE-2025-40058.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Disallow dirty tracking if incoheren... | 8.8 | 0.0016 |  |
| [CVE-2023-53272](https://patchblox.com/security/data/cve/CVE-2023-53272.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2023-53420](https://patchblox.com/security/data/cve/CVE-2023-53420.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2023-53185](https://patchblox.com/security/data/cve/CVE-2023-53185.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0016 |  |
| [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 |  |
| [CVE-2025-39873](https://patchblox.com/security/data/cve/CVE-2025-39873.md) | High | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB | 7.8 | 0.0016 |  |
| [CVE-2023-53187](https://patchblox.com/security/data/cve/CVE-2023-53187.md) | High | btrfs: fix use-after-free of new block group that became unused | 7.8 | 0.0016 |  |
| [CVE-2023-53263](https://patchblox.com/security/data/cve/CVE-2023-53263.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53331](https://patchblox.com/security/data/cve/CVE-2023-53331.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53479](https://patchblox.com/security/data/cve/CVE-2023-53479.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39790](https://patchblox.com/security/data/cve/CVE-2025-39790.md) | High | bus: mhi: host: Detect events pointing to unexpected TREs | 7.8 | 0.0016 |  |
| [CVE-2025-39911](https://patchblox.com/security/data/cve/CVE-2025-39911.md) | High | i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path | 7.8 | 0.0016 |  |
| [CVE-2025-39945](https://patchblox.com/security/data/cve/CVE-2025-39945.md) | High | cnic: Fix use-after-free bugs in cnic_delete_task | 7.8 | 0.0016 |  |
| [CVE-2023-53150](https://patchblox.com/security/data/cve/CVE-2023-53150.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53275](https://patchblox.com/security/data/cve/CVE-2023-53275.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53280](https://patchblox.com/security/data/cve/CVE-2023-53280.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53451](https://patchblox.com/security/data/cve/CVE-2023-53451.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Fix potential NULL pointer derefe... | 8.0 | 0.0016 |  |
| [CVE-2023-53546](https://patchblox.com/security/data/cve/CVE-2023-53546.md) | High | kernel-source-azure: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2025-39797](https://patchblox.com/security/data/cve/CVE-2025-39797.md) | High | xfrm: Duplicate SPI Handling | 7.8 | 0.0016 |  |
| [CVE-2025-39993](https://patchblox.com/security/data/cve/CVE-2025-39993.md) | High | media: rc: fix races with imon_disconnect() | 7.8 | 0.0016 |  |
| [CVE-2025-39719](https://patchblox.com/security/data/cve/CVE-2025-39719.md) | High | iio: imu: bno055: fix OOB access of hw_xlate array | 7.1 | 0.0016 |  |
| [CVE-2025-39739](https://patchblox.com/security/data/cve/CVE-2025-39739.md) | High | iommu/arm-smmu-qcom: Add SM6115 MDSS compatible | 7.0 | 0.0016 |  |
| [CVE-2023-53210](https://patchblox.com/security/data/cve/CVE-2023-53210.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2025-39697](https://patchblox.com/security/data/cve/CVE-2025-39697.md) | High | NFS: Fix a race when updating an existing write | 7.6 | 0.0016 |  |
| [CVE-2025-39969](https://patchblox.com/security/data/cve/CVE-2025-39969.md) | High | i40e: fix validation of VF state in get resources | 8.8 | 0.0016 |  |
| [CVE-2023-53493](https://patchblox.com/security/data/cve/CVE-2023-53493.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53596](https://patchblox.com/security/data/cve/CVE-2023-53596.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39870](https://patchblox.com/security/data/cve/CVE-2025-39870.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53371](https://patchblox.com/security/data/cve/CVE-2023-53371.md) | High | net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create | 8.0 | 0.0016 |  |
| [CVE-2023-53657](https://patchblox.com/security/data/cve/CVE-2023-53657.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53274](https://patchblox.com/security/data/cve/CVE-2023-53274.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53395](https://patchblox.com/security/data/cve/CVE-2023-53395.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53504](https://patchblox.com/security/data/cve/CVE-2023-53504.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53507](https://patchblox.com/security/data/cve/CVE-2023-53507.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53616](https://patchblox.com/security/data/cve/CVE-2023-53616.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53645](https://patchblox.com/security/data/cve/CVE-2023-53645.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39949](https://patchblox.com/security/data/cve/CVE-2025-39949.md) | High | qed: Don't collect too many protection override GRC elements | 7.0 | 0.0016 |  |
| [CVE-2023-53577](https://patchblox.com/security/data/cve/CVE-2023-53577.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0016 |  |
| [CVE-2023-53286](https://patchblox.com/security/data/cve/CVE-2023-53286.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53510](https://patchblox.com/security/data/cve/CVE-2023-53510.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39861](https://patchblox.com/security/data/cve/CVE-2025-39861.md) | High | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 7.8 | 0.0016 |  |
| [CVE-2025-39882](https://patchblox.com/security/data/cve/CVE-2025-39882.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-39957](https://patchblox.com/security/data/cve/CVE-2025-39957.md) | High | wifi: mac80211: increase scan_ies_len for S1G | 7.8 | 0.0016 |  |
| [CVE-2023-53426](https://patchblox.com/security/data/cve/CVE-2023-53426.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2023-53386](https://patchblox.com/security/data/cve/CVE-2023-53386.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53556](https://patchblox.com/security/data/cve/CVE-2023-53556.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39871](https://patchblox.com/security/data/cve/CVE-2025-39871.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39881](https://patchblox.com/security/data/cve/CVE-2025-39881.md) | High | kernfs: Fix UAF in polling when open file is released | 7.8 | 0.0015 |  |
| [CVE-2025-40096](https://patchblox.com/security/data/cve/CVE-2025-40096.md) | High | drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies | 7.8 | 0.0015 |  |
| [CVE-2023-53713](https://patchblox.com/security/data/cve/CVE-2023-53713.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53718](https://patchblox.com/security/data/cve/CVE-2023-53718.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Do not swap cpu_buffer during resiz... | 7.8 | 0.0015 |  |
| [CVE-2023-53729](https://patchblox.com/security/data/cve/CVE-2023-53729.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  soc: qcom: qmi_encdec: Restrict string length in... | 7.8 | 0.0015 |  |
| [CVE-2023-53733](https://patchblox.com/security/data/cve/CVE-2023-53733.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39854](https://patchblox.com/security/data/cve/CVE-2025-39854.md) | High | kernel-64kb: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297). | 7.8 | 0.0015 |  |
| [CVE-2025-39981](https://patchblox.com/security/data/cve/CVE-2025-39981.md) | High | Bluetooth: MGMT: Fix possible UAFs | 7.8 | 0.0015 |  |
| [CVE-2025-40104](https://patchblox.com/security/data/cve/CVE-2025-40104.md) | High | ixgbevf: fix mailbox API compatibility by negotiating supported features | 7.8 | 0.0015 |  |
| [CVE-2023-53559](https://patchblox.com/security/data/cve/CVE-2023-53559.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53377](https://patchblox.com/security/data/cve/CVE-2023-53377.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53446](https://patchblox.com/security/data/cve/CVE-2023-53446.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53515](https://patchblox.com/security/data/cve/CVE-2023-53515.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53560](https://patchblox.com/security/data/cve/CVE-2023-53560.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53613](https://patchblox.com/security/data/cve/CVE-2023-53613.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2023-53321](https://patchblox.com/security/data/cve/CVE-2023-53321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211_hwsim: drop short frames  While t... | 7.1 | 0.0015 |  |
| [CVE-2023-53668](https://patchblox.com/security/data/cve/CVE-2023-53668.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0015 |  |
| [CVE-2025-39721](https://patchblox.com/security/data/cve/CVE-2025-39721.md) | High | crypto: qat - flush misc workqueue during device shutdown | 7.0 | 0.0015 |  |
| [CVE-2023-53501](https://patchblox.com/security/data/cve/CVE-2023-53501.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53252](https://patchblox.com/security/data/cve/CVE-2023-53252.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-40018](https://patchblox.com/security/data/cve/CVE-2025-40018.md) | High | ipvs: Defer ip_vs_ftp unregister during netns cleanup | 7.8 | 0.0015 |  |
| [CVE-2025-40061](https://patchblox.com/security/data/cve/CVE-2025-40061.md) | High | RDMA/rxe: Fix race in do_task() when draining | 7.8 | 0.0015 |  |
| [CVE-2023-53726](https://patchblox.com/security/data/cve/CVE-2023-53726.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: csum: Fix OoB access in IP checksum code... | 7.1 | 0.0015 |  |
| [CVE-2023-53380](https://patchblox.com/security/data/cve/CVE-2023-53380.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53611](https://patchblox.com/security/data/cve/CVE-2023-53611.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2025-40088](https://patchblox.com/security/data/cve/CVE-2025-40088.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() | 7.1 | 0.0015 |  |
| [CVE-2025-39833](https://patchblox.com/security/data/cve/CVE-2025-39833.md) | High | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 7.0 | 0.0015 |  |
| [CVE-2023-53441](https://patchblox.com/security/data/cve/CVE-2023-53441.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53530](https://patchblox.com/security/data/cve/CVE-2023-53530.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53666](https://patchblox.com/security/data/cve/CVE-2023-53666.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0015 |  |
| [CVE-2023-53622](https://patchblox.com/security/data/cve/CVE-2023-53622.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0015 |  |
| [CVE-2023-53442](https://patchblox.com/security/data/cve/CVE-2023-53442.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 |  |
| [CVE-2023-53516](https://patchblox.com/security/data/cve/CVE-2023-53516.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39900](https://patchblox.com/security/data/cve/CVE-2025-39900.md) | High | kernel-default-base: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758). | 7.0 | 0.0015 |  |
| [CVE-2023-53572](https://patchblox.com/security/data/cve/CVE-2023-53572.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 |  |
| [CVE-2023-53638](https://patchblox.com/security/data/cve/CVE-2023-53638.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2023-53575](https://patchblox.com/security/data/cve/CVE-2023-53575.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0014 |  |
| [CVE-2023-53496](https://patchblox.com/security/data/cve/CVE-2023-53496.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0014 |  |
| [CVE-2023-53550](https://patchblox.com/security/data/cve/CVE-2023-53550.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0014 |  |
| [CVE-2023-53401](https://patchblox.com/security/data/cve/CVE-2023-53401.md) | High | mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() | 7.8 | 0.0014 |  |
| [CVE-2025-38008](https://patchblox.com/security/data/cve/CVE-2025-38008.md) | High | kernel-64kb: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). | 7.0 | 0.0014 |  |
| [CVE-2023-53665](https://patchblox.com/security/data/cve/CVE-2023-53665.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0013 |  |
| [CVE-2023-53151](https://patchblox.com/security/data/cve/CVE-2023-53151.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0012 |  |
| [CVE-2025-39759](https://patchblox.com/security/data/cve/CVE-2025-39759.md) | High | btrfs: qgroup: fix race between quota disable and quota rescan ioctl | 7.0 | 0.0012 |  |
| [CVE-2025-39832](https://patchblox.com/security/data/cve/CVE-2025-39832.md) | High | net/mlx5: Fix lockdep assertion on sync reset unload event | 7.0 | 0.0012 |  |
| [CVE-2023-53581](https://patchblox.com/security/data/cve/CVE-2023-53581.md) | High | kernel-abi-stablelists: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate) | 8.0 | 0.0011 |  |
| [CVE-2025-39751](https://patchblox.com/security/data/cve/CVE-2025-39751.md) | High | ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control | 7.8 | n/a |  |
| [CVE-2023-3772](https://patchblox.com/security/data/cve/CVE-2023-3772.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 |  |
| [CVE-2025-39758](https://patchblox.com/security/data/cve/CVE-2025-39758.md) | Routine | RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages | 5.5 | 0.0042 |  |
| [CVE-2023-53360](https://patchblox.com/security/data/cve/CVE-2023-53360.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0041 |  |
| [CVE-2025-39948](https://patchblox.com/security/data/cve/CVE-2025-39948.md) | Routine | kernel-64kb: ice: fix Rx page leak on multi-buffer frames (bsc#1251233). | 6.4 | 0.0040 |  |
| [CVE-2023-53463](https://patchblox.com/security/data/cve/CVE-2023-53463.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0036 |  |
| [CVE-2023-53491](https://patchblox.com/security/data/cve/CVE-2023-53491.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0035 |  |
| [CVE-2023-53597](https://patchblox.com/security/data/cve/CVE-2023-53597.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2025-40011](https://patchblox.com/security/data/cve/CVE-2025-40011.md) | Routine | drm/gma500: Fix null dereference in hdmi teardown | 5.5 | 0.0026 |  |
| [CVE-2025-40016](https://patchblox.com/security/data/cve/CVE-2025-40016.md) | Routine | media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID | 6.2 | 0.0025 |  |
| [CVE-2025-39726](https://patchblox.com/security/data/cve/CVE-2025-39726.md) | Routine | s390/ism: fix concurrency management in ism_cmd() | 5.5 | 0.0025 |  |
| [CVE-2025-40013](https://patchblox.com/security/data/cve/CVE-2025-40013.md) | Routine | ASoC: qcom: audioreach: fix potential null pointer dereference | 5.5 | 0.0025 |  |
| [CVE-2025-40078](https://patchblox.com/security/data/cve/CVE-2025-40078.md) | Routine | bpf: Explicitly check accesses to bpf_sock_addr | 5.5 | 0.0025 |  |
| [CVE-2025-40010](https://patchblox.com/security/data/cve/CVE-2025-40010.md) | Routine | afs: Fix potential null pointer dereference in afs_put_server | 5.5 | 0.0024 |  |
| [CVE-2025-39848](https://patchblox.com/security/data/cve/CVE-2025-39848.md) | Routine | ax25: properly unshare skbs in ax25_kiss_rcv() | 5.5 | 0.0024 |  |
| [CVE-2023-53462](https://patchblox.com/security/data/cve/CVE-2023-53462.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-53731](https://patchblox.com/security/data/cve/CVE-2023-53731.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-39827](https://patchblox.com/security/data/cve/CVE-2025-39827.md) | Routine | net: rose: include node references in rose_neigh refcount | 5.5 | 0.0023 |  |
| [CVE-2025-40049](https://patchblox.com/security/data/cve/CVE-2025-40049.md) | Routine | Squashfs: fix uninit-value in squashfs_get_parent | 5.5 | 0.0023 |  |
| [CVE-2023-53704](https://patchblox.com/security/data/cve/CVE-2023-53704.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-40029](https://patchblox.com/security/data/cve/CVE-2025-40029.md) | Routine | bus: fsl-mc: Check return value of platform_get_resource() | 5.5 | 0.0022 |  |
| [CVE-2025-40060](https://patchblox.com/security/data/cve/CVE-2025-40060.md) | Routine | coresight: trbe: Return NULL pointer for allocation failures | 5.5 | 0.0022 |  |
| [CVE-2025-40032](https://patchblox.com/security/data/cve/CVE-2025-40032.md) | Routine | PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release | 5.5 | 0.0021 |  |
| [CVE-2025-40056](https://patchblox.com/security/data/cve/CVE-2025-40056.md) | Routine | vhost: vringh: Fix copy_to_iter return value check | 5.5 | 0.0021 |  |
| [CVE-2023-53697](https://patchblox.com/security/data/cve/CVE-2023-53697.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0021 |  |
| [CVE-2023-53708](https://patchblox.com/security/data/cve/CVE-2023-53708.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.0 | 0.0021 |  |
| [CVE-2023-53693](https://patchblox.com/security/data/cve/CVE-2023-53693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53699](https://patchblox.com/security/data/cve/CVE-2023-53699.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-40037](https://patchblox.com/security/data/cve/CVE-2025-40037.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53703](https://patchblox.com/security/data/cve/CVE-2023-53703.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-39997](https://patchblox.com/security/data/cve/CVE-2025-39997.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53725](https://patchblox.com/security/data/cve/CVE-2023-53725.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53336](https://patchblox.com/security/data/cve/CVE-2023-53336.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53631](https://patchblox.com/security/data/cve/CVE-2023-53631.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53647](https://patchblox.com/security/data/cve/CVE-2023-53647.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53653](https://patchblox.com/security/data/cve/CVE-2023-53653.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53650](https://patchblox.com/security/data/cve/CVE-2023-53650.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-40085](https://patchblox.com/security/data/cve/CVE-2025-40085.md) | Routine | ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card | 5.8 | 0.0021 |  |
| [CVE-2023-53339](https://patchblox.com/security/data/cve/CVE-2023-53339.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-53730](https://patchblox.com/security/data/cve/CVE-2023-53730.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_17: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-38706](https://patchblox.com/security/data/cve/CVE-2025-38706.md) | Routine | ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | 5.5 | 0.0020 |  |
| [CVE-2025-40005](https://patchblox.com/security/data/cve/CVE-2025-40005.md) | Routine | spi: cadence-quadspi: Implement refcount to handle unbind during busy | 6.6 | 0.0020 |  |
| [CVE-2023-53352](https://patchblox.com/security/data/cve/CVE-2023-53352.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-53617](https://patchblox.com/security/data/cve/CVE-2023-53617.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-53618](https://patchblox.com/security/data/cve/CVE-2023-53618.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-53649](https://patchblox.com/security/data/cve/CVE-2023-53649.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-40071](https://patchblox.com/security/data/cve/CVE-2025-40071.md) | Routine | tty: n_gsm: Don't block input queue by waiting MSC | 6.1 | 0.0020 |  |
| [CVE-2025-39991](https://patchblox.com/security/data/cve/CVE-2025-39991.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2023-53342](https://patchblox.com/security/data/cve/CVE-2023-53342.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-40100](https://patchblox.com/security/data/cve/CVE-2025-40100.md) | Routine | btrfs: do not assert we found block group item when creating free space tree | 5.5 | 0.0020 |  |
| [CVE-2025-40062](https://patchblox.com/security/data/cve/CVE-2025-40062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2023-53540](https://patchblox.com/security/data/cve/CVE-2023-53540.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 |  |
| [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 |  |
| [CVE-2023-53356](https://patchblox.com/security/data/cve/CVE-2023-53356.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-39684](https://patchblox.com/security/data/cve/CVE-2025-39684.md) | Routine | comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() | 5.5 | 0.0019 |  |
| [CVE-2023-53362](https://patchblox.com/security/data/cve/CVE-2023-53362.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2023-53350](https://patchblox.com/security/data/cve/CVE-2023-53350.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2023-53632](https://patchblox.com/security/data/cve/CVE-2023-53632.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2023-53633](https://patchblox.com/security/data/cve/CVE-2023-53633.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2023-53721](https://patchblox.com/security/data/cve/CVE-2023-53721.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0018 |  |
| [CVE-2025-40091](https://patchblox.com/security/data/cve/CVE-2025-40091.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0018 |  |
| [CVE-2025-38683](https://patchblox.com/security/data/cve/CVE-2025-38683.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39676](https://patchblox.com/security/data/cve/CVE-2025-39676.md) | Routine | scsi: qla4xxx: Prevent a potential error pointer dereference | 5.5 | 0.0018 |  |
| [CVE-2025-39756](https://patchblox.com/security/data/cve/CVE-2025-39756.md) | Routine | fs: Prevent file descriptor table allocations exceeding INT_MAX | 5.5 | 0.0018 |  |
| [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 |  |
| [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 |  |
| [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2023-53369](https://patchblox.com/security/data/cve/CVE-2023-53369.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 |  |
| [CVE-2025-39812](https://patchblox.com/security/data/cve/CVE-2025-39812.md) | Routine | sctp: initialize more fields in sctp_v6_from_sk() | 5.5 | 0.0018 |  |
| [CVE-2023-53367](https://patchblox.com/security/data/cve/CVE-2023-53367.md) | Routine | accel/habanalabs: fix mem leak in capture user mappings | 5.5 | 0.0017 |  |
| [CVE-2025-38712](https://patchblox.com/security/data/cve/CVE-2025-38712.md) | Routine | hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() | 5.5 | 0.0017 |  |
| [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 |  |
| [CVE-2023-53545](https://patchblox.com/security/data/cve/CVE-2023-53545.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53189](https://patchblox.com/security/data/cve/CVE-2023-53189.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53314](https://patchblox.com/security/data/cve/CVE-2023-53314.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53660](https://patchblox.com/security/data/cve/CVE-2023-53660.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39675](https://patchblox.com/security/data/cve/CVE-2025-39675.md) | Routine | drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() | 5.5 | 0.0017 |  |
| [CVE-2025-39693](https://patchblox.com/security/data/cve/CVE-2025-39693.md) | Routine | drm/amd/display: Avoid a NULL pointer dereference | 5.5 | 0.0017 |  |
| [CVE-2023-53201](https://patchblox.com/security/data/cve/CVE-2023-53201.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-53364](https://patchblox.com/security/data/cve/CVE-2023-53364.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39920](https://patchblox.com/security/data/cve/CVE-2025-39920.md) | Routine | pcmcia: Add error handling for add_interval() in do_validate_mem() | 5.5 | 0.0017 |  |
| [CVE-2023-53421](https://patchblox.com/security/data/cve/CVE-2023-53421.md) | Routine | blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() | 5.5 | 0.0017 |  |
| [CVE-2025-39679](https://patchblox.com/security/data/cve/CVE-2025-39679.md) | Routine | drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). | 5.5 | 0.0017 |  |
| [CVE-2025-38725](https://patchblox.com/security/data/cve/CVE-2025-38725.md) | Routine | net: usb: asix_devices: add phy_mask for ax88772 mdio bus | 5.5 | 0.0016 |  |
| [CVE-2025-39846](https://patchblox.com/security/data/cve/CVE-2025-39846.md) | Routine | pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() | 5.5 | 0.0016 |  |
| [CVE-2025-39847](https://patchblox.com/security/data/cve/CVE-2025-39847.md) | Routine | ppp: fix memory leak in pad_compress_skb | 5.5 | 0.0016 |  |
| [CVE-2023-53313](https://patchblox.com/security/data/cve/CVE-2023-53313.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53456](https://patchblox.com/security/data/cve/CVE-2023-53456.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53428](https://patchblox.com/security/data/cve/CVE-2023-53428.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53147](https://patchblox.com/security/data/cve/CVE-2023-53147.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53165](https://patchblox.com/security/data/cve/CVE-2023-53165.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53167](https://patchblox.com/security/data/cve/CVE-2023-53167.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53174](https://patchblox.com/security/data/cve/CVE-2023-53174.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53196](https://patchblox.com/security/data/cve/CVE-2023-53196.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53220](https://patchblox.com/security/data/cve/CVE-2023-53220.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53304](https://patchblox.com/security/data/cve/CVE-2023-53304.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53309](https://patchblox.com/security/data/cve/CVE-2023-53309.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53457](https://patchblox.com/security/data/cve/CVE-2023-53457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  FS: JFS: Fix null-ptr-deref Read in txBegin   Sy... | 5.5 | 0.0016 |  |
| [CVE-2023-53472](https://patchblox.com/security/data/cve/CVE-2023-53472.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53480](https://patchblox.com/security/data/cve/CVE-2023-53480.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53488](https://patchblox.com/security/data/cve/CVE-2023-53488.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53505](https://patchblox.com/security/data/cve/CVE-2023-53505.md) | Routine | kernel-livepatch-SLE15-SP6_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53518](https://patchblox.com/security/data/cve/CVE-2023-53518.md) | Routine | kernel-livepatch-SLE15-SP6_Update_16: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53548](https://patchblox.com/security/data/cve/CVE-2023-53548.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53585](https://patchblox.com/security/data/cve/CVE-2023-53585.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53662](https://patchblox.com/security/data/cve/CVE-2023-53662.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53670](https://patchblox.com/security/data/cve/CVE-2023-53670.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39763](https://patchblox.com/security/data/cve/CVE-2025-39763.md) | Routine | ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered | 5.5 | 0.0016 |  |
| [CVE-2023-53175](https://patchblox.com/security/data/cve/CVE-2023-53175.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53221](https://patchblox.com/security/data/cve/CVE-2023-53221.md) | Routine | bpf: Fix memleak due to fentry attach failure | 5.5 | 0.0016 |  |
| [CVE-2023-53230](https://patchblox.com/security/data/cve/CVE-2023-53230.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53231](https://patchblox.com/security/data/cve/CVE-2023-53231.md) | Routine | erofs: Fix detection of atomic context | 5.5 | 0.0016 |  |
| [CVE-2023-53243](https://patchblox.com/security/data/cve/CVE-2023-53243.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: add handling for RAID1C23/DUP to btrfs_re... | 5.5 | 0.0016 |  |
| [CVE-2023-53264](https://patchblox.com/security/data/cve/CVE-2023-53264.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53461](https://patchblox.com/security/data/cve/CVE-2023-53461.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53654](https://patchblox.com/security/data/cve/CVE-2023-53654.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  octeontx2-af: Add validation before accessing cg... | 5.5 | 0.0016 |  |
| [CVE-2023-53656](https://patchblox.com/security/data/cve/CVE-2023-53656.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39800](https://patchblox.com/security/data/cve/CVE-2025-39800.md) | Routine | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 5.5 | 0.0016 |  |
| [CVE-2023-53152](https://patchblox.com/security/data/cve/CVE-2023-53152.md) | Routine | drm/amdgpu: fix calltrace warning in amddrm_buddy_fini | 5.5 | 0.0016 |  |
| [CVE-2023-53177](https://patchblox.com/security/data/cve/CVE-2023-53177.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53181](https://patchblox.com/security/data/cve/CVE-2023-53181.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53195](https://patchblox.com/security/data/cve/CVE-2023-53195.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53207](https://patchblox.com/security/data/cve/CVE-2023-53207.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53208](https://patchblox.com/security/data/cve/CVE-2023-53208.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53209](https://patchblox.com/security/data/cve/CVE-2023-53209.md) | Routine | wifi: mac80211_hwsim: Fix possible NULL dereference | 5.5 | 0.0016 |  |
| [CVE-2023-53312](https://patchblox.com/security/data/cve/CVE-2023-53312.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53370](https://patchblox.com/security/data/cve/CVE-2023-53370.md) | Routine | drm/amdgpu: fix memory leak in mes self test | 5.5 | 0.0016 |  |
| [CVE-2023-53448](https://patchblox.com/security/data/cve/CVE-2023-53448.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53538](https://patchblox.com/security/data/cve/CVE-2023-53538.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53583](https://patchblox.com/security/data/cve/CVE-2023-53583.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53588](https://patchblox.com/security/data/cve/CVE-2023-53588.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39845](https://patchblox.com/security/data/cve/CVE-2025-39845.md) | Routine | x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() | 5.5 | 0.0016 |  |
| [CVE-2023-53526](https://patchblox.com/security/data/cve/CVE-2023-53526.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53674](https://patchblox.com/security/data/cve/CVE-2023-53674.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-39706](https://patchblox.com/security/data/cve/CVE-2025-39706.md) | Routine | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | 5.5 | 0.0016 |  |
| [CVE-2023-53658](https://patchblox.com/security/data/cve/CVE-2023-53658.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2023-53394](https://patchblox.com/security/data/cve/CVE-2023-53394.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.7 | 0.0015 |  |
| [CVE-2023-53429](https://patchblox.com/security/data/cve/CVE-2023-53429.md) | Routine | btrfs: don't check PageError in __extent_writepage | 5.5 | 0.0015 |  |
| [CVE-2023-53531](https://patchblox.com/security/data/cve/CVE-2023-53531.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53557](https://patchblox.com/security/data/cve/CVE-2023-53557.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39801](https://patchblox.com/security/data/cve/CVE-2025-39801.md) | Routine | usb: dwc3: Remove WARN_ON for device endpoint command timeouts | 6.2 | 0.0015 |  |
| [CVE-2025-39876](https://patchblox.com/security/data/cve/CVE-2025-39876.md) | Routine | net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() | 5.5 | 0.0015 |  |
| [CVE-2025-39923](https://patchblox.com/security/data/cve/CVE-2025-39923.md) | Routine | dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees | 5.5 | 0.0015 |  |
| [CVE-2023-53384](https://patchblox.com/security/data/cve/CVE-2023-53384.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53579](https://patchblox.com/security/data/cve/CVE-2023-53579.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53292](https://patchblox.com/security/data/cve/CVE-2023-53292.md) | Routine | blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none | 5.5 | 0.0015 |  |
| [CVE-2025-39772](https://patchblox.com/security/data/cve/CVE-2025-39772.md) | Routine | drm/hisilicon/hibmc: fix the hibmc loaded failed bug | 5.5 | 0.0015 |  |
| [CVE-2025-39844](https://patchblox.com/security/data/cve/CVE-2025-39844.md) | Routine | mm: move page table sync declarations to linux/pgtable.h | 5.5 | 0.0015 |  |
| [CVE-2025-39937](https://patchblox.com/security/data/cve/CVE-2025-39937.md) | Routine | net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer | 5.5 | 0.0015 |  |
| [CVE-2023-53245](https://patchblox.com/security/data/cve/CVE-2023-53245.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53249](https://patchblox.com/security/data/cve/CVE-2023-53249.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53255](https://patchblox.com/security/data/cve/CVE-2023-53255.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: stratix10-svc: Fix a potential resourc... | 5.5 | 0.0015 |  |
| [CVE-2023-53288](https://patchblox.com/security/data/cve/CVE-2023-53288.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53291](https://patchblox.com/security/data/cve/CVE-2023-53291.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53324](https://patchblox.com/security/data/cve/CVE-2023-53324.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm/mdp5: Don't leak some plane state  Appar... | 5.5 | 0.0015 |  |
| [CVE-2023-53379](https://patchblox.com/security/data/cve/CVE-2023-53379.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53397](https://patchblox.com/security/data/cve/CVE-2023-53397.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53425](https://patchblox.com/security/data/cve/CVE-2023-53425.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53436](https://patchblox.com/security/data/cve/CVE-2023-53436.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53568](https://patchblox.com/security/data/cve/CVE-2023-53568.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  s390/zcrypt: don't leak memory if dev_set_name()... | 5.5 | 0.0015 |  |
| [CVE-2023-53672](https://patchblox.com/security/data/cve/CVE-2023-53672.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53681](https://patchblox.com/security/data/cve/CVE-2023-53681.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53687](https://patchblox.com/security/data/cve/CVE-2023-53687.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39934](https://patchblox.com/security/data/cve/CVE-2025-39934.md) | Routine | drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ | 5.5 | 0.0015 |  |
| [CVE-2025-39938](https://patchblox.com/security/data/cve/CVE-2025-39938.md) | Routine | ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed | 5.5 | 0.0015 |  |
| [CVE-2023-53251](https://patchblox.com/security/data/cve/CVE-2023-53251.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53287](https://patchblox.com/security/data/cve/CVE-2023-53287.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53328](https://patchblox.com/security/data/cve/CVE-2023-53328.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53391](https://patchblox.com/security/data/cve/CVE-2023-53391.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53424](https://patchblox.com/security/data/cve/CVE-2023-53424.md) | Routine | clk: mediatek: fix of_iomap memory leak | 5.5 | 0.0015 |  |
| [CVE-2023-53438](https://patchblox.com/security/data/cve/CVE-2023-53438.md) | Routine | x86/MCE: Always save CS register on AMD Zen IF Poison errors | 5.5 | 0.0015 |  |
| [CVE-2023-53563](https://patchblox.com/security/data/cve/CVE-2023-53563.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53601](https://patchblox.com/security/data/cve/CVE-2023-53601.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53603](https://patchblox.com/security/data/cve/CVE-2023-53603.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-39895](https://patchblox.com/security/data/cve/CVE-2025-39895.md) | Routine | sched: Fix sched_numa_find_nth_cpu() if mask offline | 5.5 | 0.0015 |  |
| [CVE-2025-39947](https://patchblox.com/security/data/cve/CVE-2025-39947.md) | Routine | net/mlx5e: Harden uplink netdev access against device unbind | 5.5 | 0.0015 |  |
| [CVE-2023-53170](https://patchblox.com/security/data/cve/CVE-2023-53170.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53248](https://patchblox.com/security/data/cve/CVE-2023-53248.md) | Routine | drm/amdgpu: install stub fence into potential unused fence pointers | 6.0 | 0.0015 |  |
| [CVE-2023-53206](https://patchblox.com/security/data/cve/CVE-2023-53206.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53247](https://patchblox.com/security/data/cve/CVE-2023-53247.md) | Routine | btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand | 5.5 | 0.0015 |  |
| [CVE-2023-53258](https://patchblox.com/security/data/cve/CVE-2023-53258.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix possible underflow for disp... | 5.5 | 0.0015 |  |
| [CVE-2023-53260](https://patchblox.com/security/data/cve/CVE-2023-53260.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53323](https://patchblox.com/security/data/cve/CVE-2023-53323.md) | Routine | ext2/dax: Fix ext2_setsize when len is page aligned | 5.5 | 0.0015 |  |
| [CVE-2023-53325](https://patchblox.com/security/data/cve/CVE-2023-53325.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53385](https://patchblox.com/security/data/cve/CVE-2023-53385.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53444](https://patchblox.com/security/data/cve/CVE-2023-53444.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/ttm: fix bulk_move corruption when adding a... | 5.5 | 0.0015 |  |
| [CVE-2023-53523](https://patchblox.com/security/data/cve/CVE-2023-53523.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53528](https://patchblox.com/security/data/cve/CVE-2023-53528.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53558](https://patchblox.com/security/data/cve/CVE-2023-53558.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53574](https://patchblox.com/security/data/cve/CVE-2023-53574.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: delete timer and free skb queue whe... | 5.5 | 0.0015 |  |
| [CVE-2023-53593](https://patchblox.com/security/data/cve/CVE-2023-53593.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53602](https://patchblox.com/security/data/cve/CVE-2023-53602.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53663](https://patchblox.com/security/data/cve/CVE-2023-53663.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2023-53180](https://patchblox.com/security/data/cve/CVE-2023-53180.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53319](https://patchblox.com/security/data/cve/CVE-2023-53319.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53553](https://patchblox.com/security/data/cve/CVE-2023-53553.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2023-53599](https://patchblox.com/security/data/cve/CVE-2023-53599.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-38681](https://patchblox.com/security/data/cve/CVE-2025-38681.md) | Routine | mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | 5.5 | 0.0014 |  |
| [CVE-2023-53368](https://patchblox.com/security/data/cve/CVE-2023-53368.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0014 |  |
| [CVE-2025-38687](https://patchblox.com/security/data/cve/CVE-2025-38687.md) | Routine | comedi: fix race between polling and detaching | 5.5 | 0.0013 |  |
| [CVE-2023-53686](https://patchblox.com/security/data/cve/CVE-2023-53686.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53303](https://patchblox.com/security/data/cve/CVE-2023-53303.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53527](https://patchblox.com/security/data/cve/CVE-2023-53527.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53555](https://patchblox.com/security/data/cve/CVE-2023-53555.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2023-53580](https://patchblox.com/security/data/cve/CVE-2023-53580.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_17: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 |  |
| [CVE-2023-53490](https://patchblox.com/security/data/cve/CVE-2023-53490.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0012 |  |
| [CVE-2023-53204](https://patchblox.com/security/data/cve/CVE-2023-53204.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.3 | 0.0012 |  |
| [CVE-2023-53520](https://patchblox.com/security/data/cve/CVE-2023-53520.md) | Routine | kernel-docs: Security update for the Linux Kernel | 4.7 | 0.0012 |  |
| [CVE-2023-53519](https://patchblox.com/security/data/cve/CVE-2023-53519.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2023-53447](https://patchblox.com/security/data/cve/CVE-2023-53447.md) | Routine | f2fs: don't reset unchangable mount option in f2fs_remount() | 4.7 | 0.0011 |  |
| [CVE-2025-39889](https://patchblox.com/security/data/cve/CVE-2025-39889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2023-53183](https://patchblox.com/security/data/cve/CVE-2023-53183.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.